Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/71459ACC30FF11ECB7FC5C7EC4F9AE02.roa
File:                     71459ACC30FF11ECB7FC5C7EC4F9AE02.roa (raw, json)
Hash identifier:          Td0a/a/QGSTympXhVytjNJ0QeXakjHubdr2cFqyOCUQ=
Subject key identifier:   BF:38:C1:56:61:B8:57:69:D1:F1:A7:6C:60:EC:A1:D3:22:5C:27:E1
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       0419
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/71459ACC30FF11ECB7FC5C7EC4F9AE02.roa
Signing time:             Thu 30 Jun 2022 13:47:16 +0000
ROA not before:           Thu 30 Jun 2022 13:47:16 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     142045
IP address blocks:        103.165.158.0/24 maxlen: 24
                          202.94.164.0/23 maxlen: 24
                          2407:4ac0::/32 maxlen: 32
                          2407:4ac0::/48 maxlen: 48
                          2407:4ac0:1000::/48 maxlen: 48
                          2407:4ac0:1400::/38 maxlen: 40
                          2407:4ac0:1800::/37 maxlen: 40
                          2407:4ac0:2000::/35 maxlen: 40
                          2407:4ac0:2800::/37 maxlen: 40
                          2407:4ac0:3000::/36 maxlen: 40
                          2407:4ac0:6000::/35 maxlen: 40
                          2407:4ac0:6d80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Jun 30 13:47:16 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62bda963-6afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:1b:9a:3d:79:aa:2c:28:aa:b1:ae:27:3d:
                    96:cb:be:72:6a:c8:65:46:6d:b2:c1:2d:44:64:7b:
                    12:5f:4e:f8:d0:08:23:1c:c0:d8:23:71:2b:29:8f:
                    0f:66:a9:14:23:f4:77:b3:c8:12:7a:32:25:f9:7f:
                    6b:63:0e:ce:cb:f2:0d:20:3e:19:1c:39:03:1b:ad:
                    0a:fe:97:89:79:40:da:ac:22:d6:af:36:95:62:e4:
                    a8:2f:f0:da:eb:80:c8:bd:03:57:0b:02:f0:44:f9:
                    9a:0f:58:be:b2:48:ef:72:d3:38:bd:b4:77:02:fc:
                    6e:8f:fd:7c:67:10:90:db:da:bd:e6:0f:42:99:fc:
                    0d:87:f3:20:e5:38:95:76:ee:93:0b:0e:e0:fa:7c:
                    dd:a4:bf:32:3a:26:1e:ad:e7:b2:2d:e9:0c:65:78:
                    be:31:4e:e5:41:17:73:3e:05:4e:51:f2:da:bb:f3:
                    aa:2d:1f:13:28:d8:17:b4:32:43:88:b0:0e:4b:ed:
                    dc:a4:a6:d3:7e:5d:2e:39:00:a7:aa:86:1d:11:80:
                    05:3a:69:9b:16:3d:7c:6c:45:1e:e8:16:f0:3b:4f:
                    7e:e4:17:06:19:6a:64:fe:ba:5f:42:c4:64:38:84:
                    ab:ba:fb:87:d2:4b:d2:23:0b:e3:54:db:b2:58:f6:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:C1:56:61:B8:57:69:D1:F1:A7:6C:60:EC:A1:D3:22:5C:27:E1
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/71459ACC30FF11ECB7FC5C7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.158.0/24
                  202.94.164.0/23
                IPv6:
                  2407:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:09:de:b0:16:c5:10:6f:31:33:f4:58:79:fa:b2:ee:65:a9:
         7d:fc:ff:cf:70:f8:66:e3:aa:e3:53:0c:89:29:68:60:d7:08:
         be:f2:b8:4c:7a:d9:40:94:be:a9:0b:3f:95:7f:ba:7c:56:c4:
         8f:3e:58:c2:41:47:eb:5d:b1:90:ec:89:31:98:71:99:6a:54:
         cc:fb:7e:91:89:15:08:cc:8d:2d:e4:de:8b:1e:eb:e4:8b:73:
         06:95:9a:1c:30:a2:5d:48:0d:63:53:ae:1b:42:51:4c:52:d1:
         ea:ff:44:da:6a:44:cd:5e:fc:0d:c3:d5:cd:42:20:39:1a:2c:
         ce:1e:23:8d:e7:7a:39:9c:01:7f:df:0d:09:86:e1:eb:93:50:
         79:43:af:f3:a6:c5:e4:b8:b9:9f:33:a4:40:02:56:4a:3f:dc:
         1a:a7:ea:90:b7:fc:95:c1:2a:ad:f6:cf:d8:d7:a7:3b:f0:42:
         fc:a0:74:aa:b7:38:67:42:0d:31:21:0c:d0:f3:09:7f:c3:ad:
         53:ef:8f:a9:bf:f9:09:d8:dc:f6:59:b7:e4:20:e7:e5:e1:1c:
         7f:a4:d3:f8:6b:0f:ee:a5:f6:b9:a0:dc:13:ae:f2:4c:71:13:
         e5:62:85:42:e1:9b:78:87:cf:00:98:16:ee:c7:06:2a:ea:4f:
         6d:0b:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----