Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/D9F2501894F211ECB617C54CC4F9AE02.roa
File:                     D9F2501894F211ECB617C54CC4F9AE02.roa (raw, json)
Hash identifier:          A6JuwLd8xMVSzs3hd5WV4llDxlLagC8dF36gMl2lemw=
Subject key identifier:   90:3E:DB:38:96:DB:3F:3F:94:C3:65:EE:85:D7:CF:F1:57:33:D9:D3
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       0331
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/D9F2501894F211ECB617C54CC4F9AE02.roa
Signing time:             Sat 03 Jun 2023 23:41:32 +0000
ROA not before:           Sat 03 Jun 2023 23:41:32 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     38264
IP address blocks:        103.174.194.0/24 maxlen: 24
                          103.174.195.0/24 maxlen: 24
                          2001:df7:d380::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
        Validity
            Not Before: Jun  3 23:41:32 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=647bcfac-f644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:6e:66:ee:6a:6e:e6:40:0e:7c:5a:85:38:
                    31:90:5b:6c:66:8d:f4:03:51:f1:a2:3a:8c:02:17:
                    18:34:29:9d:4e:3b:a6:3c:c6:c8:fb:0f:8c:2c:61:
                    ae:ce:86:30:38:b0:23:b9:13:2b:b4:f0:f4:85:8a:
                    14:47:a4:cf:37:2c:2a:a3:c9:c8:7c:7b:87:5f:f4:
                    a6:e4:86:57:e7:fd:81:20:f4:98:a4:65:64:7a:0d:
                    7c:f2:6c:a5:bb:03:33:1d:20:4e:bd:8b:b4:cd:11:
                    59:56:a6:d3:dc:46:6c:14:8e:0f:aa:ff:6a:15:6d:
                    75:ee:a2:b1:ea:69:b0:03:3f:40:26:dc:81:f5:a2:
                    28:9a:10:4e:ca:b8:0c:5f:88:63:02:16:8a:84:21:
                    fb:43:87:24:aa:68:b1:4c:26:46:12:83:68:ca:80:
                    f2:8c:ab:d2:78:6c:dd:1f:f8:1c:34:82:fd:21:ad:
                    db:8a:c4:bc:2a:8b:21:e4:8f:80:f5:05:ab:2e:23:
                    cd:97:46:56:06:11:8e:42:17:08:78:ee:85:35:22:
                    e2:d9:03:8b:b1:0b:7e:d1:fe:c9:d0:53:f7:a6:ff:
                    24:38:ea:85:78:6f:3a:95:24:80:48:f1:99:44:7d:
                    e4:96:0d:72:73:ad:a8:53:63:1a:6f:29:5d:08:39:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:DB:38:96:DB:3F:3F:94:C3:65:EE:85:D7:CF:F1:57:33:D9:D3
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/D9F2501894F211ECB617C54CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.194.0/23
                IPv6:
                  2001:df7:d380::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:96:db:a4:56:1d:ed:00:49:20:b2:bb:53:d2:f9:63:ba:80:
         ef:b4:dc:1d:74:b7:0c:25:2d:c9:09:70:8e:b2:42:ec:5e:c8:
         83:55:56:9e:6d:0a:ce:b9:49:12:c5:38:92:a5:60:30:16:d3:
         f0:7d:c1:c6:2d:a3:6c:53:f0:e0:9c:00:ea:5b:88:3c:93:90:
         22:09:ef:2b:b1:b7:f6:78:bc:30:12:d7:be:dc:d0:c5:03:1f:
         34:78:2b:08:0d:3b:24:d9:1c:93:37:b0:e3:64:7e:e6:cd:91:
         dc:af:ce:3e:45:de:81:07:d6:79:9a:a2:dc:76:c6:1d:e7:9f:
         51:01:ea:ff:dd:f5:aa:d8:5f:8a:94:03:52:9e:24:9d:e9:6a:
         90:5e:af:da:3e:ee:20:0b:87:4a:d3:9d:0a:34:23:5a:67:b0:
         79:a3:75:54:cb:8f:f7:0f:83:d0:ef:ca:d7:e6:db:82:99:ca:
         17:c5:06:40:26:97:62:8e:a3:f7:f9:0f:ff:f6:f6:8b:a6:d3:
         90:4f:6a:06:da:88:e9:fb:e5:4a:47:cd:7e:60:33:7b:d8:76:
         14:8f:71:87:34:ea:70:86:5f:42:be:5b:6e:93:af:cb:50:ce:
         a8:73:70:e6:36:d6:60:61:af:81:fe:68:67:fd:b2:53:6b:5b:
         88:9c:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----