Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/1511E5568F3B11EA835DA74EC4F9AE02.roa
File:                     1511E5568F3B11EA835DA74EC4F9AE02.roa (raw, json)
Hash identifier:          ohtZj7JpxjVHhp2U/UGctlNVW/epFClwGDfyHjvE9bU=
Subject key identifier:   AB:BB:82:74:E2:6C:A7:48:D6:DF:92:16:5F:CC:53:E0:42:23:9C:60
Certificate issuer:       /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial:       07CE
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/1511E5568F3B11EA835DA74EC4F9AE02.roa
Signing time:             Sun 29 Jan 2023 20:08:31 +0000
ROA not before:           Sun 29 Jan 2023 20:08:31 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     45355
IP address blocks:        103.101.240.0/22 maxlen: 22
                          103.101.240.0/23 maxlen: 23
                          103.101.242.0/24 maxlen: 24
                          2401:d7c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
        Validity
            Not Before: Jan 29 20:08:31 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=63d6d23f-7c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:43:4f:51:ed:dd:dd:89:01:2f:1a:b7:3d:
                    0b:ef:79:20:61:42:15:44:2f:88:70:e4:13:a4:97:
                    25:86:40:35:5c:76:86:17:8a:d6:93:5a:68:eb:90:
                    85:02:e7:2f:97:69:20:67:45:ff:d3:d2:b5:3e:cb:
                    53:52:50:e6:99:64:b5:db:b1:b5:70:a4:0c:d5:64:
                    90:ad:fb:95:a5:a2:0a:47:68:d6:a4:1a:70:c7:4e:
                    c4:e0:94:5a:8e:b9:42:ca:d6:e9:93:d4:a6:b1:b9:
                    4f:c6:3d:30:51:5a:bd:61:20:91:e8:e5:6d:a8:80:
                    94:98:d5:4f:0e:49:bf:87:57:d7:e0:f7:35:43:ac:
                    01:92:e3:65:7c:58:e4:8f:a4:4f:a3:71:5b:a3:1f:
                    fe:eb:9f:64:32:6c:42:51:d2:ba:94:b2:e3:ed:00:
                    96:7c:97:6a:6f:b4:b2:53:16:e2:10:bb:94:01:57:
                    df:d3:ab:2b:b8:b8:7b:a5:d7:61:a8:2e:94:9c:39:
                    bd:1a:3e:69:eb:92:82:8a:16:b7:35:ef:c8:8a:7b:
                    df:13:5d:25:4b:83:d0:6e:81:aa:bf:e0:b6:ba:b1:
                    a0:19:9d:91:8c:bf:18:d0:ba:ad:50:f1:d1:4a:7b:
                    f3:0d:54:91:51:ff:6b:78:ac:91:46:d6:48:f3:76:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BB:82:74:E2:6C:A7:48:D6:DF:92:16:5F:CC:53:E0:42:23:9C:60
            X509v3 Authority Key Identifier:
                keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/1511E5568F3B11EA835DA74EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.240.0/22
                IPv6:
                  2401:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:49:3c:e2:a7:c2:55:1d:41:c6:0c:20:ef:f7:34:c3:5f:
         cf:73:6c:fd:55:15:d7:e3:52:ab:ff:03:57:3e:6c:4d:9c:1e:
         d3:f7:85:e9:9c:05:39:80:37:3c:88:1f:96:ae:ba:b4:73:3d:
         b9:51:be:65:66:e0:fa:e7:32:d9:05:b9:bf:88:bc:1d:ef:69:
         ce:02:ed:5b:ee:60:ac:51:e1:e0:51:b0:f7:a3:ad:f8:79:b2:
         6c:02:3d:54:c7:3c:47:e1:d7:f8:86:79:bb:8b:a6:33:bc:f1:
         26:fe:46:a1:fc:97:4a:27:4d:a3:51:70:fb:98:01:dd:d0:4d:
         1a:32:ed:1b:48:36:38:ca:a8:93:15:0c:78:fd:f3:0c:b9:69:
         31:ef:3c:e3:8b:31:bd:f7:de:03:15:9d:ad:f9:c3:fd:66:6a:
         ca:e7:84:ea:a2:d6:48:bf:4e:57:54:04:0e:31:66:4c:56:86:
         60:79:56:ba:f0:02:e0:ab:c2:c9:cf:f8:de:c3:0d:80:fc:4a:
         d9:92:a8:67:7b:b9:b0:c8:de:ab:36:fd:e5:0a:5c:0d:f2:ca:
         bf:f5:fd:8f:a0:98:97:8c:97:01:b1:d2:f3:1b:50:24:62:ae:
         29:5e:5b:1a:b7:df:17:47:6a:ac:0c:b4:9a:f5:6c:ea:e4:ed:
         01:61:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----