Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0C7AF680C03A11ECA5EED440C4F9AE02.roa
File:                     0C7AF680C03A11ECA5EED440C4F9AE02.roa (raw, json)
Hash identifier:          9FhVh1Y18ZIMeMwKGjoNqWuF1cLsgYrqX3p3/eIZzGo=
Subject key identifier:   73:1D:F8:2C:9A:59:F9:CE:10:C1:E4:E3:6D:3D:4E:10:3A:F0:D6:D6
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3916
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0C7AF680C03A11ECA5EED440C4F9AE02.roa
Signing time:             Wed 20 Apr 2022 08:40:09 +0000
ROA not before:           Wed 20 Apr 2022 08:40:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14614 (0x3916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Apr 20 08:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=625fc6e9-4b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:0b:29:41:1a:95:08:fb:19:78:94:67:7e:
                    4b:44:86:c1:7e:e0:f2:29:be:6b:fd:98:ac:6b:90:
                    76:de:5d:a9:d5:2f:e8:f7:0e:41:a2:80:b6:33:33:
                    fb:f0:6f:bf:00:bc:ea:26:e6:17:cb:89:9f:12:40:
                    45:2a:0d:a2:22:99:82:75:7c:b6:7e:9a:c1:6b:fc:
                    14:0a:fc:5d:29:ea:c6:d1:08:37:61:50:69:6f:c3:
                    1f:46:c5:96:1d:a2:35:87:08:5e:c3:c5:d8:74:73:
                    97:b8:cc:96:9a:fb:6f:8d:80:7c:b5:66:25:45:7d:
                    fd:d1:ec:5c:6f:06:2e:7c:2c:17:6b:32:a8:fc:e5:
                    01:9f:8b:59:3c:b5:7d:7b:cd:7c:21:d5:be:ef:df:
                    79:61:20:68:2a:eb:bd:54:e6:d0:7f:e7:84:26:73:
                    62:ca:ee:96:ab:53:69:f3:56:14:7f:64:6e:22:f4:
                    cd:bc:0b:ba:01:12:fd:a7:46:ab:f5:8c:92:86:75:
                    fe:56:41:25:07:cd:24:0c:7a:fc:f8:12:06:a9:6f:
                    d4:be:d2:ea:04:34:11:44:d9:34:1b:df:e6:11:4a:
                    46:07:1e:8d:b5:98:9d:7f:fc:2f:22:ce:a8:98:c0:
                    a6:89:0c:91:26:73:d3:bd:64:9b:9f:4b:68:63:cc:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:F8:2C:9A:59:F9:CE:10:C1:E4:E3:6D:3D:4E:10:3A:F0:D6:D6
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0C7AF680C03A11ECA5EED440C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         d4:49:1d:47:7a:0b:d9:d3:e7:78:0a:e5:5e:e9:81:c1:41:8e:
         ef:ee:39:0c:33:6f:35:30:6e:ae:0a:56:88:a4:8d:f3:c8:b6:
         62:98:b2:76:8f:2e:8a:29:35:63:5b:78:ce:f2:57:84:11:8e:
         a1:3b:b0:85:42:99:b8:51:24:2b:b8:3f:19:97:b5:27:ee:73:
         08:08:e9:dd:e6:ce:5c:95:d9:17:b4:4c:32:07:49:e5:a4:fc:
         fe:df:38:47:cb:9f:a0:b7:de:06:3b:7f:bd:81:0a:4e:4a:59:
         02:c7:1e:1b:00:da:47:49:1d:92:73:06:3c:62:6c:0b:8e:70:
         c7:49:71:ae:27:f6:77:ff:61:1b:11:61:14:55:71:14:6c:77:
         d4:7d:db:8a:bc:b9:a7:c2:3b:28:87:7a:b0:ed:2c:3c:7e:cb:
         5b:e2:a6:c0:4b:c4:3a:d2:11:3a:4c:08:d1:aa:83:8e:5f:4e:
         80:49:93:e1:99:bd:dd:8d:5b:7d:f3:71:d5:34:69:06:8c:1f:
         7d:2a:fc:98:ca:39:c8:22:7c:a3:9f:c8:c5:31:a6:7a:a8:f0:
         e5:a2:fa:62:09:b8:01:e4:6d:0a:15:37:05:cb:23:67:a5:73:
         12:d2:d9:66:cd:43:fe:fe:70:6f:53:8c:53:43:63:f1:2f:c9:
         36:93:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----