Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
File:                     7EC3423E139511ED8259D620C4F9AE02.roa (raw, json)
Hash identifier:          IqnuMX08U1H/zYpPyE/KWGEbFYpilbv8nrq7dWY6Qds=
Subject key identifier:   EF:92:34:CC:78:A8:72:3B:94:F2:F5:36:D6:B0:1F:80:C6:02:2B:8A
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       02
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
Signing time:             Thu 04 Aug 2022 01:33:52 +0000
ROA not before:           Thu 04 Aug 2022 01:33:52 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     56294
IP address blocks:        103.173.70.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Aug  4 01:33:52 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62eb21ff-71a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:26:d7:4d:e6:5a:b0:41:a0:ee:df:6c:04:
                    dd:6d:78:68:75:93:01:76:5e:26:4c:14:7d:a8:cd:
                    c0:5a:ef:81:e8:2d:de:6e:08:50:6e:ce:24:5e:f5:
                    d7:7e:3c:90:f3:e5:7d:d6:4f:d1:9d:e1:0c:9c:69:
                    d4:e8:55:5a:ef:bb:f8:d9:91:e6:22:ef:31:e9:a6:
                    71:f0:67:ea:02:18:db:f1:fe:10:85:83:86:96:05:
                    e5:95:57:7f:5a:d7:e8:b8:c5:6a:8a:88:f5:fd:cd:
                    9f:8e:9d:f7:ec:cb:2c:35:b4:26:cb:1a:1f:dc:2e:
                    6d:9d:13:c6:7a:3d:8a:c3:32:c0:e9:f3:f8:47:83:
                    1d:8f:b6:f6:cd:5e:8b:c9:c3:bd:19:c2:a8:9b:2e:
                    a9:0d:93:a7:30:d1:f2:88:8b:4d:2d:1d:bc:d0:28:
                    74:aa:d7:43:ab:79:50:af:be:82:ad:f9:22:9e:6b:
                    31:c4:30:5b:8f:1d:af:0f:d9:e1:89:6b:cc:20:50:
                    81:21:75:29:b3:ed:fa:cf:52:b4:68:9e:82:51:07:
                    6f:6c:59:bc:6c:83:8b:ba:54:87:1e:00:4e:e4:e4:
                    0a:20:f4:8e:bc:58:20:c4:2b:05:ee:0c:71:aa:9c:
                    f8:5a:44:23:4e:f9:fe:55:16:2a:5b:45:ff:98:de:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:34:CC:78:A8:72:3B:94:F2:F5:36:D6:B0:1F:80:C6:02:2B:8A
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/7EC3423E139511ED8259D620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:49:7b:09:98:76:1a:33:43:41:20:4d:ff:1b:3a:5b:b8:
         fa:21:c1:35:fb:2d:37:6d:fe:5b:a8:93:0e:87:41:8f:06:0e:
         35:bf:23:e2:14:42:4f:91:1b:12:5e:31:01:23:1b:97:7f:c5:
         84:8d:6f:87:be:64:73:f3:13:8c:5e:fc:df:92:ce:75:78:d5:
         9b:9a:87:f0:3a:b1:69:df:45:d7:7e:02:fe:7b:c0:83:4b:5d:
         48:9a:18:6d:7c:e3:9b:86:6f:3f:a0:94:fd:6e:54:6f:0e:fd:
         82:fa:e3:11:26:32:27:03:11:47:39:7a:69:fd:ee:95:61:f4:
         09:e1:9e:18:78:2f:4c:3d:d0:dc:29:49:67:d7:38:d6:e5:0a:
         9f:bc:ea:63:9d:8f:69:81:48:e2:f7:a3:d3:23:f2:b3:85:14:
         9d:15:ed:84:d6:1b:46:30:00:e1:9c:3c:89:6f:00:9f:6c:99:
         71:45:55:e4:21:b1:dc:e6:ab:8c:de:c1:21:ef:d2:3e:33:0b:
         dc:67:aa:d4:74:4b:e9:6e:37:3a:7f:b4:2d:d9:b1:06:96:1d:
         a6:e2:9d:b5:9a:16:66:30:7f:e0:45:14:7d:69:0a:24:a0:38:
         7e:ec:10:54:a9:20:a8:1d:ab:7f:3c:ce:fc:25:f6:9b:fe:1d:
         b1:24:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----