Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EBD456C782B11EC93C8C83DC4F9AE02.roa
File:                     0EBD456C782B11EC93C8C83DC4F9AE02.roa (raw, json)
Hash identifier:          zEOp9pz2unhJcPzZwkn33sNuhlWaa3MT52Os2MAzy/s=
Subject key identifier:   8E:E0:AA:54:FE:E1:7C:64:42:35:31:19:23:BC:75:8B:55:7D:FB:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5872
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EBD456C782B11EC93C8C83DC4F9AE02.roa
Signing time:             Mon 04 Jul 2022 04:41:28 +0000
ROA not before:           Mon 04 Jul 2022 04:41:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137666
IP address blocks:        103.117.213.0/24 maxlen: 24
                          103.168.167.0/24 maxlen: 24
                          103.190.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22642 (0x5872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  4 04:41:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62c26f78-6856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:1f:71:63:d4:a9:f8:cd:f0:de:bb:77:1f:
                    57:42:ff:e7:71:01:e2:ae:db:b4:9b:71:05:b3:72:
                    30:8e:b4:07:16:44:ab:c2:c2:d1:e9:c1:6f:91:8c:
                    f8:1c:a4:93:3b:03:86:87:e5:ee:ba:e8:4b:da:ce:
                    3e:5d:14:d3:92:c3:f9:d8:d4:bb:ac:1a:23:3e:01:
                    76:0d:db:a2:4e:a0:40:c5:2f:13:49:83:6c:e7:fb:
                    f3:86:85:6c:b9:03:7b:37:29:51:e0:9f:fb:85:5c:
                    95:3d:2f:aa:f5:42:f9:19:a7:b5:bf:b8:f7:81:c5:
                    6d:b7:58:06:8a:43:8a:95:a4:b3:19:74:3e:e3:62:
                    f6:2b:0c:45:76:46:b8:b8:61:82:66:d2:06:5f:73:
                    f2:55:61:9a:a4:0c:7c:c0:e3:22:88:9b:e0:84:c9:
                    1a:22:c4:d4:e5:33:5e:ba:c1:d0:7f:a4:05:d4:59:
                    a3:41:93:59:93:01:4d:78:1b:34:6e:3d:f5:86:c8:
                    08:f0:a8:4a:17:f4:ab:a1:aa:4b:ec:c6:12:1d:c6:
                    ec:dd:14:80:4a:ab:71:b5:d6:13:b2:bd:64:e4:43:
                    36:03:04:6e:e3:cf:f7:e1:a8:e3:6a:fe:16:5a:a8:
                    c3:55:3c:9b:67:62:aa:2a:f1:c4:1e:33:3c:69:45:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:AA:54:FE:E1:7C:64:42:35:31:19:23:BC:75:8B:55:7D:FB:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0EBD456C782B11EC93C8C83DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.213.0/24
                  103.168.167.0/24
                  103.190.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:2a:85:e7:ae:e2:f8:a6:a7:ad:33:73:db:45:87:0f:f2:
         20:e2:72:9a:56:3c:d5:84:6c:12:41:9a:60:c5:6b:14:91:d6:
         05:db:e9:7a:c7:38:e3:4b:e0:48:d9:60:d5:16:79:9c:50:ac:
         69:f0:db:66:bb:50:3a:9c:98:a9:86:93:22:a5:99:bf:ff:ae:
         33:88:b1:1c:38:5b:b7:28:ab:73:5c:bf:e3:17:1a:2e:24:07:
         08:0a:db:6c:51:d5:df:88:71:db:cb:00:4c:ec:80:4d:a6:0e:
         aa:75:a6:3b:a3:98:cf:d5:7d:e9:fd:61:37:4e:22:9e:f7:07:
         18:99:fb:41:ad:89:c5:af:06:57:85:a8:7b:ff:7b:e9:c2:75:
         2c:1a:f0:2f:bd:f5:13:62:ea:68:8b:a1:83:f1:b6:8e:21:ab:
         4b:22:80:53:7e:7d:0a:e4:0d:08:97:e1:eb:99:87:0c:dc:d5:
         5e:4c:99:46:5a:5a:12:d3:76:a8:17:98:4c:5e:97:58:03:37:
         83:68:94:ea:07:b1:06:1e:37:63:7b:06:3c:d5:c2:5f:8a:17:
         f6:e7:5e:5d:aa:33:5e:10:45:fa:7b:cd:99:43:d2:bf:57:e1:
         b2:b7:ca:9c:3c:13:2d:88:c5:0a:9f:bd:50:6c:7f:61:05:82:
         79:a2:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----