Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9BE6EF207CE811ED9F596C30C4F9AE02.roa
File:                     9BE6EF207CE811ED9F596C30C4F9AE02.roa (raw, json)
Hash identifier:          nn4SfpWyS0lQJlfmCWq9ln/BcssBpe6EYGFJ1uZyI0U=
Subject key identifier:   E4:02:A5:AD:DE:63:6C:D3:DE:11:C1:4A:1D:E9:6B:D1:5E:78:CE:AB
Certificate issuer:       /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial:       01CE
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9BE6EF207CE811ED9F596C30C4F9AE02.roa
Signing time:             Fri 16 Dec 2022 02:23:21 +0000
ROA not before:           Fri 16 Dec 2022 02:23:21 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     136970
IP address blocks:        103.146.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
        Validity
            Not Before: Dec 16 02:23:21 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=639bd699-9e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:ce:7d:ed:8d:b0:e8:79:da:e9:f6:51:aa:
                    59:ac:77:bd:ea:7c:64:92:11:38:93:79:dd:01:66:
                    28:f7:35:7a:6d:5c:d5:cb:72:72:51:a6:af:35:df:
                    c5:3b:f9:40:02:72:27:6f:61:65:d2:78:67:b4:ca:
                    dd:71:5f:55:a4:a0:ba:e5:af:21:55:5e:45:f4:e5:
                    df:41:35:57:71:8e:bc:88:cb:dc:93:ff:3e:1a:60:
                    8a:e2:ef:29:d9:06:4b:58:1a:db:fa:a8:47:84:2f:
                    bc:13:1c:b0:91:df:19:32:bf:4e:d1:38:be:3c:f6:
                    d0:8b:63:40:ac:e7:53:94:4c:fe:dd:74:86:02:79:
                    9c:c3:2f:94:15:17:d0:f4:3c:fa:7f:bd:5d:ec:cf:
                    be:43:a9:55:ab:4a:44:99:43:18:c1:dd:78:19:89:
                    f4:0a:77:30:af:51:63:20:4e:df:2c:e9:02:80:d6:
                    9c:79:4c:05:ba:4c:59:8e:da:1c:19:8f:cd:a3:62:
                    50:c7:91:f6:37:b8:02:4a:b5:67:74:5b:02:0e:40:
                    83:85:1a:42:37:3a:60:29:22:a1:ba:db:e4:12:81:
                    3a:26:32:2d:1b:3e:dc:a6:d6:79:17:9b:0b:be:c8:
                    ee:6d:f1:87:d8:6b:26:67:3c:8a:c3:1a:14:48:14:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:02:A5:AD:DE:63:6C:D3:DE:11:C1:4A:1D:E9:6B:D1:5E:78:CE:AB
            X509v3 Authority Key Identifier:
                keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9BE6EF207CE811ED9F596C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f0:2f:2f:02:dd:33:16:c8:c0:2c:6a:5e:12:b4:ac:50:b5:
         69:70:11:2e:7b:09:0c:4b:70:bc:e1:c3:2f:06:3c:3d:06:63:
         f4:b7:b1:41:27:fd:83:5d:60:75:52:90:00:66:bc:74:a2:56:
         52:fc:51:0b:c2:38:4c:99:3c:ee:14:a3:f3:a4:95:0a:cf:46:
         ac:b7:56:9b:78:9b:e5:21:04:58:68:c6:f5:d3:0b:a3:24:b2:
         86:fc:68:cd:93:a5:66:e7:8b:95:7a:ba:8d:ea:39:59:b6:04:
         6d:72:e5:90:33:f1:5c:b0:31:05:dd:43:e7:81:97:8a:cb:d5:
         5f:3b:08:41:00:1d:4d:57:27:33:68:12:df:7e:7b:a9:a0:4a:
         fb:0e:a8:e9:e4:27:61:1c:07:5a:cd:28:15:8f:a8:f3:b9:1b:
         ab:6b:78:da:f1:60:a5:3e:51:18:f0:15:79:2b:40:51:db:f7:
         e8:e5:1b:e9:46:3f:02:03:05:3c:ed:5f:11:f6:bf:8a:c0:ab:
         b2:0a:7f:00:39:c1:53:9b:9a:95:c5:25:e8:c2:fd:e3:22:77:
         20:d4:55:9f:8a:66:7c:8d:1d:c6:32:1d:c4:f8:78:04:76:7d:
         8f:01:05:4e:94:96:b0:ed:00:79:12:f4:22:47:85:6f:78:3b:
         b6:a8:32:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBGMkQxMTAvBgNVBAUTKEVDNTc0MEM0NzZEN0ZGRjQ0QkE2MUY4NTc5MTVBMUYx
Nzk5MzFBNEEwHhcNMjIxMjE2MDIyMzIxWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzliZDY5OS05ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnTjOfe2NsOh52un2UapZrHe96nxkkhE4k3ndAWYo9zV6bVzVy3JyUaavNd/F
O/lAAnInb2Fl0nhntMrdcV9VpKC65a8hVV5F9OXfQTVXcY68iMvck/8+GmCK4u8p
2QZLWBrb+qhHhC+8Exywkd8ZMr9O0Ti+PPbQi2NArOdTlEz+3XSGAnmcwy+UFRfQ
9Dz6f71d7M++Q6lVq0pEmUMYwd14GYn0Cncwr1FjIE7fLOkCgNaceUwFukxZjtoc
GY/No2JQx5H2N7gCSrVndFsCDkCDhRpCNzpgKSKhutvkEoE6JjItGz7cptZ5F5sL
vsjubfGH2GsmZzyKwxoUSBSLLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOQCpa3e
Y2zT3hHBSh3pa9FeeM6rMB8GA1UdIwQYMBaAFOxXQMR21//0S6YfhXkVofF5kxpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEYyRC8wODVBNzA0ODlE
RjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi83RmRBeEhiWF9fUkxwaC1GZVJXaDhYbVRH
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGZEF4SGJYX19STHBoLUZlUldoOFhtVEdrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjBGMkQvMDg1QTcwNDg5REY5MTFFQzgzQ0NGQTY1QzRGOUFFMDIvOUJFNkVGMjA3
Q0U4MTFFRDlGNTk2QzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkjMwDQYJKoZIhvcNAQELBQADggEBAKfwLy8C3TMWyMAs
al4StKxQtWlwES57CQxLcLzhwy8GPD0GY/S3sUEn/YNdYHVSkABmvHSiVlL8UQvC
OEyZPO4Uo/OklQrPRqy3Vpt4m+UhBFhoxvXTC6Mksob8aM2TpWbni5V6uo3qOVm2
BG1y5ZAz8VywMQXdQ+eBl4rL1V87CEEAHU1XJzNoEt9+e6mgSvsOqOnkJ2EcB1rN
KBWPqPO5G6treNrxYKU+URjwFXkrQFHb9+jlG+lGPwIDBTztXxH2v4rAq7IKfwA5
wVObmpXFJejC/eMidyDUVZ+KZnyNHcYyHcT4eAR2fY8BBU6UlrDtAHkS9CJHhW94
O7aoMoA=
-----END CERTIFICATE-----