Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6EE0C0C8018611EEA6EE486DC4F9AE02.roa
File:                     6EE0C0C8018611EEA6EE486DC4F9AE02.roa (raw, json)
Hash identifier:          HYkLq4FotjIM5KmrFLUfArqPc7P8kFc3IDvGXyq0JLw=
Subject key identifier:   BB:8C:1A:90:80:63:6B:C3:AE:57:09:D3:52:40:B4:87:D6:13:AF:FC
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       015B
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6EE0C0C8018611EEA6EE486DC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 20:45:40 +0000
ROA not before:           Fri 02 Jun 2023 20:45:40 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     208171
IP address blocks:        103.189.190.0/23 maxlen: 23
                          2001:df0:d840::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jun  2 20:45:40 2023 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=647a54f3-f59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:7e:c2:5f:18:ba:10:f7:fd:12:59:d4:c7:
                    1a:70:fa:ec:24:0d:ad:ca:d7:68:51:23:be:e2:66:
                    38:ea:b7:c8:67:8b:e4:7b:6a:58:7f:fa:d7:f5:1f:
                    30:13:a2:3c:1f:4a:60:a7:fc:21:78:d7:55:cc:e7:
                    86:83:08:57:49:d1:9d:f4:bc:b8:5d:34:ea:b1:35:
                    50:64:09:74:b3:c6:ef:95:c9:be:d7:7b:9b:bd:3e:
                    38:4f:ed:ed:47:68:08:71:22:06:36:85:c3:fe:e7:
                    44:04:c9:7f:54:0c:f9:3b:a6:94:c8:e0:21:e6:f3:
                    f5:dd:a6:aa:1d:25:db:7a:90:8f:d6:c5:7c:17:b5:
                    59:2d:bc:c2:49:b5:52:ae:32:02:71:6e:78:00:46:
                    d7:85:22:01:85:64:6f:87:d1:59:a2:e6:98:f8:9b:
                    fd:d5:c9:3f:e5:e6:74:42:39:a3:52:d7:88:b2:b5:
                    4d:56:45:d3:23:f0:a4:d5:c0:6b:8f:fd:ee:0f:d3:
                    5d:46:25:f4:eb:3a:cc:8e:f3:b8:f7:26:1d:82:ef:
                    09:3e:72:52:9f:2e:cc:0a:76:57:4b:09:d0:34:88:
                    c8:c2:ff:22:95:4d:11:b2:c7:fc:ae:17:c6:82:7e:
                    e0:98:f3:e9:38:cd:f6:a9:ad:e3:f1:e6:49:51:94:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:1A:90:80:63:6B:C3:AE:57:09:D3:52:40:B4:87:D6:13:AF:FC
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6EE0C0C8018611EEA6EE486DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.190.0/23
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:55:2d:57:84:c6:27:29:d1:72:f5:3f:1c:17:3d:91:31:e9:
         61:c4:9d:a9:77:6c:ed:c8:bf:51:e3:78:cc:f2:32:0f:78:ee:
         f8:00:6d:68:b8:e9:c0:a9:bf:58:e8:2d:31:37:71:00:ee:24:
         51:11:0e:bc:82:e3:53:57:0a:54:b5:9a:ae:23:20:29:af:4b:
         7c:5a:3c:6d:55:b6:a2:26:c6:11:6d:92:4d:1c:6d:c3:aa:de:
         c2:e4:d1:67:25:0b:8b:5e:45:9d:be:a8:1d:5e:de:ef:8d:a5:
         fb:f7:4d:a2:5d:92:87:24:cb:60:29:42:6b:df:8e:23:61:4b:
         96:ee:3b:bc:dc:22:c1:cb:b5:3b:52:be:42:43:57:c5:c7:a6:
         a7:2a:ba:04:75:7d:25:16:c8:1c:f4:9e:5c:6c:8b:5a:f9:19:
         eb:c3:e8:33:bd:9d:8d:68:51:34:9f:1d:1e:5e:88:89:ef:a9:
         4d:e1:9d:76:98:a3:92:78:6f:69:88:26:69:f6:b4:de:12:48:
         ab:39:b6:6a:37:7f:35:1b:6b:49:b6:5b:ec:0c:fe:ab:86:c7:
         f3:fd:f8:03:5a:25:b5:eb:57:ad:9c:8b:af:7c:7e:9e:58:b4:
         05:30:be:5f:d6:34:b2:9a:8a:e0:16:ea:15:53:ce:d2:26:e8:
         d9:1a:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----