Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/374DFF6687B411EB8F13A617C4F9AE02.roa
File:                     374DFF6687B411EB8F13A617C4F9AE02.roa (raw, json)
Hash identifier:          52qzW/HJGyNwgMsF/0IYeX84e24bbxEQa74nKF3/7II=
Subject key identifier:   23:D7:A5:2C:55:BE:90:5F:E4:18:B5:FC:24:AB:27:73:DB:F0:35:AE
Certificate issuer:       /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial:       0788
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/374DFF6687B411EB8F13A617C4F9AE02.roa
Signing time:             Wed 30 Aug 2023 21:48:32 +0000
ROA not before:           Wed 30 Aug 2023 21:48:32 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     140712
IP address blocks:        103.152.26.0/23 maxlen: 23
                          103.152.26.0/24 maxlen: 24
                          103.152.27.0/24 maxlen: 24
                          2001:df3:f280::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Validity
            Not Before: Aug 30 21:48:32 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=64efb930-281d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:b0:1b:03:92:aa:1e:fc:88:5a:15:ea:82:
                    7e:6a:3b:41:18:69:16:d2:e1:3b:fd:08:e3:6e:01:
                    c5:5a:e7:3f:8c:d8:55:e2:5b:c7:20:f0:05:a8:d3:
                    6a:57:58:3f:85:e0:82:ec:b6:2b:0e:c2:7b:bc:61:
                    83:39:0e:14:ad:bd:02:bb:74:0f:3e:d0:42:aa:c0:
                    b7:0b:a3:a7:ff:91:64:2a:27:d1:48:02:86:10:01:
                    2f:d9:ed:ea:6f:64:ca:6b:74:f5:f2:24:bc:e3:9e:
                    33:4c:fd:4f:23:68:ff:6a:37:5b:ea:60:71:88:7b:
                    57:1f:c4:a1:b2:f1:83:5d:47:f7:c3:ba:36:2e:bd:
                    94:89:9a:6e:06:0b:24:de:97:17:a7:c1:f2:fe:1f:
                    56:c3:5e:e6:ca:01:cf:e0:59:8e:53:3b:39:07:74:
                    2c:78:91:0e:2b:1a:53:0e:bf:8f:a0:20:ff:da:70:
                    36:28:f1:2f:80:d4:82:b8:e8:9c:b0:da:1f:95:20:
                    ec:4c:e7:bb:b3:21:1f:c7:8c:7a:d2:38:3e:64:b7:
                    af:42:c8:da:f7:c0:66:6f:d7:28:e4:84:55:be:30:
                    3c:f0:9f:89:07:a7:02:8c:38:94:0b:70:9e:e5:a3:
                    e4:02:d3:31:cc:f3:83:ea:48:d5:c6:3c:2d:b0:81:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:A5:2C:55:BE:90:5F:E4:18:B5:FC:24:AB:27:73:DB:F0:35:AE
            X509v3 Authority Key Identifier:
                keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/374DFF6687B411EB8F13A617C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.26.0/23
                IPv6:
                  2001:df3:f280::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:60:c5:c9:ff:5d:2d:9c:00:cf:4a:cb:d3:e6:bf:88:07:c0:
         06:ed:1c:15:d8:0f:43:2c:e2:4b:35:97:e2:84:f5:d7:3a:15:
         c9:4d:8b:89:44:fc:5e:05:73:58:b5:79:1b:45:7f:d4:88:f4:
         14:1e:22:50:94:dd:b8:a6:32:49:0a:56:f2:59:2b:03:bc:45:
         85:a5:1b:17:6d:35:a9:dc:37:e6:51:15:9d:c6:e3:15:15:4a:
         20:0c:07:89:11:27:b2:c0:3a:57:f0:f3:49:4e:60:33:54:cc:
         6e:66:e8:0e:5c:c1:14:50:22:5c:a0:aa:dc:dd:ca:6b:33:5f:
         ee:b2:6b:21:85:0e:e3:ed:cf:1d:b2:7a:b8:7b:80:f5:50:b0:
         d3:10:fe:8d:f3:42:26:f0:aa:3a:d1:de:26:a5:c9:5f:0f:74:
         f5:7e:7e:59:22:0c:ff:cd:70:a9:15:ac:86:f7:0a:0d:41:82:
         0d:1b:f7:33:93:98:69:ce:93:28:5e:33:2b:a6:e2:14:01:d1:
         1c:c6:36:60:d9:a4:43:f9:c3:21:fa:2e:d3:b8:b5:55:0b:97:
         10:9c:40:bb:3e:c5:82:37:20:19:3b:9c:29:0a:1b:34:f8:61:
         7f:18:56:6c:c9:ba:4b:ea:8e:69:75:a1:8b:79:39:21:6f:f6:
         0c:55:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----