Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/631A4090EC8611ECB73DFC2AC4F9AE02.roa
File:                     631A4090EC8611ECB73DFC2AC4F9AE02.roa (raw, json)
Hash identifier:          IJc1Rw5NYvs6ExaHWDOAQmpvNCt+H2WDVx48v5nwwZA=
Subject key identifier:   64:DB:95:F4:2E:DB:82:3B:81:90:50:80:DE:05:AF:5E:7F:7A:26:65
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       04E3
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/631A4090EC8611ECB73DFC2AC4F9AE02.roa
Signing time:             Thu 16 Jun 2022 13:08:03 +0000
ROA not before:           Thu 16 Jun 2022 13:08:03 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     24323
IP address blocks:        103.243.81.0/24 maxlen: 24
                          103.243.82.0/24 maxlen: 24
                          116.206.61.0/24 maxlen: 24
                          116.206.62.0/24 maxlen: 24
                          116.206.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Jun 16 13:08:03 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62ab2b32-da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:51:32:dc:1f:a1:99:a7:d3:32:8a:41:f9:
                    2b:23:da:7b:34:e2:ba:57:a0:2f:f3:1d:59:97:6d:
                    ab:be:5e:ae:0b:64:d9:5a:f9:10:81:11:c5:9c:7c:
                    4d:0c:7f:18:6b:fd:b4:82:88:84:43:ae:55:a6:8d:
                    05:c3:79:73:5c:a8:d1:d2:f9:03:46:96:d2:5f:e6:
                    43:cf:fc:b9:15:b7:a6:fb:5c:22:40:16:0d:a4:94:
                    e4:9b:a6:be:3f:6e:f8:e2:0d:47:b3:41:e5:6c:f5:
                    0d:2f:7a:ef:e0:0d:9d:7a:0e:5e:be:23:82:a7:1f:
                    ef:03:8c:ef:c3:13:92:de:bb:bb:ac:7c:00:e4:66:
                    e8:a9:cd:c9:58:7f:8f:41:86:51:0a:75:cc:16:00:
                    5b:e5:34:d6:96:e0:2c:39:9b:4b:9b:56:82:ee:44:
                    44:74:cc:cd:f5:77:15:55:30:75:30:02:e2:e3:34:
                    4e:e8:23:a7:29:ba:ce:ce:49:f8:16:3b:f6:54:6c:
                    4c:a0:c0:44:aa:90:6c:cf:30:e9:e1:a9:79:77:08:
                    97:d3:41:08:41:30:81:c7:cc:76:97:cd:60:34:13:
                    ef:b5:4e:69:c0:31:55:7e:49:66:b4:6e:3b:a8:b6:
                    53:6f:6c:01:1a:fb:ef:0f:bf:40:6c:f0:40:d5:4e:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:95:F4:2E:DB:82:3B:81:90:50:80:DE:05:AF:5E:7F:7A:26:65
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/631A4090EC8611ECB73DFC2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.81.0-103.243.82.255
                  116.206.61.0-116.206.63.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:dc:7f:26:9c:16:7f:dd:6c:9c:cf:89:f9:21:07:e5:71:
         14:39:c2:a5:4d:5b:a2:74:8d:1e:c5:0b:eb:de:09:aa:72:d3:
         47:ae:86:9a:b2:f3:5e:ad:61:c2:8b:83:82:67:e2:79:1e:93:
         e4:96:6b:95:c8:66:71:9e:b8:05:f3:b1:4b:75:a1:12:dc:dc:
         4d:8e:a5:52:d8:fb:05:56:fd:93:58:b8:5b:72:9b:1d:7a:ce:
         a5:b2:95:6b:1e:34:94:35:96:56:79:9d:c6:ae:d3:40:90:c3:
         35:f0:d1:9b:fe:01:ea:e1:4b:98:8e:f4:67:18:26:cc:27:74:
         35:20:e0:73:b2:46:33:5e:99:3e:d3:3a:3e:e9:2a:d0:0c:05:
         f8:a7:bc:86:0b:db:2e:48:53:e0:50:2d:81:e6:c8:8d:41:47:
         08:98:c3:a7:9a:96:19:85:dc:31:76:e5:b8:42:12:cc:c3:ac:
         45:ba:f8:ab:42:91:cd:ff:29:ef:5a:a6:ef:10:79:4f:ef:22:
         02:ae:c1:33:f4:d9:d0:f0:80:c7:1e:7e:51:9e:a2:97:53:8d:
         99:51:81:7b:48:8f:0d:00:55:e5:d2:3b:c1:e3:b5:9e:e4:2a:
         2e:c8:f5:7a:5b:bb:a5:da:76:85:e1:5b:5e:02:e3:32:c0:42:
         27:bc:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----