Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/74B2D3E8F3FE11EB95156268C4F9AE02.roa
File:                     74B2D3E8F3FE11EB95156268C4F9AE02.roa (raw, json)
Hash identifier:          bpUZNv4nkrLJw3W0h18eW9OCdCKIRJMTFc3yWtUAaVM=
Subject key identifier:   EB:39:12:D3:45:E2:73:33:84:6D:F0:31:50:7A:B8:5D:E7:DD:40:83
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       0329
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/74B2D3E8F3FE11EB95156268C4F9AE02.roa
Signing time:             Tue 16 Nov 2021 12:30:11 +0000
ROA not before:           Tue 16 Nov 2021 12:30:11 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     142591
IP address blocks:        185.135.75.0/24 maxlen: 24
                          185.135.76.0/24 maxlen: 24
                          185.135.77.0/24 maxlen: 24
                          185.135.78.0/24 maxlen: 24
                          185.135.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Nov 16 12:30:11 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=6193a452-3af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:d6:09:dd:1c:90:d1:03:a3:69:44:a2:18:
                    70:17:ed:52:4e:26:9e:0e:99:ed:46:2f:f3:bb:eb:
                    c0:e5:25:4d:e3:64:77:07:46:55:dd:31:57:1f:be:
                    18:a5:ba:26:e7:5a:c6:53:cf:58:71:9e:dd:c9:c2:
                    38:bd:62:42:18:fc:42:26:a3:bb:84:bb:55:c8:3c:
                    66:28:c7:cd:57:25:f7:b5:01:8d:7d:9b:9f:1e:98:
                    2b:d0:38:13:77:c3:c5:7e:7f:95:86:3a:a5:44:c4:
                    c2:3d:fe:a9:a4:72:c7:4c:dc:6d:90:08:75:d7:ab:
                    b5:cd:e5:bb:c2:8f:87:b8:b6:85:93:eb:ca:37:8a:
                    78:89:bc:f0:ec:4e:59:53:b2:53:dd:de:37:5a:9e:
                    34:fd:74:4a:6e:13:66:17:fe:f4:48:bc:d8:0d:70:
                    0a:e7:5e:37:cd:4e:b9:cf:5d:7b:e4:88:90:27:3a:
                    36:f4:b0:76:07:b2:68:06:25:3c:9b:8b:c5:95:d0:
                    4c:46:ee:a1:7b:d7:a2:b8:02:e7:75:ac:ba:3c:67:
                    e3:48:73:92:65:2b:09:2e:84:60:4e:3d:f7:9c:34:
                    62:05:27:c6:84:a0:cc:ed:32:ef:b8:63:c0:07:5b:
                    7d:e1:b5:fa:9a:26:71:d6:5d:3f:e6:61:cc:73:d2:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:12:D3:45:E2:73:33:84:6D:F0:31:50:7A:B8:5D:E7:DD:40:83
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/74B2D3E8F3FE11EB95156268C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.75.0-185.135.79.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:12:1a:ad:63:60:e4:66:7b:04:af:b0:44:ef:b9:58:dd:78:
         8f:5a:db:58:03:22:35:6c:22:01:46:eb:2b:19:16:a6:7f:37:
         74:20:dd:8b:ff:64:7e:e7:62:b1:21:ee:49:c5:ad:07:04:95:
         f9:8f:ac:a4:21:6a:b3:b2:13:0e:14:4e:d7:d8:0b:85:c5:d0:
         41:b3:c6:cd:d4:00:6e:05:c8:ac:e3:4b:a6:2c:1c:67:6a:57:
         31:cf:a7:82:ff:2f:01:8c:99:f0:65:a1:fe:06:b1:bb:e1:12:
         f0:13:cb:18:c0:05:8a:86:c1:ef:58:cc:c1:4b:fc:b0:52:58:
         96:c1:5c:e3:9c:d6:56:b6:fe:60:7c:c7:f6:89:0b:7b:d5:d5:
         cc:68:b6:40:29:6b:26:a9:be:fd:76:4c:d7:c7:11:1e:52:66:
         e0:cc:e6:7e:f6:2d:63:1c:85:4f:e6:e4:61:c3:5f:58:90:9a:
         f3:3f:ac:4b:d1:ed:5a:de:d6:9a:81:2c:50:40:38:20:14:68:
         da:29:f7:fb:e3:c5:0f:57:7a:dd:0e:c8:2a:6b:a9:73:2f:75:
         71:34:ff:04:a4:58:bf:49:6a:dd:14:99:84:b4:f9:4b:45:ae:
         fc:db:3d:63:93:14:33:52:88:e7:85:12:2d:e5:4f:22:75:d5:
         91:3e:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----