Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/3680C7EE952811EC8933735DC4F9AE02.roa
File:                     3680C7EE952811EC8933735DC4F9AE02.roa (raw, json)
Hash identifier:          gBgrNn+CKKsuDvgoIoJa4sJALXuMWbaXQTayDAM6PuI=
Subject key identifier:   AE:9A:E5:E0:99:59:78:59:59:B2:74:CD:84:7E:9B:53:F0:FC:52:B7
Certificate issuer:       /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial:       05
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/3680C7EE952811EC8933735DC4F9AE02.roa
Signing time:             Thu 24 Feb 2022 04:14:09 +0000
ROA not before:           Thu 24 Feb 2022 04:14:09 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     64624
IP address blocks:        103.146.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
        Validity
            Not Before: Feb 24 04:14:09 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=62170611-bfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:1a:c9:a1:68:db:3b:9e:7c:80:db:4b:b9:
                    b5:c4:dd:03:72:f0:33:88:01:75:38:f2:8a:90:c0:
                    09:72:d2:cb:52:89:df:1b:50:13:5b:b0:05:e8:67:
                    b4:b7:47:8c:72:15:35:2a:32:9f:00:cf:70:56:e5:
                    5c:ef:74:c9:ba:71:c1:7c:4f:8f:ba:87:bd:17:fe:
                    18:36:26:8f:c5:a1:19:c7:c6:76:65:e3:00:fa:3f:
                    66:e4:22:6d:13:3c:38:05:ec:a5:d3:2c:6d:e4:4d:
                    3e:b8:69:09:f0:70:84:4b:67:d5:37:05:3b:07:4f:
                    f1:0b:b2:6d:80:5c:74:51:78:3a:eb:f4:6d:be:ff:
                    85:93:80:4b:aa:77:09:51:7c:f5:9b:42:28:c6:22:
                    b8:a0:5e:a0:02:48:00:27:d1:ab:e8:56:6a:59:86:
                    b7:61:63:4b:f3:62:83:63:7c:b8:3a:68:93:4e:a1:
                    8e:dc:87:97:12:a9:37:68:49:d4:d7:8c:e7:47:e0:
                    1a:7e:95:a6:49:22:c6:00:ba:95:51:b1:84:b5:58:
                    ba:23:4f:cd:01:ba:45:5a:5d:c8:58:3a:17:f1:36:
                    73:af:9b:db:44:1e:2c:eb:80:03:ba:89:21:4c:05:
                    13:7a:aa:8f:bd:4f:d0:32:f3:f7:5f:05:64:fa:40:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:E5:E0:99:59:78:59:59:B2:74:CD:84:7E:9B:53:F0:FC:52:B7
            X509v3 Authority Key Identifier:
                keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/3680C7EE952811EC8933735DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:21:59:e5:98:58:1b:d2:d0:f1:6d:82:33:0d:ce:2d:12:3c:
         38:d4:80:a0:5e:b9:b2:a0:19:24:51:aa:b4:d4:31:76:c6:87:
         c0:6b:f6:79:f6:ed:41:6a:39:58:ad:cd:f5:59:87:fc:c6:48:
         fd:11:db:ff:36:13:2d:79:6e:48:e7:40:c6:db:08:46:3e:07:
         00:44:8a:b0:46:7c:8a:1e:56:14:5e:fa:10:cf:3e:09:90:1b:
         51:f8:e3:4f:ca:a4:75:5c:0f:a6:dd:4b:28:57:9b:aa:dc:9e:
         5c:9f:3a:07:8d:a9:21:11:9c:86:e0:29:be:d6:ae:7b:93:e5:
         00:f1:2e:36:6e:8b:6d:69:e4:98:5f:c9:de:6f:66:9e:9b:f8:
         1e:57:c6:5b:60:a7:55:da:c5:5c:61:63:8b:b0:bf:cf:3b:61:
         c7:85:12:77:8f:09:b5:bf:a5:ca:60:ca:c2:d4:9a:d1:cb:64:
         4a:5a:0c:2a:62:a2:d6:45:0c:00:2b:77:75:77:97:ca:ee:f8:
         80:e0:86:77:ad:86:94:3a:db:a2:09:0f:ed:91:b9:32:54:81:
         88:c6:b7:49:8e:33:42:f5:d0:25:5f:3b:87:94:7d:4e:e4:41:
         f8:fc:e3:37:a2:35:5b:2a:ae:ae:62:a0:9f:61:28:9f:9d:ca:
         07:5c:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----