Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/72F603A2C60A11EC96B5966DC4F9AE02.roa
File:                     72F603A2C60A11EC96B5966DC4F9AE02.roa (raw, json)
Hash identifier:          egIG+rs1CjmmGyX4dFsMig92xk8S8e2iPQdGhvRBUt4=
Subject key identifier:   9A:13:78:9E:CC:EF:41:9F:9B:AB:3F:D5:C3:3E:39:EC:07:22:31:82
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       02
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/72F603A2C60A11EC96B5966DC4F9AE02.roa
Signing time:             Wed 27 Apr 2022 09:14:33 +0000
ROA not before:           Wed 27 Apr 2022 09:14:33 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     132742
IP address blocks:        45.121.80.0/24 maxlen: 24
                          45.121.81.0/24 maxlen: 24
                          45.121.82.0/24 maxlen: 24
                          45.121.83.0/24 maxlen: 24
                          103.61.168.0/24 maxlen: 24
                          103.61.169.0/24 maxlen: 24
                          103.61.170.0/24 maxlen: 24
                          103.61.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Apr 27 09:14:33 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62690978-8abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:58:67:b3:e6:1b:f6:3a:dd:06:5a:26:8e:
                    b1:01:2c:a4:22:c9:13:e2:9a:cb:06:87:b8:7d:f9:
                    37:df:6e:94:e4:ec:e6:4a:fe:47:a2:ab:77:38:68:
                    25:04:d3:0b:64:33:e6:b4:75:b2:6f:c8:fa:ca:01:
                    7d:ce:54:60:70:bb:51:6a:10:96:33:c0:d5:72:2d:
                    d8:28:5e:73:d6:f4:ee:86:b3:a3:7f:03:93:97:fb:
                    60:70:18:fd:fe:19:72:39:f4:b4:bc:d2:12:67:03:
                    9a:be:10:ca:39:6d:d0:b4:2c:62:41:69:9b:70:5d:
                    e2:4d:71:fc:ef:18:aa:78:91:49:84:78:cb:7b:24:
                    15:86:23:6a:f6:c1:b1:42:35:a0:ef:ce:09:a6:f1:
                    54:6c:75:53:70:71:02:18:52:05:8d:f9:fa:e6:04:
                    28:ad:77:48:8b:07:ab:2d:6f:f9:e1:9e:1f:de:20:
                    96:97:5d:d3:80:d3:1a:fe:3e:90:f0:e5:71:ce:b7:
                    cd:8d:6f:2f:66:7e:ee:15:35:2b:21:ac:73:de:15:
                    f1:91:d8:7b:ec:04:2e:e0:5c:3e:65:0a:41:df:29:
                    00:f3:4c:5b:2a:fb:63:f9:03:ea:27:dc:10:6c:54:
                    99:6c:05:0e:17:8e:10:4a:f6:7e:2b:ba:87:aa:c7:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:13:78:9E:CC:EF:41:9F:9B:AB:3F:D5:C3:3E:39:EC:07:22:31:82
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/72F603A2C60A11EC96B5966DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.80.0/22
                  103.61.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:89:1e:26:ec:6a:df:b2:3b:50:58:88:40:40:20:2a:cf:
         71:88:94:4e:1e:ff:ca:bd:d2:8b:91:4e:62:8e:0e:0e:c3:a7:
         f1:3c:b6:e2:0a:54:b2:fb:3c:0b:bf:df:b7:08:41:6c:d3:59:
         91:e1:34:74:06:03:7d:f1:68:ec:ff:9a:c1:df:90:30:63:a6:
         8d:37:c3:95:4b:b6:cc:c8:a7:cc:06:63:67:b0:f5:98:29:f6:
         f6:fb:13:db:4b:12:a4:64:15:6c:03:74:e2:a8:14:9c:55:d1:
         dc:77:35:6a:f4:0a:7b:0e:a2:0c:a0:c3:ac:d5:da:9c:05:f9:
         06:6c:65:c2:d5:b1:93:11:d0:f8:93:fb:8a:e4:dc:54:11:64:
         e5:ed:cc:18:bf:d9:e4:13:99:6f:c6:b3:7b:d4:3a:b6:2c:db:
         e0:c8:22:6e:95:76:71:96:a4:16:cf:ca:5a:13:7d:7e:d7:a9:
         59:1e:ef:5e:48:d9:c4:68:78:bc:5c:72:fd:eb:a3:34:55:60:
         b0:7f:2c:c2:58:99:d3:56:37:0c:16:67:17:47:21:3c:0d:27:
         7d:dd:66:f4:f6:13:e9:fc:84:5f:e5:43:55:21:53:13:21:ef:
         f8:9e:a7:c8:60:0f:5a:7c:37:96:66:7e:e2:58:51:db:4e:9a:
         4a:12:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----