Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C760158EF2D511EC8F663D52C4F9AE02.roa
File:                     C760158EF2D511EC8F663D52C4F9AE02.roa (raw, json)
Hash identifier:          2SUF0CrP/GXYNlmtiVaDtFx6TVFTuXJQMB4d6h+y8c8=
Subject key identifier:   33:4E:AA:13:21:B2:42:65:77:12:98:A3:18:AB:12:3D:63:12:86:56
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3119
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C760158EF2D511EC8F663D52C4F9AE02.roa
Signing time:             Thu 04 Aug 2022 01:20:58 +0000
ROA not before:           Thu 04 Aug 2022 01:20:58 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        122.8.16.0/22 maxlen: 22
                          122.8.24.0/22 maxlen: 22
                          122.8.112.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22
                          122.8.120.0/22 maxlen: 22
                          122.8.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12569 (0x3119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Aug  4 01:20:58 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62eb1efa-3902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:5f:3d:11:e9:b5:34:76:c7:43:7b:5c:13:
                    ae:ba:2f:11:70:2b:de:bc:60:6f:5b:bb:cb:52:f7:
                    11:10:c9:52:68:bc:a1:92:be:fe:c3:75:8a:9b:d8:
                    67:a4:77:34:0e:d6:e3:04:0f:37:52:87:ce:95:e6:
                    b4:9b:1a:2d:85:ab:4f:71:ac:95:93:2d:64:a3:64:
                    4f:62:cd:0f:71:86:63:83:d2:ea:fb:1b:aa:05:4a:
                    f8:b0:dc:55:5e:ce:f6:95:09:17:a3:b9:a5:26:fd:
                    40:e9:8c:06:73:06:5a:eb:3d:36:94:dc:01:96:50:
                    c2:0f:f7:56:68:f6:94:50:a4:e8:90:1e:d5:79:a1:
                    63:0f:c3:44:4b:95:e1:2c:38:a1:32:4a:76:21:95:
                    7e:80:8c:1a:11:46:80:c4:52:e1:f0:6c:4f:df:08:
                    bc:34:6a:11:bc:eb:3c:30:37:91:01:26:6c:2f:47:
                    88:32:c9:66:51:bb:ce:32:ba:b3:41:a5:72:82:c4:
                    73:e5:f7:b9:ad:50:b9:6c:4f:3d:4d:fb:9d:77:d6:
                    8e:1a:eb:d7:71:a3:cc:4b:79:ab:25:21:6e:29:dd:
                    6c:10:e5:e8:6d:88:97:8d:cc:5b:19:3c:36:12:8d:
                    a6:8f:a4:48:7d:f3:d4:6d:39:fe:a2:03:36:b3:95:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4E:AA:13:21:B2:42:65:77:12:98:A3:18:AB:12:3D:63:12:86:56
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C760158EF2D511EC8F663D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.16.0/22
                  122.8.24.0/22
                  122.8.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ef:16:6d:0f:eb:6e:2a:66:f9:8d:df:32:8c:93:ad:30:2f:b3:
         55:41:70:28:84:c8:a3:f7:7d:5f:57:9b:d4:3f:78:e7:b8:71:
         9d:8f:0f:85:19:d9:e5:1d:3f:2d:a1:d0:25:8f:c5:99:d7:33:
         3a:90:ea:b1:fd:94:7a:4c:7f:22:f9:d4:ed:ad:c8:b9:7e:a3:
         24:f0:0f:27:9a:3e:31:8c:07:70:74:ae:20:9b:d8:31:bd:e2:
         c1:4b:c2:09:63:0e:95:71:f1:01:0e:00:66:80:5d:19:da:59:
         33:e2:13:54:e1:c8:79:1c:7e:b3:ce:03:6b:5f:70:4c:62:7d:
         98:8e:8e:77:48:b5:20:bd:c6:a2:5a:8a:14:70:61:cf:c7:43:
         cb:b3:ea:46:04:30:67:d4:4b:5f:f8:37:33:7b:85:e7:04:2f:
         78:42:8f:fe:69:84:cc:47:5c:3c:c7:1a:11:d6:77:71:b8:1e:
         7c:4a:cc:ea:d2:74:18:4d:15:81:1a:5b:24:a3:82:52:ca:b5:
         a2:51:2e:b6:e4:7b:e2:bb:a6:4a:dd:4f:75:d6:c7:4a:ae:06:
         dd:06:7d:e6:15:e7:71:eb:8d:b4:7c:f5:1f:b8:96:4c:91:d2:
         5a:0c:30:d0:49:03:24:d8:19:f4:37:02:16:0f:da:b8:5d:b0:
         27:71:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----