Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
File:                     63C70DB87B9511EDAE580D3EC4F9AE02.roa (raw, json)
Hash identifier:          e5U+H4kCCheGFjkV90IBF0pnIc6KMxQV9nFyDG6LOcM=
Subject key identifier:   BE:29:E6:9D:65:11:23:3A:31:B1:37:E4:F9:0A:D6:F0:10:B5:A3:84
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       0E8D
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
Signing time:             Wed 14 Dec 2022 09:55:07 +0000
ROA not before:           Wed 14 Dec 2022 09:55:07 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     9654
IP address blocks:        103.103.194.0/24 maxlen: 24
                          2405:1340::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3725 (0xe8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Dec 14 09:55:07 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=63999d7b-fb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:3b:4f:4e:ac:0b:06:5b:32:50:4d:a2:99:
                    2c:4e:fb:1f:b2:5a:ad:98:a6:7b:87:b3:be:3b:2f:
                    a9:81:d6:16:20:61:85:3f:2c:76:04:a6:46:72:e2:
                    28:52:67:03:e1:5c:53:47:fa:ad:99:37:96:5b:e5:
                    58:22:78:43:e9:b2:d9:2c:84:64:e1:ab:47:51:b2:
                    25:80:d9:ca:88:c6:e9:a9:c3:4b:fd:9a:5b:ba:bf:
                    30:32:93:ec:14:2b:8e:5d:ce:15:cf:ea:d3:24:d4:
                    c0:3d:10:ca:c7:28:4b:30:dd:57:ee:90:5d:6a:5e:
                    7d:0b:ba:05:5d:02:c2:85:be:1a:25:a3:f4:68:4f:
                    4f:6e:78:33:68:04:02:16:a8:8c:36:b4:65:49:7a:
                    9d:d7:c1:63:9c:3c:c5:a4:37:04:2f:94:f8:9b:dd:
                    30:16:81:a1:9f:37:5f:e6:15:67:7a:5d:48:5c:15:
                    12:d3:fa:8f:91:41:e2:32:c6:65:66:87:bc:86:4a:
                    2b:6a:aa:b0:61:0d:0b:29:ad:ca:b9:1c:3e:4a:97:
                    0a:38:18:19:46:f7:f4:52:29:96:ab:c8:5a:de:b5:
                    78:c4:10:30:b3:57:ed:ec:aa:63:f8:aa:f7:ef:98:
                    54:fd:19:15:23:d4:5f:0a:8c:d8:0a:be:1e:65:ab:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:E6:9D:65:11:23:3A:31:B1:37:E4:F9:0A:D6:F0:10:B5:A3:84
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/63C70DB87B9511EDAE580D3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.194.0/24
                IPv6:
                  2405:1340::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:08:6e:9d:5d:22:59:95:d6:c1:11:bc:d7:ce:2a:e2:7c:6a:
         e5:36:32:05:fb:18:8b:9e:65:78:7b:4a:ca:46:fc:67:b3:a9:
         f1:48:56:bd:7f:e0:9d:78:a5:e2:be:c3:94:15:53:b0:08:e0:
         c2:ba:8e:6a:a0:26:77:8e:81:5a:38:30:b4:37:d4:1a:5f:e3:
         af:76:7d:9f:f5:6b:2c:27:38:a2:73:be:19:e2:28:8d:f8:7c:
         0d:72:b6:5a:a1:22:dc:a8:92:11:78:3c:0f:d7:aa:6e:6f:53:
         e1:13:7c:ba:34:96:03:db:f9:c7:7f:b8:ad:25:c0:60:4e:ac:
         21:7e:d0:73:99:23:75:3a:3d:01:df:3f:e5:e3:f8:4e:5a:d0:
         b5:00:1e:cc:ee:98:37:c0:89:2e:72:64:54:ec:1e:39:09:2e:
         da:43:f5:76:9f:87:a2:f4:4a:32:e4:47:b6:5d:ad:07:f0:61:
         87:70:3a:22:0c:45:02:54:c1:d4:26:13:c2:b0:fb:36:f1:f3:
         a4:7f:ee:7e:3a:a6:96:79:86:01:b0:37:ff:e9:8d:92:b0:42:
         df:1b:35:24:2e:80:e3:b8:c9:f6:0a:aa:b0:ab:57:7b:d3:a4:
         4e:fc:55:f4:d5:6e:1d:fd:9e:4d:33:ff:b5:00:07:ec:dd:9b:
         c0:3b:d6:7d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy
OThDNUU2ODYwHhcNMjIxMjE0MDk1NTA3WhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzk5OWQ3Yi1mYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fU7T06sCwZbMlBNopksTvsfslqtmKZ7h7O+Oy+pgdYWIGGFPyx2BKZGcuIo
UmcD4VxTR/qtmTeWW+VYInhD6bLZLIRk4atHUbIlgNnKiMbpqcNL/Zpbur8wMpPs
FCuOXc4Vz+rTJNTAPRDKxyhLMN1X7pBdal59C7oFXQLChb4aJaP0aE9PbngzaAQC
FqiMNrRlSXqd18FjnDzFpDcEL5T4m90wFoGhnzdf5hVnel1IXBUS0/qPkUHiMsZl
Zoe8hkoraqqwYQ0LKa3KuRw+SpcKOBgZRvf0UimWq8ha3rV4xBAws1ft7Kpj+Kr3
75hU/RkVI9RfCozYCr4eZavrTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL4p5p1l
ESM6MbE35PkK1vAQtaOEMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB
OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvNjNDNzBEQjg3
Qjk1MTFFREFFNTgwRDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnZ8IwDQQCAAIwBwMFACQFE0AwDQYJKoZIhvcNAQELBQAD
ggEBAHQIbp1dIlmV1sERvNfOKuJ8auU2MgX7GIueZXh7SspG/GezqfFIVr1/4J14
peK+w5QVU7AI4MK6jmqgJneOgVo4MLQ31Bpf4692fZ/1aywnOKJzvhniKI34fA1y
tlqhItyokhF4PA/Xqm5vU+ETfLo0lgPb+cd/uK0lwGBOrCF+0HOZI3U6PQHfP+Xj
+E5a0LUAHszumDfAiS5yZFTsHjkJLtpD9Xafh6L0SjLkR7ZdrQfwYYdwOiIMRQJU
wdQmE8Kw+zbx86R/7n46ppZ5hgGwN//pjZKwQt8bNSQugOO4yfYKqrCrV3vTpE78
VfTVbh39nk0z/7UAB+zdm8A71n0=
-----END CERTIFICATE-----