Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6488E6F60B0F11ECA141B85CC4F9AE02.roa
File:                     6488E6F60B0F11ECA141B85CC4F9AE02.roa (raw, json)
Hash identifier:          MUn3iCCAmzSjZWhueZQtWx3aTppdSEa2c0cwWQNYs64=
Subject key identifier:   C3:E6:2D:D9:AD:AA:BD:BE:6D:1B:F6:E6:6F:68:F6:FD:B9:20:31:E6
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       052B
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6488E6F60B0F11ECA141B85CC4F9AE02.roa
Signing time:             Fri 01 Oct 2021 10:49:07 +0000
ROA not before:           Fri 01 Oct 2021 10:49:07 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     138974
IP address blocks:        103.150.68.0/23 maxlen: 24
                          2001:df3:5d80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Oct  1 10:49:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6156e7a3-e80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:17:ba:18:d3:86:3c:30:37:fe:29:d5:c9:
                    f4:f6:0b:5e:f8:43:92:6d:57:22:4e:09:c0:fc:ea:
                    b0:45:ea:bc:73:5d:a0:1f:7a:5d:b6:74:eb:47:49:
                    71:66:d5:41:a7:de:4d:e3:d7:37:a6:96:2e:42:a0:
                    9b:32:53:5b:63:76:02:37:33:2f:04:cc:71:37:07:
                    91:6b:3b:a1:ce:97:83:99:84:62:63:eb:a0:8f:71:
                    cf:c9:d2:a9:05:3e:9d:01:a8:f2:93:02:9e:bc:36:
                    30:38:51:f5:f0:db:d4:f8:78:c9:0a:3a:d8:46:0b:
                    77:6d:61:28:7a:7a:e1:aa:91:85:6e:6b:75:68:6e:
                    88:57:aa:d6:f2:09:a8:c0:ff:06:c5:32:93:f1:0d:
                    c6:ea:1c:92:cd:6a:23:2d:21:bb:a0:9e:ac:88:47:
                    8f:48:37:ba:27:82:88:15:b7:d8:29:50:1f:c6:dc:
                    3e:bf:bb:8d:52:00:7e:02:40:75:b6:51:ac:6c:e8:
                    d2:13:4b:df:2f:36:7f:0d:de:2c:25:d5:56:70:f1:
                    83:64:70:f6:3f:a9:9e:3c:b7:4e:de:20:90:cd:54:
                    04:9d:7e:f5:19:74:5b:2f:b0:48:2d:c4:51:65:9f:
                    3e:00:15:ce:7f:d9:03:53:45:9a:12:3c:bc:dd:c9:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E6:2D:D9:AD:AA:BD:BE:6D:1B:F6:E6:6F:68:F6:FD:B9:20:31:E6
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6488E6F60B0F11ECA141B85CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.68.0/23
                IPv6:
                  2001:df3:5d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:48:b0:96:88:f5:00:aa:c3:fd:78:a0:a1:95:5e:af:4e:f0:
         a4:f7:22:b8:5a:c6:4d:11:58:b6:53:58:cb:f6:7b:38:85:03:
         dd:5c:02:7b:78:b6:bf:05:90:52:0a:8e:3c:10:c8:8c:99:fc:
         0f:09:98:c6:63:bb:cc:4a:aa:85:12:fe:92:b0:4f:26:fb:1d:
         c7:da:3a:94:fa:92:69:95:1f:41:fd:7d:08:62:71:ed:b2:d9:
         1a:c9:bb:c7:0c:4c:d5:26:42:1b:ad:d1:da:96:6a:f6:0f:2f:
         43:2d:e5:1a:e1:c7:b6:f9:bf:5a:23:9d:2a:f9:e8:31:f8:d6:
         30:b5:84:7f:83:50:09:82:b7:36:a2:59:84:e5:34:74:20:b5:
         a8:f2:5c:e2:18:6e:02:6f:88:e8:62:08:b8:2b:7a:d8:ba:a0:
         50:9d:22:a5:ba:3b:fb:9c:be:79:2f:c9:28:14:6b:fe:0d:cb:
         5e:c4:20:48:bf:77:e3:ea:be:ee:d6:31:99:67:ad:a2:ad:0c:
         f8:e0:55:d4:46:c8:7e:b4:8f:ac:8e:2e:0f:d9:a3:b4:c5:ce:
         86:ba:e9:31:49:7d:b7:40:ff:b0:c8:40:6a:a1:c7:99:07:01:
         49:2e:ed:87:5b:f5:69:dc:52:69:39:b3:47:a4:13:2a:b5:7b:
         35:c5:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----