Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7DE977B0C02611ECB957A253C4F9AE02.roa
File:                     7DE977B0C02611ECB957A253C4F9AE02.roa (raw, json)
Hash identifier:          JE10WMu1Q/ImV43EKB0nX5j81Oh3/3qaeR0p0MbD2ZQ=
Subject key identifier:   5A:A7:17:3B:D2:A3:13:E9:6F:D8:B5:13:BC:70:0D:E9:E3:90:7E:C0
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       390F
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7DE977B0C02611ECB957A253C4F9AE02.roa
Signing time:             Tue 19 Apr 2022 21:20:10 +0000
ROA not before:           Tue 19 Apr 2022 21:20:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14607 (0x390f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Apr 19 21:20:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=625f2789-d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:50:85:c6:8a:99:75:38:d0:97:58:3c:53:
                    84:0d:ff:38:0c:85:70:7a:a0:76:da:84:9e:93:4c:
                    97:ea:c6:91:d1:92:db:6f:1e:25:f8:2b:f9:09:9d:
                    69:ae:fe:84:b6:99:fb:21:b8:e7:ba:5d:03:48:05:
                    93:c3:8f:83:fd:06:f8:33:e7:54:29:b3:50:fd:83:
                    42:36:17:39:4f:ff:1b:02:9d:3b:8d:3b:0c:4d:52:
                    85:39:41:09:af:1d:3f:1a:f1:3f:4c:8a:ad:98:99:
                    c1:ce:dd:95:ec:61:6b:b5:92:a4:2f:8d:84:62:27:
                    f7:be:b4:3d:3d:0f:de:b0:53:71:cd:de:76:73:5b:
                    23:eb:f3:0f:4d:6c:fa:18:29:8c:0a:5a:9c:35:8a:
                    91:9e:19:c3:89:21:52:33:2e:da:d7:49:49:47:7a:
                    7b:04:80:d7:0b:07:72:23:49:42:d9:09:77:81:ec:
                    1c:d0:3a:90:84:92:6d:53:a2:a2:71:d8:45:2d:d2:
                    d4:26:30:7e:47:1a:0e:84:ef:e3:5c:8a:da:f5:c3:
                    ff:bc:ec:5e:0d:c6:15:95:b4:28:d0:eb:61:fd:2d:
                    e5:4b:2c:cb:8c:b5:da:81:c5:da:8c:1b:83:11:2e:
                    78:b6:89:2f:98:6b:ea:00:8c:e5:92:41:27:69:e7:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:17:3B:D2:A3:13:E9:6F:D8:B5:13:BC:70:0D:E9:E3:90:7E:C0
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7DE977B0C02611ECB957A253C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/24
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:f9:63:57:02:16:b3:ad:0c:b6:3c:c8:db:a5:96:a6:ba:
         88:fd:3c:58:3c:5c:f1:dc:66:b3:b7:b9:d9:eb:81:d0:8a:05:
         9c:55:a5:18:59:18:a4:d0:bc:f8:80:29:22:74:ca:a9:38:82:
         06:18:ac:ee:c9:41:7b:6d:70:30:f7:7a:93:4a:64:04:4c:5b:
         d9:81:35:68:42:fb:b9:08:19:5d:3a:48:f9:e8:cf:f4:6f:83:
         27:17:1a:90:bf:b4:26:d0:91:44:cf:65:20:46:c2:70:2d:dc:
         f9:b2:79:37:1f:5f:64:b1:2a:e7:a7:77:19:42:b8:c7:e6:0a:
         12:43:a0:fa:05:be:ae:42:de:9e:e1:61:fa:84:1b:18:b8:da:
         d2:58:d0:49:78:58:f5:a7:98:be:1c:b9:69:6b:78:e7:80:9c:
         e7:60:96:60:7f:10:60:5a:ee:c5:43:47:34:3d:52:9a:78:52:
         e7:a2:cb:b5:9d:33:df:01:45:af:5f:51:c8:85:c6:0c:89:c0:
         24:82:05:e1:f4:d9:1b:e1:fe:9b:c9:d2:10:fa:3c:03:07:7f:
         a1:49:4f:3b:d1:3a:6c:57:0c:6c:c2:c1:ba:92:a4:e4:44:58:
         ca:61:2c:4f:9b:07:f3:65:eb:b5:e4:fe:54:61:ac:c9:a1:00:
         06:94:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----