Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
File:                     80E82C6CE15611EC9E14513DC4F9AE02.roa (raw, json)
Hash identifier:          QskQPS45tS1beEQw1w0Khy9tijhyyGY8zd1dWtwqq00=
Subject key identifier:   8C:60:6A:A3:89:7C:90:CF:7C:B7:93:BD:2A:0C:CD:25:5E:EC:FC:7D
Certificate issuer:       /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial:       0304
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
Signing time:             Wed 01 Jun 2022 14:58:01 +0000
ROA not before:           Wed 01 Jun 2022 14:58:01 +0000
ROA not after:            Sat 01 Oct 2022 00:00:00 +0000
asID:                     137449
IP address blocks:        103.167.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Validity
            Not Before: Jun  1 14:58:01 2022 GMT
            Not After : Oct  1 00:00:00 2022 GMT
        Subject: CN=62977e79-1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:0a:bb:26:bd:63:a7:a8:ee:6e:7c:14:b8:
                    81:ba:50:c2:9a:03:ae:30:e4:4c:4f:ab:2f:6e:ad:
                    19:dd:67:15:d8:cc:65:e0:f1:18:e3:53:b7:10:b2:
                    e1:56:6c:23:ff:07:53:14:ba:58:7f:e9:7b:af:86:
                    cb:04:fb:83:35:77:b0:41:01:87:c6:58:5e:cd:ee:
                    69:22:2b:72:e2:a5:75:69:e6:af:49:f3:c5:47:57:
                    ed:45:11:16:92:a9:4d:4d:76:af:5e:f8:94:9e:59:
                    31:5f:3a:09:91:83:3c:67:f7:b9:4c:39:d2:61:0d:
                    2c:48:a4:cd:40:0d:c9:31:86:25:1e:1b:13:7a:4d:
                    03:25:bf:fa:e8:a0:ea:9c:87:37:67:7d:d1:88:82:
                    8a:cc:5e:9c:0c:b6:d9:bd:8b:12:6a:bb:28:bb:48:
                    64:6e:31:ac:a6:79:20:89:ef:82:57:27:26:f2:31:
                    4a:e9:4b:73:8b:5f:f1:28:53:66:39:a4:cc:28:df:
                    8e:9f:e1:9f:fd:e0:2b:89:f1:5b:94:8d:eb:b9:c5:
                    18:fa:38:eb:d6:14:31:f5:4d:6b:d1:fc:ce:60:47:
                    5d:e0:ff:a0:3b:a8:c0:60:e5:b4:73:4f:40:d5:54:
                    e8:a3:72:d5:e2:61:ff:f6:2e:04:b3:96:4f:fd:a5:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:60:6A:A3:89:7C:90:CF:7C:B7:93:BD:2A:0C:CD:25:5E:EC:FC:7D
            X509v3 Authority Key Identifier:
                keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/80E82C6CE15611EC9E14513DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:f4:31:0b:7a:48:c1:7d:72:48:49:26:1f:1e:4a:da:cd:
         fb:ca:9f:3d:28:fa:79:6a:2e:a4:59:d0:8f:ed:3f:ee:31:c4:
         32:9b:2e:30:0b:54:8a:db:80:cc:a8:e3:78:f6:a6:83:a3:f4:
         df:b5:1e:e9:f2:40:06:69:d0:62:30:50:37:65:a2:21:20:a8:
         9f:6c:63:6a:03:b4:ec:23:69:be:94:24:23:df:bc:a5:35:0e:
         c4:74:87:9d:3f:8d:61:4b:21:09:99:89:a4:67:34:e3:f7:32:
         b5:52:79:00:1d:26:7f:fe:31:9e:9d:7a:78:ed:0c:05:88:43:
         1e:5b:20:f8:a9:df:9a:20:5f:79:d6:4d:b4:bc:73:d4:c9:85:
         8c:d9:e0:f2:ba:2f:cd:0c:9f:74:e8:b4:c0:1f:da:20:7d:88:
         f7:12:c6:d3:ec:74:ca:5a:ee:1a:1f:11:2e:5c:30:48:df:73:
         da:61:34:20:c8:9b:6b:55:a4:7f:92:55:08:16:14:28:41:1e:
         81:49:90:e2:16:f1:e2:c3:84:2f:87:10:17:dc:85:4d:97:fb:
         ac:9b:9d:f2:d2:37:71:84:88:e3:c2:3b:eb:61:a8:32:af:a9:
         5b:c2:47:36:27:3e:e1:4b:b4:b6:c8:fb:c7:18:c9:e0:23:07:
         5b:dd:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----