Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0B88036AB45011EE8CDBB61BC4F9AE02.roa
File:                     0B88036AB45011EE8CDBB61BC4F9AE02.roa (raw, json)
Hash identifier:          ES+kBkq8tP+EPOqgWAAr2gAO2OGaNcxujTUjjyL6djo=
Subject key identifier:   D5:DA:13:9C:56:6E:09:A3:EE:E2:D5:37:5E:BA:F8:81:A9:22:C2:D3
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       32E9
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0B88036AB45011EE8CDBB61BC4F9AE02.roa
Signing time:             Tue 16 Jan 2024 09:17:18 +0000
ROA not before:           Tue 16 Jan 2024 09:17:18 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     5650
IP address blocks:        122.8.16.0/22 maxlen: 22
                          122.8.32.0/22 maxlen: 22
                          122.8.112.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22
                          122.8.121.0/24 maxlen: 24
                          122.8.123.0/24 maxlen: 24
                          122.8.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13033 (0x32e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jan 16 09:17:18 2024 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=65a6499e-ea2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:57:f2:3d:13:77:c9:36:14:75:1a:44:8f:
                    ba:06:d7:35:1e:30:ef:e2:cc:e8:27:d7:e9:23:70:
                    3e:ce:ba:7f:8d:5d:ef:01:a3:34:83:f9:7b:1c:5c:
                    f2:2f:e5:7d:39:62:26:81:62:68:f8:99:33:50:2b:
                    0e:00:69:c5:33:fb:72:07:c8:dd:78:8d:d6:b8:b6:
                    57:97:df:52:89:c3:3f:44:39:71:6c:72:41:af:1f:
                    ac:30:b1:85:0e:70:8d:5b:e8:1d:ae:01:92:6b:13:
                    52:b2:13:2a:16:cb:d4:65:98:a0:e5:64:62:a2:07:
                    bc:34:3a:76:75:b7:54:2d:b6:48:2b:89:db:0c:63:
                    aa:93:ea:2c:17:ab:bd:71:b7:7b:77:d1:a8:55:45:
                    05:bc:ca:1e:ed:0b:a7:e4:8f:4c:fa:36:6f:b9:25:
                    ab:54:e1:51:9a:2e:9a:15:d9:cf:1c:97:9d:b1:52:
                    c2:ad:78:a2:d8:c7:f9:1d:3d:2e:74:5f:4b:0a:36:
                    0b:e5:ef:42:f1:e5:e7:3f:c9:a9:36:00:8f:ae:a4:
                    f6:07:ae:08:cf:59:32:51:60:b9:37:6c:b0:2b:11:
                    13:40:4c:ac:e6:9c:ce:6e:95:5c:72:8e:52:a1:a7:
                    88:09:c0:2c:b2:4e:35:9c:0d:93:c3:db:a3:d3:be:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:13:9C:56:6E:09:A3:EE:E2:D5:37:5E:BA:F8:81:A9:22:C2:D3
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0B88036AB45011EE8CDBB61BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.16.0/22
                  122.8.32.0/22
                  122.8.112.0/21
                  122.8.121.0/24
                  122.8.123.0-122.8.127.255

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:92:b2:e6:d9:7d:21:5c:92:0a:3f:df:63:47:5d:46:99:
         d3:31:7a:59:1b:ad:a2:7f:4b:2f:53:8b:8e:d7:4e:43:21:64:
         9f:f3:4f:2f:0e:b9:94:23:5b:be:66:93:67:a9:7a:b2:f3:cb:
         31:76:ee:48:08:ab:d1:85:15:8d:8f:96:4e:2b:bc:08:55:fa:
         6b:d9:71:4b:5a:52:4a:67:ff:e1:fc:25:16:fc:fc:aa:06:6c:
         b2:e9:4a:6d:97:d1:f7:b6:dd:09:60:08:e6:ae:5a:32:0a:a3:
         88:91:84:62:71:a5:63:cf:3d:e0:cd:1e:9d:83:f3:a0:39:96:
         60:af:16:5c:2d:96:ac:9d:93:dd:61:92:f9:ad:3e:a2:2e:af:
         34:8b:20:3e:8e:a6:53:3d:7f:b4:b8:95:25:a7:4f:ff:68:6b:
         51:2c:be:a2:e8:ba:8e:a3:48:0a:40:00:fb:79:0b:02:71:e9:
         24:d6:13:68:c7:2c:e2:ff:bc:62:69:90:b4:51:9f:6a:6b:9a:
         ce:12:c6:20:f8:6a:41:22:54:8d:99:ab:c0:07:83:e0:4f:d3:
         eb:40:50:2d:8b:88:05:17:6d:59:db:cf:39:86:b0:8e:b2:3f:
         b5:3e:1b:83:4e:ea:67:a9:04:2c:45:ab:c0:1c:d9:51:43:e2:
         67:0a:66:55
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICMukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjQwMTE2MDkxNzE4WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWE2NDk5ZS1lYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7xX8j0Td8k2FHUaRI+6Btc1HjDv4szoJ9fpI3A+zrp/jV3vAaM0g/l7HFzy
L+V9OWImgWJo+JkzUCsOAGnFM/tyB8jdeI3WuLZXl99SicM/RDlxbHJBrx+sMLGF
DnCNW+gdrgGSaxNSshMqFsvUZZig5WRioge8NDp2dbdULbZIK4nbDGOqk+osF6u9
cbd7d9GoVUUFvMoe7Qun5I9M+jZvuSWrVOFRmi6aFdnPHJedsVLCrXii2Mf5HT0u
dF9LCjYL5e9C8eXnP8mpNgCPrqT2B64Iz1kyUWC5N2ywKxETQEys5pzObpVcco5S
oaeICcAssk41nA2Tw9uj077e7wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFNXaE5xW
bgmj7uLVN166+IGpIsLTMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvMEI4ODAzNkFC
NDUwMTFFRThDREJCNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E
MDAuMCwEAgABMCYDBAJ6CBADBAJ6CCADBAN6CHADBAB6CHkwDAMEAHoIewMEB3oI
ADANBgkqhkiG9w0BAQsFAAOCAQEAADqSsubZfSFckgo/32NHXUaZ0zF6WRuton9L
L1OLjtdOQyFkn/NPLw65lCNbvmaTZ6l6svPLMXbuSAir0YUVjY+WTiu8CFX6a9lx
S1pSSmf/4fwlFvz8qgZssulKbZfR97bdCWAI5q5aMgqjiJGEYnGlY8894M0enYPz
oDmWYK8WXC2WrJ2T3WGS+a0+oi6vNIsgPo6mUz1/tLiVJadP/2hrUSy+oui6jqNI
CkAA+3kLAnHpJNYTaMcs4v+8YmmQtFGfamuazhLGIPhqQSJUjZmrwAeD4E/T60BQ
LYuIBRdtWdvPOYawjrI/tT4bg07qZ6kELEWrwBzZUUPiZwpmVQ==
-----END CERTIFICATE-----