Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/132174BAC23611EDBD456D0BC4F9AE02.roa
File:                     132174BAC23611EDBD456D0BC4F9AE02.roa (raw, json)
Hash identifier:          Q5Sbo4Fh8XuuLxznPs9bFQL5kWGn+ySeYyQhRKnSEco=
Subject key identifier:   C3:72:4A:F3:6A:11:0E:52:6B:AF:F0:AB:EA:C9:74:A7:79:35:4A:F6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       668E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/132174BAC23611EDBD456D0BC4F9AE02.roa
Signing time:             Tue 14 Mar 2023 07:01:42 +0000
ROA not before:           Tue 14 Mar 2023 07:01:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150794
IP address blocks:        103.98.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26254 (0x668e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 14 07:01:42 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64101bd6-cf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:7d:8c:e5:bb:41:d5:d0:ac:61:11:3e:cd:
                    af:ef:c4:3e:a7:58:5d:d6:58:5a:36:71:bd:59:e6:
                    60:dc:2c:d4:af:87:16:87:36:15:de:8a:42:62:24:
                    27:7b:76:df:f2:d0:3f:0a:33:65:bb:fa:81:8f:b3:
                    b7:5e:75:d5:73:f8:ca:2b:ec:84:86:cf:1b:cc:56:
                    cb:f8:84:51:f2:ca:72:0f:7e:c2:54:cf:52:16:ff:
                    5f:f6:db:21:ae:eb:62:d1:80:4f:9c:35:da:6b:8d:
                    ac:93:f6:ee:cb:03:9c:95:53:0a:ef:c0:7a:d9:3e:
                    61:60:a7:30:33:65:5e:75:5d:cf:b5:17:47:a8:06:
                    e6:88:64:89:64:0f:95:4e:8c:2f:68:e9:c3:0f:d3:
                    69:f2:f2:c8:56:cc:45:e6:20:2a:34:ef:e8:93:aa:
                    50:7b:e1:84:03:b7:a9:29:36:1f:6f:0e:5b:4e:d8:
                    96:53:c2:92:5f:69:1d:bb:8d:5a:c3:7e:b0:68:16:
                    4e:44:ba:59:76:f8:0f:35:74:3f:2b:a7:fd:88:67:
                    e4:9a:68:2a:8a:37:85:09:44:3c:5c:0c:a2:e9:51:
                    10:b9:ba:b0:06:f7:1f:ac:13:d5:b4:93:64:a9:86:
                    bb:a7:de:c5:9b:11:b2:79:a9:80:d2:c9:6e:a1:08:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:4A:F3:6A:11:0E:52:6B:AF:F0:AB:EA:C9:74:A7:79:35:4A:F6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/132174BAC23611EDBD456D0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:19:be:82:82:5a:9b:02:f3:a7:92:d3:56:2f:8b:c9:56:
         7a:49:07:39:74:b7:72:1c:0c:b7:85:c1:02:b2:5e:5c:f9:f4:
         03:12:6b:06:4f:22:2c:12:8e:3d:f7:29:7b:fc:af:0e:00:55:
         43:76:38:b7:89:d4:5b:5b:51:6e:86:fb:f0:8b:e9:9f:d7:d6:
         f4:66:e9:65:68:b7:22:71:2b:0a:59:b4:53:1b:ce:9c:25:d7:
         70:c7:5e:82:7c:83:75:7a:bd:38:a3:9d:e9:77:cc:e1:a0:1a:
         ab:16:33:10:58:78:54:e9:f6:c9:11:75:90:82:c6:80:4f:31:
         85:f2:d8:1d:f3:a0:01:bf:55:08:0b:38:42:ff:8c:65:55:88:
         3a:63:35:4c:64:ba:ce:aa:52:7d:b7:e6:6a:b1:81:76:ac:3f:
         f4:dc:ff:0e:e9:4a:88:4c:9d:89:f7:96:1c:de:01:d5:7f:d9:
         aa:49:34:01:84:76:c5:96:70:7c:bd:30:88:95:f4:aa:eb:17:
         a8:d2:89:18:bd:d8:6a:74:4d:d9:d1:5a:88:eb:63:b8:bf:90:
         28:ca:09:d9:e0:41:68:69:61:81:42:9b:ac:91:9d:9d:81:48:
         5c:cf:f7:f7:fb:d9:b4:4d:e9:e2:ee:b0:b2:8a:46:64:e3:30:
         96:52:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----