Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/9194B314E74511EDA8642777C4F9AE02.roa
File:                     9194B314E74511EDA8642777C4F9AE02.roa (raw, json)
Hash identifier:          HKqjheR/3e2A4nVmVt6ajJqWO5A8M5FwrVl2GfiPExE=
Subject key identifier:   21:54:C9:95:75:D4:DA:31:F0:33:CD:A4:1A:9E:2B:3F:22:C9:66:FA
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       0E31
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/9194B314E74511EDA8642777C4F9AE02.roa
Signing time:             Sun 30 Apr 2023 10:55:50 +0000
ROA not before:           Sun 30 Apr 2023 10:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137449
IP address blocks:        103.138.24.0/24 maxlen: 24
                          103.138.25.0/24 maxlen: 24
                          103.138.26.0/23 maxlen: 24
                          2404:bec0::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3633 (0xe31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Apr 30 10:55:50 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=644e4936-de1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:8d:42:ad:83:ba:5a:2b:35:50:ae:d2:87:
                    b9:33:c1:8f:79:34:2b:c3:71:8d:ab:29:60:14:b2:
                    f3:b9:ea:df:01:da:dc:80:f5:f6:27:f3:8b:3f:5f:
                    cd:47:45:71:f6:ee:03:30:93:c8:c5:7f:54:47:24:
                    09:f0:b1:44:c9:15:e5:e3:2a:25:c9:61:31:ce:78:
                    b9:23:52:36:f9:52:73:6f:b4:b3:85:7a:64:2c:a1:
                    17:30:80:d9:ba:a9:fe:55:65:f2:0f:27:28:b2:8d:
                    cd:63:09:e0:83:d3:7f:f7:69:08:19:f5:05:dc:83:
                    4d:9c:8b:16:23:0d:da:4e:e7:58:ce:31:fa:ba:c8:
                    98:7c:12:63:bc:61:89:2a:b7:c0:1b:f5:53:22:82:
                    9a:bd:6d:b3:8d:f1:41:6f:95:25:54:cc:f9:49:98:
                    fa:79:75:eb:64:ee:1a:3c:06:1b:19:69:8e:93:f3:
                    73:d2:69:b6:c0:93:6e:ba:ba:e9:21:af:4d:30:d6:
                    10:13:25:c8:1c:b1:1c:13:53:cc:07:4e:2e:01:7c:
                    ab:f0:65:e3:9d:91:4e:cc:7c:b1:68:ed:cb:44:6d:
                    14:3b:99:d9:c3:5d:fa:d6:b3:da:49:9c:0b:32:3a:
                    1b:6e:6a:34:65:d5:2b:5f:0b:01:f0:bd:1b:52:7e:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:C9:95:75:D4:DA:31:F0:33:CD:A4:1A:9E:2B:3F:22:C9:66:FA
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/9194B314E74511EDA8642777C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.24.0/22
                IPv6:
                  2404:bec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:9f:39:b0:81:af:7d:ba:04:2e:a6:fa:0f:c0:25:e6:13:
         de:d5:a1:fc:a6:a2:44:1c:42:a5:5d:bb:13:62:db:54:40:fe:
         09:d9:0e:5d:04:d4:82:15:44:55:8a:09:83:2a:4e:1f:d4:43:
         16:32:e2:5c:fa:65:98:39:cf:40:04:de:2a:dd:4c:89:f2:5d:
         e1:5f:23:82:d2:a7:8c:dd:77:18:48:e1:01:cd:06:0c:39:01:
         de:ec:8b:7f:af:41:be:98:6e:16:87:0c:ff:2e:81:e0:b4:f0:
         cc:ca:f0:6a:df:87:21:c0:85:60:c9:43:1e:1e:58:9a:12:40:
         18:fb:81:b8:88:62:db:52:cb:2d:bb:82:cc:ab:b2:17:a6:a4:
         d9:0c:50:ab:3f:84:79:45:96:5c:02:27:40:53:1f:0a:16:07:
         c1:7e:8f:1c:d3:cc:ad:85:ea:70:23:4d:99:a8:7e:b3:2d:ae:
         b0:72:da:a4:0c:b1:53:5d:43:a4:f1:19:41:a2:62:be:00:7c:
         a6:23:64:d0:3c:46:bc:f2:33:d3:1a:ed:5c:e6:e8:7e:6d:b0:
         26:89:c2:cf:a7:db:43:2f:df:20:e3:98:f3:a2:82:32:fa:66:
         2d:84:a0:93:11:e2:40:60:6b:ae:da:72:fe:be:ae:cd:a2:23:
         f1:6f:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----