Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AC01AEC8A9111EDA4336377C4F9AE02.roa
File:                     0AC01AEC8A9111EDA4336377C4F9AE02.roa (raw, json)
Hash identifier:          6yyQ5eGKT/Albsi2trO8ibOoSWh2iriGmLQZa23NkZ4=
Subject key identifier:   19:85:E8:E4:94:9D:55:BD:04:6D:74:1B:F1:4B:DD:63:41:88:00:D4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       625A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AC01AEC8A9111EDA4336377C4F9AE02.roa
Signing time:             Mon 02 Jan 2023 11:31:48 +0000
ROA not before:           Mon 02 Jan 2023 11:31:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137109
IP address blocks:        103.137.48.0/24 maxlen: 24
                          103.137.49.0/24 maxlen: 24
                          103.137.50.0/24 maxlen: 24
                          103.137.51.0/24 maxlen: 24
                          103.173.50.0/24 maxlen: 24
                          103.173.51.0/24 maxlen: 24
                          103.176.212.0/23 maxlen: 24
                          103.176.238.0/24 maxlen: 24
                          103.176.239.0/24 maxlen: 24
                          103.186.246.0/23 maxlen: 24
                          103.187.36.0/23 maxlen: 24
                          2405:95c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25178 (0x625a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan  2 11:31:48 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63b2c0a3-7cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:f3:42:1d:ee:e5:30:fc:f0:e5:26:1a:e5:
                    d4:f0:70:ff:77:a6:94:f6:7f:e6:41:91:9a:c2:8f:
                    ed:5e:fd:e2:b2:5b:4a:e5:1c:7f:af:35:7b:db:32:
                    52:cc:7d:d4:58:3e:eb:68:e5:09:26:dd:0b:78:7f:
                    39:54:d0:5b:e5:aa:e5:bc:0c:c4:0a:88:6d:c3:63:
                    a4:4c:b2:e6:cb:1a:58:fb:90:07:f0:3d:11:1e:39:
                    49:44:1e:26:5d:d1:54:fa:ed:25:9f:74:59:7b:be:
                    e9:2b:68:38:11:88:62:16:4a:7d:53:de:d4:c1:1f:
                    d5:c5:27:65:52:17:5f:83:50:4a:5a:17:ed:1b:c3:
                    a5:ed:92:e6:e7:48:65:7c:97:a3:60:f2:eb:29:a7:
                    b1:8a:ec:d2:71:59:af:d3:15:0a:07:ef:d0:7e:47:
                    18:60:bc:0f:50:38:e6:f6:ff:97:59:17:81:b2:46:
                    02:b9:a0:b6:b4:53:ae:f3:43:7b:75:00:c0:a0:00:
                    79:ab:b9:cc:6d:c8:39:7e:90:ac:d1:95:62:fc:52:
                    e5:72:b1:b2:cb:7b:b3:15:e6:58:9d:22:48:71:0c:
                    4d:cf:d9:e3:53:a6:08:33:7b:d3:e7:60:e0:7a:cc:
                    c3:03:52:71:d6:6b:a9:af:5b:cc:b3:75:c0:37:c8:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:85:E8:E4:94:9D:55:BD:04:6D:74:1B:F1:4B:DD:63:41:88:00:D4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AC01AEC8A9111EDA4336377C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.48.0/22
                  103.173.50.0/23
                  103.176.212.0/23
                  103.176.238.0/23
                  103.186.246.0/23
                  103.187.36.0/23
                IPv6:
                  2405:95c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:af:71:e3:b5:9d:e5:c6:94:e5:76:6e:b1:c6:d2:4a:45:66:
         97:c9:9f:a2:b0:b6:64:ff:9f:5f:a4:b6:98:2e:45:50:36:68:
         16:0c:7f:e4:59:a2:73:e3:9a:a9:7a:b0:ae:6b:4a:f0:7f:66:
         94:0c:f8:53:39:ba:da:4f:0e:52:96:d5:44:03:f7:2f:03:82:
         c5:92:d6:f9:b7:d1:99:15:0b:bb:2e:fc:fd:c2:c6:f7:7a:f1:
         e6:f0:76:74:9a:bd:36:9a:30:34:19:71:c1:94:0a:3f:07:7b:
         79:29:f8:8c:50:ab:cd:8e:87:de:b7:6a:ba:6a:43:e9:be:9f:
         87:06:d7:45:44:98:9d:8f:97:84:38:3c:d8:b9:54:82:1f:4a:
         e1:21:75:26:e1:d7:7b:ab:d4:0b:93:49:ad:e0:dc:fe:6a:0b:
         b9:9b:4e:6a:f9:fc:03:2c:3e:b0:32:92:35:d6:a2:0a:a5:a9:
         3c:80:27:fe:eb:19:d8:74:ca:99:b3:9c:53:e2:66:30:5c:f7:
         68:e2:0b:70:c5:bb:f0:78:41:45:58:0a:19:00:89:f4:27:2c:
         9c:de:98:4c:48:5f:66:12:6f:00:79:72:c0:4a:a3:e8:f0:55:
         de:4b:3d:f1:38:c9:cc:b5:e5:a0:96:81:78:34:84:cf:4d:88:
         f0:11:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----