Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/19AF41520D1311EBB2726077C4F9AE02.roa
File:                     19AF41520D1311EBB2726077C4F9AE02.roa (raw, json)
Hash identifier:          XiY2dRyMjQW9gQ1MTSDg4Vwe+fGaa8GhclVBj5eR2hE=
Subject key identifier:   75:FD:93:4D:27:5F:06:66:44:62:D0:E4:23:78:50:FC:44:8E:A6:3A
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       03DD
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/19AF41520D1311EBB2726077C4F9AE02.roa
Signing time:             Tue 17 Aug 2021 22:37:36 +0000
ROA not before:           Tue 17 Aug 2021 22:37:36 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     137184
IP address blocks:        202.43.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Aug 17 22:37:36 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=611c3a30-d1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:8d:13:38:6a:68:fc:59:0f:f6:38:14:83:
                    a6:5b:70:bf:26:89:e1:e2:24:13:44:b5:2f:bf:01:
                    d1:70:09:ab:f6:f1:da:66:5b:78:07:91:53:92:87:
                    c7:a7:5c:82:fa:53:a6:07:8c:6c:e3:47:f7:fd:f7:
                    c2:ad:89:ab:67:59:d2:43:50:cf:d5:8c:9d:90:f3:
                    7b:16:35:f9:be:e7:72:13:99:54:66:21:29:f0:12:
                    ae:96:af:77:dd:46:f0:df:a3:ef:99:24:85:5f:d5:
                    07:09:13:9f:a4:6b:3d:76:f8:d6:13:ce:9e:c7:3b:
                    25:b8:39:11:83:55:27:53:9b:07:66:3f:63:bf:f0:
                    0a:b9:aa:2f:e1:f1:82:bc:6c:51:8f:5a:72:ed:9f:
                    1a:7f:1d:88:0c:ce:26:49:c8:d1:12:a7:5e:a0:e4:
                    9a:a1:53:e2:ee:41:fe:08:c9:c0:30:ae:12:74:d3:
                    99:ce:8b:a9:ee:5a:a1:cc:35:f5:7c:9b:1f:96:c3:
                    10:e5:19:3e:d4:f8:80:73:70:e8:fc:2b:29:a0:bf:
                    69:cd:02:c3:e2:a2:00:60:ec:47:65:21:f1:aa:e1:
                    3a:2d:a6:0b:ed:cd:f0:9f:32:7d:d1:c3:95:b7:c0:
                    a4:b0:1e:68:27:a4:01:2f:87:89:75:e1:d7:a1:1c:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:93:4D:27:5F:06:66:44:62:D0:E4:23:78:50:FC:44:8E:A6:3A
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/19AF41520D1311EBB2726077C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:b5:1a:4f:a1:6f:2e:72:a9:3c:74:79:ae:3f:eb:26:87:
         88:0c:5e:07:fb:c9:d8:25:41:f7:e0:98:b7:67:5e:c8:4b:64:
         7f:b6:e1:02:86:66:74:39:5b:18:fe:0a:9b:b3:fa:a0:31:94:
         5a:7d:86:58:98:3f:e1:b0:0b:19:c0:e0:d8:2b:89:a7:8d:83:
         52:a5:78:1c:86:5b:43:e1:a5:e1:06:71:da:4b:ec:b7:41:5a:
         e4:94:66:3d:72:41:55:c1:6c:a0:c5:0f:b5:82:46:5b:3a:55:
         88:d9:d8:13:2b:05:f0:f2:c3:b8:1c:0e:f1:1b:dd:cf:c5:b0:
         7b:41:f6:36:14:b6:40:de:f1:91:35:5f:27:4e:43:de:e9:a8:
         27:81:c2:ff:08:56:ac:d0:eb:5b:e4:f6:43:e6:3d:24:00:30:
         ad:35:9f:10:86:b4:0f:60:7e:49:74:a9:a0:b6:ed:08:ae:8e:
         59:37:b6:a1:12:87:33:7c:1f:9e:31:79:fa:11:c8:37:e2:11:
         40:d5:d1:c1:db:69:e0:d5:d6:20:10:54:54:95:68:48:d7:2f:
         61:11:06:bc:b9:15:ae:d8:55:17:d7:1a:cd:d7:f6:89:8f:b7:
         98:34:99:42:07:b3:73:1c:85:55:9e:a8:13:6f:ad:cf:ea:6e:
         f7:50:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----