Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/605DF7BE181B11EDB485D027C4F9AE02.roa
File:                     605DF7BE181B11EDB485D027C4F9AE02.roa (raw, json)
Hash identifier:          44Qh5h/xOd+YjTBwMwiYBUCy5WMvaEDzhtUIVkQHcbM=
Subject key identifier:   11:BA:53:06:F7:3B:8B:9A:F7:94:80:7F:34:86:92:B2:BB:C4:02:DB
Certificate issuer:       /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial:       23C0
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/605DF7BE181B11EDB485D027C4F9AE02.roa
Signing time:             Tue 09 Aug 2022 19:42:18 +0000
ROA not before:           Tue 09 Aug 2022 19:42:18 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     133439
IP address blocks:        103.228.201.0/24 maxlen: 24
                          150.107.50.0/23 maxlen: 23
                          150.107.50.0/24 maxlen: 24
                          2001:df4:3800::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9152 (0x23c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
        Validity
            Not Before: Aug  9 19:42:18 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62f2b89a-be80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:9d:2b:89:ef:7a:34:aa:a8:c3:0c:03:16:
                    c0:79:71:ae:95:a5:f2:3a:fb:aa:0e:67:e6:53:b2:
                    8d:70:8b:3c:40:84:27:a5:84:87:9a:51:17:bc:5d:
                    b1:cc:ab:33:e5:f0:7c:81:87:e5:6e:eb:67:67:34:
                    4d:da:19:2f:73:90:79:5a:8e:d7:59:82:5c:7e:88:
                    80:51:c4:38:5e:44:8b:03:7c:dc:2a:cf:18:32:93:
                    65:0b:26:ec:80:a8:43:e6:95:f4:8b:8c:42:be:f1:
                    24:2b:74:e8:03:bb:59:24:d0:8d:51:1c:83:9a:23:
                    f9:bc:43:8d:ee:5c:d0:fc:3e:4c:84:15:85:1e:97:
                    b6:a7:ef:37:3b:6a:5a:0e:0f:f8:8d:b8:67:3e:ca:
                    95:d1:8b:ca:53:00:68:0d:36:68:6e:e7:6c:eb:b2:
                    8a:a3:6d:b8:1d:76:26:cb:7a:0a:3e:b1:ca:b3:33:
                    47:d2:9b:f8:f8:d5:ba:ea:4b:80:91:d7:c3:87:bd:
                    fd:17:45:87:d0:db:bc:8a:4d:a2:d1:74:81:0a:3e:
                    43:93:06:88:f5:08:4e:59:58:17:c0:ea:ec:12:ae:
                    2d:99:25:80:6a:e1:fc:c6:8f:41:0a:78:d5:f6:36:
                    a6:43:80:06:3d:9d:88:7c:ca:26:77:66:70:30:df:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:53:06:F7:3B:8B:9A:F7:94:80:7F:34:86:92:B2:BB:C4:02:DB
            X509v3 Authority Key Identifier:
                keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/605DF7BE181B11EDB485D027C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.201.0/24
                  150.107.50.0/23
                IPv6:
                  2001:df4:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:db:d5:77:ff:a7:fc:28:85:9b:cc:c9:9f:e2:e9:54:54:ef:
         35:9a:1f:c6:75:72:5d:1a:4a:e9:a3:5c:e1:41:c2:f7:16:87:
         d8:47:b9:f0:06:cf:98:b4:66:f3:98:96:6d:51:a7:75:74:b3:
         02:a5:a9:e2:5e:0c:0b:93:a3:71:19:e2:f2:77:0e:5c:c6:fc:
         79:03:e2:d7:f0:15:f0:f2:1f:e7:7f:f6:64:e5:6b:1f:57:82:
         50:34:d5:cf:b2:74:5c:f3:9d:15:af:2f:f0:91:f0:37:1a:eb:
         87:1b:f4:5b:6f:58:37:b2:18:dd:05:bf:3d:67:80:b3:dc:28:
         e9:98:20:79:ea:98:8c:4f:fc:d1:8a:a7:47:8f:15:e5:69:15:
         c0:a1:10:9e:06:72:c3:50:66:ee:62:a8:6c:f8:a4:a3:ee:02:
         93:84:a6:2d:f5:8f:4c:41:4d:66:0b:37:3f:2c:25:bd:8d:ff:
         7a:d7:c2:70:8a:b1:37:c2:6e:95:ca:f4:9c:84:29:85:29:5e:
         4f:c2:cd:54:73:ee:fb:58:e5:67:e0:ec:76:66:6d:29:dc:94:
         1c:1d:06:47:a8:0d:ff:a9:d4:6e:53:2e:2f:b2:78:13:7d:f3:
         89:7a:f9:33:9b:47:d9:40:05:b8:6f:ba:32:00:38:f0:fc:3f:
         9d:7b:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----