Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
File:                     234783E49DE711EC9E35515BC4F9AE02.roa (raw, json)
Hash identifier:          khSQwSPyItbMY0pAYXW8OOLmM0wt5umiHX7zjjNw1VE=
Subject key identifier:   80:DD:00:60:98:37:CF:22:49:47:9D:A5:FB:9A:E2:F0:38:D2:CB:5E
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       2FD1
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
Signing time:             Mon 07 Mar 2022 07:21:00 +0000
ROA not before:           Mon 07 Mar 2022 07:21:00 +0000
ROA not after:            Sat 28 May 2022 00:00:00 +0000
asID:                     7029
IP address blocks:        118.188.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12241 (0x2fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar  7 07:21:00 2022 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=6225b25b-003e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:23:d2:49:e8:db:44:cd:2d:1f:d7:f2:c4:
                    75:5d:cf:98:37:94:7a:59:53:f9:af:8f:5a:38:91:
                    12:9a:7d:cd:0b:76:de:c5:28:76:8c:06:5e:82:1b:
                    77:91:9a:30:2d:d4:77:13:6a:44:6c:91:fc:55:de:
                    e2:59:ad:0c:a3:23:93:52:54:ee:81:c8:be:94:0f:
                    20:e4:14:a4:b1:7d:21:72:bc:e3:e7:53:9c:2a:99:
                    6f:97:00:1b:6f:62:10:af:a4:4d:bf:dd:62:b3:e3:
                    fe:83:0e:68:98:dc:66:d5:17:03:ee:ff:45:93:35:
                    bc:a4:21:68:4b:21:9b:29:d4:73:bf:dd:50:5f:93:
                    d2:8d:a3:1f:75:34:3b:a5:c8:86:bc:45:f3:46:b6:
                    d8:97:d5:bb:76:43:c2:05:16:a4:24:a9:52:d5:e1:
                    f3:6e:ba:83:fd:85:e3:ab:e0:e2:67:a8:da:17:05:
                    0f:e3:cf:71:4d:7a:69:ee:50:32:45:53:e9:e8:a8:
                    91:35:1c:79:4d:4b:37:8d:ef:fd:a3:bc:65:a5:0a:
                    e1:d8:45:c9:57:0b:08:ac:3f:77:21:76:44:be:b5:
                    94:88:30:3e:ca:3b:06:ea:4c:f0:e5:3b:00:91:92:
                    46:fb:6a:19:f0:d2:3e:7b:e9:d8:b5:9b:30:a3:74:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:00:60:98:37:CF:22:49:47:9D:A5:FB:9A:E2:F0:38:D2:CB:5E
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/234783E49DE711EC9E35515BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.188.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d2:4e:89:86:39:9e:54:dd:34:b7:7b:2d:bd:6f:a1:e8:60:43:
         74:2e:18:3f:86:70:3b:c3:9a:31:21:4b:bd:5d:28:ca:0a:3e:
         ed:d2:f2:bc:c2:85:c0:a4:40:2c:d3:0a:32:48:e2:18:a3:f5:
         77:63:42:75:96:5d:e2:16:0a:d3:29:7e:8a:dc:1b:e0:c7:83:
         62:a0:75:ee:e3:48:f1:16:57:84:81:64:34:c6:76:ee:42:68:
         e4:29:70:57:d1:aa:ca:69:65:99:ce:f1:df:b3:ca:4c:b1:ee:
         ba:ad:b0:51:6b:9c:42:72:ee:dc:44:df:7c:be:ad:e4:f7:58:
         56:0a:98:0c:28:2b:79:c9:c2:99:30:43:34:74:a0:d0:5c:70:
         0e:1b:70:36:1a:51:56:1b:40:b6:52:c6:2b:56:78:34:87:36:
         07:45:e4:0c:95:d6:53:08:92:52:35:3d:78:a8:5d:c9:41:b2:
         b2:ee:b7:30:f7:57:19:f4:4d:ea:93:4a:00:49:91:0e:25:17:
         53:b9:d5:dc:ba:5b:11:6a:f8:89:b2:c8:f6:ff:39:cc:82:b0:
         fd:99:0c:73:bc:17:78:0c:59:41:f5:4c:cb:45:ec:0c:77:b4:
         8d:7d:e9:aa:3e:71:8b:b5:09:f4:a0:78:7e:95:d9:43:43:67:
         ba:82:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----