Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/FA956CAEFE2C11EBAFFE2E7CC4F9AE02.roa
File:                     FA956CAEFE2C11EBAFFE2E7CC4F9AE02.roa (raw, json)
Hash identifier:          ceAj5uBm7dxGkWAnnILBNUIjM+7TOoLtddxYgKmgB+c=
Subject key identifier:   2D:62:E2:6C:13:57:36:68:EC:09:E4:A4:A2:CE:67:ED:0E:F1:07:FA
Certificate issuer:       /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
Certificate serial:       067F
Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/FA956CAEFE2C11EBAFFE2E7CC4F9AE02.roa
Signing time:             Thu 21 Apr 2022 10:10:17 +0000
ROA not before:           Thu 21 Apr 2022 10:10:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45267
IP address blocks:        103.88.144.0/22 maxlen: 24
                          203.96.248.0/22 maxlen: 24
                          2400:e3c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95
        Validity
            Not Before: Apr 21 10:10:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62612d88-b5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:d6:2e:42:6a:6a:08:65:cf:32:fe:2f:68:
                    85:ec:6f:f0:c9:11:f4:26:a0:b2:68:cb:42:75:2a:
                    3c:f0:fc:b1:dc:c0:69:fb:19:49:4c:40:97:da:b5:
                    49:0a:ee:76:f7:90:1f:24:94:3b:e4:7f:3d:f5:e1:
                    55:4e:6c:c6:28:db:3a:00:21:9d:b8:a8:e9:f1:e5:
                    e3:bb:05:87:4a:17:9e:c7:fe:57:03:8b:78:53:85:
                    43:80:e3:56:79:5f:1f:fd:24:f5:f8:f0:d6:81:af:
                    b5:43:4c:d1:97:46:d8:9c:ef:59:9a:cd:88:4d:27:
                    d4:bb:51:4e:85:bc:d7:8e:cb:60:a5:ff:d2:e7:f4:
                    14:e3:c4:df:5e:f1:92:dc:eb:de:ea:26:e2:25:99:
                    da:2b:08:ef:8d:a9:0c:82:6a:9e:b9:11:d1:cf:50:
                    d2:7f:32:77:a6:37:47:49:e8:75:2d:0d:fc:b0:3f:
                    20:06:0d:a6:3c:dc:78:7a:52:60:74:07:9b:61:1a:
                    b5:2c:f2:c2:9c:64:65:00:70:db:51:70:55:f8:c5:
                    d4:7b:f6:93:0e:fd:2b:5f:20:fb:6b:d4:50:13:5c:
                    d8:f5:46:43:61:b0:ec:1a:74:6c:6d:6d:a4:fe:0e:
                    3b:3b:16:ce:ae:d0:70:ec:b9:79:c1:2f:2f:84:20:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:E2:6C:13:57:36:68:EC:09:E4:A4:A2:CE:67:ED:0E:F1:07:FA
            X509v3 Authority Key Identifier:
                keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/FA956CAEFE2C11EBAFFE2E7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.144.0/22
                  203.96.248.0/22
                IPv6:
                  2400:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:84:c7:89:97:35:87:51:d4:27:cb:1c:29:8d:85:64:cc:
         c5:18:b6:7f:55:0c:e3:a3:0e:88:58:c7:0f:00:3d:57:d6:0b:
         42:10:70:21:bd:63:69:4f:80:f5:01:4f:10:a2:fa:3c:ee:70:
         3d:5e:34:97:6b:26:9a:bb:97:c8:b2:e5:f0:98:30:56:6d:b7:
         76:f3:9c:38:0b:98:5a:39:ad:22:64:76:06:12:f9:9e:5f:dd:
         80:19:e7:55:59:4e:20:dc:5f:8e:c4:89:b7:38:8d:ba:16:0d:
         b8:27:f4:72:9f:7d:2d:f1:44:4d:03:47:48:29:e1:3e:84:10:
         bd:64:e8:45:29:fb:29:a0:1c:c8:34:ed:c3:19:52:a1:33:5d:
         20:5c:e9:e8:17:75:5b:99:48:66:b5:18:e4:c0:7e:8a:65:d7:
         54:b8:f1:31:6f:82:5d:5a:15:01:a5:09:3e:b0:cf:aa:de:5d:
         42:94:62:23:ba:fd:a8:dd:e2:e6:b1:3b:06:cb:3b:7d:59:98:
         ea:9b:d2:9b:b6:1b:ee:12:36:96:b5:8f:54:c3:d2:6d:31:0c:
         65:34:ef:85:82:0c:c0:bd:01:fb:1b:e4:f5:96:f9:fd:6f:b3:
         41:5a:c7:ba:58:56:50:60:19:10:c8:4c:b3:db:d0:23:32:d8:
         76:ef:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----