Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/5A50F8B4BEFF11EC82345114C4F9AE02.roa
File:                     5A50F8B4BEFF11EC82345114C4F9AE02.roa (raw, json)
Hash identifier:          iaCFy87SRGxhk6AqVU4Gmmt3R84BDgqyGFReafwDVBU=
Subject key identifier:   D1:EA:DF:4E:7F:10:21:68:02:30:DF:FB:67:81:53:4C:91:49:CB:E8
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       0F5B
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/5A50F8B4BEFF11EC82345114C4F9AE02.roa
Signing time:             Mon 18 Apr 2022 10:07:28 +0000
ROA not before:           Mon 18 Apr 2022 10:07:28 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     139690
IP address blocks:        124.155.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3931 (0xf5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Apr 18 10:07:28 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=625d3860-4877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:00:d1:d0:4b:e7:c8:c7:a9:4b:a5:e6:1e:b8:
                    73:20:e2:ba:70:29:f5:be:15:40:45:ea:1e:19:09:
                    15:49:88:92:de:ea:34:53:bc:c6:73:5c:0b:e3:b4:
                    e9:2c:fa:a7:e5:a2:a8:4c:5f:78:cd:f2:68:53:b3:
                    f0:d7:36:a6:e7:b8:49:5e:bb:3a:5f:40:fc:bf:e4:
                    30:d4:4e:35:e8:df:d8:bd:d9:86:e7:2a:fe:7f:07:
                    bf:20:25:74:f5:93:ed:67:a2:e7:60:8c:37:c7:9c:
                    67:89:46:25:97:49:92:2b:ea:5b:4e:08:8b:9f:27:
                    9b:81:7c:5b:bb:95:1c:89:71:62:d9:be:6e:f4:f7:
                    1b:8d:18:2f:45:e5:47:64:27:f1:40:a9:d9:85:b3:
                    8c:4d:c7:8a:1d:f1:31:f8:a3:c8:0d:f7:2c:36:45:
                    87:f9:e7:61:48:b2:bb:8a:b8:94:6e:dc:45:38:1e:
                    b4:58:39:91:e6:3d:f1:61:fa:bb:3a:e1:4f:72:a2:
                    47:ed:dc:ea:0f:9f:64:fa:34:3d:55:2d:02:98:3c:
                    17:d7:26:af:aa:56:b6:37:49:4e:38:8b:8d:90:4a:
                    d0:e9:75:c9:ea:06:73:94:7e:b3:c6:ed:ee:d1:70:
                    01:28:49:8a:d4:20:9e:c3:9c:ec:53:42:f8:92:8b:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EA:DF:4E:7F:10:21:68:02:30:DF:FB:67:81:53:4C:91:49:CB:E8
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/5A50F8B4BEFF11EC82345114C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:3d:32:3b:2d:19:5b:15:de:30:fb:c4:9b:22:17:e4:86:
         86:67:2f:55:67:f7:db:ec:54:cf:e3:d7:f8:af:b1:8e:7c:a2:
         d1:c3:7a:c9:6b:ad:f2:c3:58:54:fe:12:c5:95:cb:6c:60:cf:
         d8:64:b0:6a:42:ad:f6:95:a2:ee:61:8f:3a:f1:ac:07:f0:06:
         88:db:91:3a:dd:46:4d:8d:95:1a:ed:8e:1b:74:70:2d:18:ad:
         5b:e0:93:85:91:f8:11:bf:6b:c2:53:ba:a0:fd:4a:1e:05:95:
         3d:22:90:d7:20:d2:98:53:08:e6:88:52:5c:48:2e:b7:0f:65:
         9e:8c:31:d2:8a:c5:1e:0c:57:e3:24:58:33:6c:1c:ff:4a:e2:
         57:80:c2:50:c6:d7:96:40:83:a6:f9:26:e2:df:e6:83:fe:b9:
         8e:85:1b:c3:54:33:1a:02:52:d1:f3:e9:84:77:0c:0c:6b:cf:
         17:f2:05:99:44:de:b8:c8:ce:35:26:3f:2a:4f:c8:47:8d:15:
         05:bc:de:88:8c:3f:46:20:5a:f9:f5:f6:f1:19:85:a7:ef:e7:
         04:93:d5:53:96:37:19:b2:3a:19:bc:1d:a6:d6:a9:37:9c:45:
         80:d2:fa:33:d1:c6:4b:1c:9b:c6:66:d1:83:cc:b1:63:ec:c9:
         42:2f:9d:a3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5
N0QxQjE2NTMwHhcNMjIwNDE4MTAwNzI4WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjVkMzg2MC00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wDR0EvnyMepS6XmHrhzIOK6cCn1vhVAReoeGQkVSYiS3uo0U7zGc1wL47Tp
LPqn5aKoTF94zfJoU7Pw1zam57hJXrs6X0D8v+Qw1E416N/YvdmG5yr+fwe/ICV0
9ZPtZ6LnYIw3x5xniUYll0mSK+pbTgiLnyebgXxbu5UciXFi2b5u9PcbjRgvReVH
ZCfxQKnZhbOMTceKHfEx+KPIDfcsNkWH+edhSLK7iriUbtxFOB60WDmR5j3xYfq7
OuFPcqJH7dzqD59k+jQ9VS0CmDwX1yavqla2N0lOOIuNkErQ6XXJ6gZzlH6zxu3u
0XABKEmK1CCew5zsU0L4kosfXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNHq305/
ECFoAjDf+2eBU0yRScvoMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE
M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvNUE1MEY4QjRC
RUZGMTFFQzgyMzQ1MTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB8m9gwDQYJKoZIhvcNAQELBQADggEBAIyRPTI7LRlbFd4w
+8SbIhfkhoZnL1Vn99vsVM/j1/ivsY58otHDeslrrfLDWFT+EsWVy2xgz9hksGpC
rfaVou5hjzrxrAfwBojbkTrdRk2NlRrtjht0cC0YrVvgk4WR+BG/a8JTuqD9Sh4F
lT0ikNcg0phTCOaIUlxILrcPZZ6MMdKKxR4MV+MkWDNsHP9K4leAwlDG15ZAg6b5
JuLf5oP+uY6FG8NUMxoCUtHz6YR3DAxrzxfyBZlE3rjIzjUmPypPyEeNFQW83oiM
P0YgWvn19vEZhafv5wST1VOWNxmyOhm8HabWqTecRYDS+jPRxkscm8Zm0YPMsWPs
yUIvnaM=
-----END CERTIFICATE-----