Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/0AF532443D3A11ED8E7E8F15C4F9AE02.roa
File:                     0AF532443D3A11ED8E7E8F15C4F9AE02.roa (raw, json)
Hash identifier:          ihGJvCHt/+JfOzq89vporYP/i/XEHr2m69Lmfr5zC0E=
Subject key identifier:   14:9D:B1:20:1C:D9:54:02:21:69:13:2D:6F:0E:16:A8:7F:9E:A2:BF
Certificate issuer:       /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial:       62
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/0AF532443D3A11ED8E7E8F15C4F9AE02.roa
Signing time:             Mon 26 Sep 2022 01:25:02 +0000
ROA not before:           Mon 26 Sep 2022 01:25:02 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     9824
IP address blocks:        110.134.114.0/23 maxlen: 24
                          2001:ff0:7fe::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
        Validity
            Not Before: Sep 26 01:25:02 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6330ff6e-e5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:ee:c9:34:3f:59:76:d0:59:e3:a8:2a:be:
                    82:5f:bd:8b:a4:73:29:ea:c7:f1:60:85:02:f4:74:
                    1c:12:a2:25:50:03:a6:18:8d:9f:cd:bd:17:38:3a:
                    01:eb:4a:21:1a:d9:23:93:fb:83:70:9d:d5:7a:c8:
                    89:f1:0c:43:cd:24:11:df:03:94:e2:b7:5d:bc:1d:
                    bc:43:b2:26:aa:cd:87:d2:2a:14:f3:a8:c7:e8:96:
                    56:ee:40:22:6a:e6:65:e4:24:4d:32:e6:48:24:3b:
                    f1:82:c7:fe:06:2c:ef:c4:29:0e:1b:3c:69:a3:52:
                    db:da:ae:80:0b:59:a1:0c:b5:3d:a2:7b:84:b7:b2:
                    ae:2e:fa:17:14:27:2b:ea:35:f3:e9:a5:a6:9a:9c:
                    e5:0e:d3:b5:a6:62:2e:a5:7f:10:42:d2:1d:f6:96:
                    ef:94:e1:80:36:7c:12:8c:2a:ff:bb:a6:35:f5:eb:
                    4c:79:92:3c:98:80:b9:cb:4a:da:99:78:f9:7a:e3:
                    af:56:f1:52:e5:10:33:e4:d8:5f:a9:9a:4c:f0:f2:
                    0d:88:30:b3:ae:6f:e5:2f:40:89:0b:ab:c5:25:68:
                    06:08:8b:63:40:11:5b:99:71:de:d7:4e:f0:b2:24:
                    d4:b1:07:97:52:9d:54:10:c0:43:9d:5d:a0:98:15:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9D:B1:20:1C:D9:54:02:21:69:13:2D:6F:0E:16:A8:7F:9E:A2:BF
            X509v3 Authority Key Identifier:
                keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/0AF532443D3A11ED8E7E8F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.134.114.0/23
                IPv6:
                  2001:ff0:7fe::/47

    Signature Algorithm: sha256WithRSAEncryption
         69:20:a6:fd:54:2c:13:95:82:18:cf:c2:57:e2:f1:67:ea:e9:
         6d:b6:84:a6:99:83:da:43:db:57:c1:21:6e:d8:9b:cf:e6:99:
         ee:8f:46:69:03:ec:68:51:1b:60:0b:0c:c0:f1:25:6f:ba:1e:
         3c:58:20:a7:7b:67:45:de:7b:22:24:50:df:20:f9:d3:22:b2:
         b2:6a:8e:0c:7f:88:b4:8a:39:12:e6:8e:8c:bf:8d:f2:1d:ce:
         fa:14:1c:d9:a1:3e:ea:a6:18:d7:23:d3:a1:cd:36:99:a8:b8:
         2b:8d:6a:d7:69:e4:32:ae:73:5b:2d:24:bb:0d:35:c7:b7:ff:
         81:cd:62:2b:a4:2e:aa:b5:24:fa:c1:a2:d5:5c:5f:1c:e2:13:
         3e:94:60:44:b9:6a:19:ad:ef:d6:20:71:e3:cd:0e:cf:9f:fe:
         7a:0b:9e:76:ba:02:25:55:dd:b4:7b:22:da:ae:55:ed:01:ee:
         e3:d4:57:e7:50:09:af:aa:04:fc:73:09:d6:3c:30:8d:c9:7a:
         a9:17:25:17:0c:4c:ce:51:46:19:f4:72:49:4d:17:12:76:30:
         8d:6d:a1:fc:57:fa:4c:a3:c0:95:ec:a0:89:f9:1e:75:f2:a4:
         e9:ea:9c:5b:8a:cc:71:bc:99:14:46:35:a4:89:21:73:e5:80:
         89:69:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----