Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/79DCE702B43B11EC8F7C8726C4F9AE02.roa
File:                     79DCE702B43B11EC8F7C8726C4F9AE02.roa (raw, json)
Hash identifier:          jerw/f9VcAEwhPx8OemD+hdSNCpgQkfOy8fLXRNRK/M=
Subject key identifier:   9A:DC:2F:91:7E:6B:0B:65:CB:85:59:06:54:C6:78:40:DD:0E:FA:42
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3863
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/79DCE702B43B11EC8F7C8726C4F9AE02.roa
Signing time:             Tue 05 Apr 2022 05:20:08 +0000
ROA not before:           Tue 05 Apr 2022 05:20:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14435 (0x3863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Apr  5 05:20:08 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=624bd188-7481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:65:0c:bb:66:86:3d:c5:2b:28:10:45:89:f0:
                    76:9e:c8:05:11:82:c2:ea:bf:bd:e7:b8:9c:1c:a1:
                    bb:22:2b:a1:fd:75:a2:a7:85:9c:db:2e:e9:f4:b2:
                    b1:db:b6:d1:8d:5d:89:72:2c:85:75:44:8c:18:32:
                    be:d8:38:8e:3a:b8:44:8f:b6:a4:27:97:7f:0a:94:
                    31:dc:31:b3:de:98:81:7c:fb:f8:d8:a0:33:02:29:
                    1f:20:63:82:e8:42:4c:d1:39:12:14:4b:f4:b4:10:
                    60:94:23:36:b5:69:98:9a:2d:8d:55:5a:c4:bc:e6:
                    60:7a:43:c1:11:c3:96:28:fb:8e:46:03:78:e2:90:
                    ae:b3:19:d9:99:02:b4:be:7d:33:01:ac:e0:8b:4f:
                    8d:20:d1:84:0a:06:1a:d6:c1:00:33:e1:8b:a6:9c:
                    8c:c5:24:47:e7:2f:24:d9:5e:f6:c3:08:55:27:6d:
                    2e:ca:e1:f5:f0:fa:78:fe:0a:20:d3:72:f1:5a:99:
                    ef:8f:89:f4:1b:eb:ce:e7:9b:8b:17:0d:55:49:bc:
                    d4:99:d4:d7:88:c3:db:d8:cb:cf:7e:69:52:3d:ab:
                    59:4e:d2:58:73:d6:59:9a:7d:17:3d:cb:46:9d:70:
                    23:87:ae:f2:9c:7b:ec:ba:7d:78:26:10:fe:4a:fd:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DC:2F:91:7E:6B:0B:65:CB:85:59:06:54:C6:78:40:DD:0E:FA:42
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/79DCE702B43B11EC8F7C8726C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         42:39:bc:97:b5:6a:58:e0:49:d8:73:77:4c:45:b1:59:e7:23:
         3d:a7:4e:f3:6a:79:97:f9:72:0e:99:1f:d2:54:26:02:b7:56:
         29:ec:f0:32:6b:b6:88:55:21:1d:92:9c:ff:ae:fd:88:87:2d:
         d3:36:0b:b9:6d:eb:28:9c:1f:65:e0:5f:3e:65:27:cc:46:ba:
         06:cb:ee:7c:18:47:c1:7c:f8:71:9d:05:ac:f1:0b:a9:fd:42:
         20:54:9e:41:15:8a:04:a3:4e:c5:73:62:af:99:a3:0f:cb:af:
         cd:f0:db:98:8f:ba:60:db:2b:a5:63:9d:b4:fa:ef:e8:e4:d6:
         27:e4:0b:d1:6c:ae:99:96:aa:86:1d:28:52:41:80:0f:a8:97:
         91:f6:da:74:9a:f1:4e:fc:2e:45:f4:00:99:40:37:f0:61:dc:
         2c:6a:14:c7:2a:92:37:c8:95:de:e9:07:e8:2c:96:02:d6:5f:
         f5:bd:10:62:c7:02:dd:a4:b4:eb:1d:91:f0:6b:d4:5e:40:8c:
         67:ed:a0:00:47:18:8f:52:ce:44:1c:e5:54:5b:38:e1:36:2b:
         c1:9a:c3:7e:10:65:f0:9b:25:35:9a:e5:ec:a8:c5:53:ad:da:
         f3:d5:2b:a4:ba:8f:29:e4:92:82:ab:aa:c8:47:44:e4:3b:76:
         f2:89:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----