Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/39E4CCA4BC0411EAA3E6684AC4F9AE02.roa
File:                     39E4CCA4BC0411EAA3E6684AC4F9AE02.roa (raw, json)
Hash identifier:          7IEuAFNfndpvQ9vrbfsL3DDcgaszf0JgMSR6jjx8LP8=
Subject key identifier:   63:F7:15:CF:BB:76:19:67:3A:FF:97:DF:04:57:69:62:8E:16:FF:33
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0724
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/39E4CCA4BC0411EAA3E6684AC4F9AE02.roa
Signing time:             Mon 08 May 2023 11:19:26 +0000
ROA not before:           Mon 08 May 2023 11:19:26 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     139468
IP address blocks:        45.116.134.0/24 maxlen: 24
                          103.240.12.0/22 maxlen: 22
                          103.245.6.0/24 maxlen: 24
                          103.245.7.0/24 maxlen: 24
                          2405:9e40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: May  8 11:19:26 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=6458dabe-9669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:93:3c:ab:5d:7e:0d:75:97:71:8a:e1:40:
                    69:d7:86:f0:4a:ce:d5:d9:7e:86:cc:b2:c0:7e:58:
                    58:7b:3f:49:df:92:a7:c5:af:3f:a7:9c:9d:5a:2e:
                    a6:0d:de:c2:20:6b:44:36:d5:70:5f:54:a7:ab:2a:
                    aa:fd:48:1b:12:61:63:0b:3f:94:87:14:7f:b8:ef:
                    40:c6:2e:37:e2:0c:e5:0d:22:2e:1b:fe:11:f9:a6:
                    b3:15:85:47:19:8d:58:97:f8:c8:c3:25:16:83:61:
                    5b:70:71:0e:b5:21:4d:25:9c:df:02:a4:c0:c1:49:
                    4d:9e:d5:b0:cb:56:4e:73:85:91:ca:28:b8:38:d3:
                    32:18:03:84:ad:7d:37:f1:a5:04:8d:fb:d3:df:34:
                    01:58:de:d2:27:2b:06:ea:f9:52:c3:b8:b6:c5:3b:
                    9d:51:a8:03:e2:3c:32:89:e0:49:c9:01:c8:7e:63:
                    3c:e9:40:cd:55:a2:95:9a:95:8f:e7:90:76:8b:41:
                    da:da:11:7e:94:a0:b6:d6:7a:1f:74:e3:f3:47:d4:
                    04:cb:6f:d0:1d:dc:39:7d:bf:e7:76:f4:b9:8e:2b:
                    72:45:84:df:e1:eb:e9:13:3e:df:77:83:6f:2e:fc:
                    e6:73:5d:b8:b5:2b:e4:5c:a0:ce:5e:5a:e3:a2:f0:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:15:CF:BB:76:19:67:3A:FF:97:DF:04:57:69:62:8E:16:FF:33
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/39E4CCA4BC0411EAA3E6684AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.134.0/24
                  103.240.12.0/22
                  103.245.6.0/23
                IPv6:
                  2405:9e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:0e:66:da:7a:79:14:e7:cb:64:36:3c:c0:9f:70:38:b7:
         d3:f2:97:82:e3:96:33:5d:68:86:58:31:07:c5:a2:bb:21:44:
         dc:43:a1:8e:5e:86:b2:64:6b:f1:97:43:16:43:9e:27:2f:ba:
         85:a6:d5:7a:82:a2:68:3e:83:1c:6e:ed:86:e7:e0:10:e3:59:
         88:29:11:bf:00:74:2f:02:dc:a3:f5:e0:bf:dc:2d:19:cb:b1:
         ba:5a:b4:a4:b3:e8:4b:ae:df:ac:f0:0e:c4:94:e2:02:72:21:
         94:41:69:f8:a8:ae:6c:a4:49:95:a0:1b:02:dd:a0:8c:1e:2c:
         60:b6:26:7f:0a:2d:85:1a:d3:ca:3d:6d:b0:9e:f1:6e:16:ed:
         4f:96:7d:d8:bf:2f:e4:7e:94:c2:09:fc:f3:8d:be:ff:db:9d:
         9c:99:45:d7:66:68:ec:b6:1e:8d:50:6f:67:6c:c1:d8:b3:8f:
         0d:f0:72:34:63:40:02:1d:85:38:d5:a4:c6:b3:04:52:12:25:
         35:ea:2e:02:8d:5d:48:4d:83:b3:8f:f4:49:ad:59:16:d1:09:
         9a:9a:40:64:13:5a:6e:94:0a:9d:f1:78:52:1f:82:f7:f2:8a:
         39:90:65:c3:68:a3:63:52:7c:15:33:91:33:ed:b4:92:e9:74:
         3e:68:d1:99
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjMwNTA4MTExOTI2WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDU4ZGFiZS05NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJeTPKtdfg11l3GK4UBp14bwSs7V2X6GzLLAflhYez9J35Knxa8/p5ydWi6m
Dd7CIGtENtVwX1Snqyqq/UgbEmFjCz+UhxR/uO9Axi434gzlDSIuG/4R+aazFYVH
GY1Yl/jIwyUWg2FbcHEOtSFNJZzfAqTAwUlNntWwy1ZOc4WRyii4ONMyGAOErX03
8aUEjfvT3zQBWN7SJysG6vlSw7i2xTudUagD4jwyieBJyQHIfmM86UDNVaKVmpWP
55B2i0Ha2hF+lKC21nofdOPzR9QEy2/QHdw5fb/ndvS5jityRYTf4evpEz7fd4Nv
Lvzmc124tSvkXKDOXlrjovCB2QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGP3Fc+7
dhlnOv+X3wRXaWKOFv8zMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvMzlFNENDQTRC
QzA0MTFFQUEzRTY2ODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAAtdIYDBAJn8AwDBAFn9QYwDQQCAAIwBwMFACQFnkAwDQYJ
KoZIhvcNAQELBQADggEBAErrDmbaenkU58tkNjzAn3A4t9Pyl4LjljNdaIZYMQfF
orshRNxDoY5ehrJka/GXQxZDnicvuoWm1XqComg+gxxu7Ybn4BDjWYgpEb8AdC8C
3KP14L/cLRnLsbpatKSz6Euu36zwDsSU4gJyIZRBafiormykSZWgGwLdoIweLGC2
Jn8KLYUa08o9bbCe8W4W7U+Wfdi/L+R+lMIJ/PONvv/bnZyZRddmaOy2Ho1Qb2ds
wdizjw3wcjRjQAIdhTjVpMazBFISJTXqLgKNXUhNg7OP9EmtWRbRCZqaQGQTWm6U
Cp3xeFIfgvfyijmQZcNoo2NSfBUzkTPttJLpdD5o0Zk=
-----END CERTIFICATE-----