Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B720A6E22C911EDB0236E85C4F9AE02.roa
File:                     2B720A6E22C911EDB0236E85C4F9AE02.roa (raw, json)
Hash identifier:          tTo5M4kySmg7nofSphB1RMtLHdiNfylopAX3Mc40i7U=
Subject key identifier:   E8:F7:9A:7F:D0:8C:5D:1F:C8:3F:C4:6B:87:D5:D9:6E:11:AA:2E:F8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5C46
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B720A6E22C911EDB0236E85C4F9AE02.roa
Signing time:             Mon 29 Aug 2022 11:31:46 +0000
ROA not before:           Mon 29 Aug 2022 11:31:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141836
IP address blocks:        103.168.60.0/24 maxlen: 24
                          103.168.61.0/24 maxlen: 24
                          103.171.174.0/23 maxlen: 24
                          103.173.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23622 (0x5c46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 29 11:31:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=630ca3a2-59cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:b6:c4:64:6b:41:d4:13:1d:d1:d3:94:31:
                    c7:26:8e:2c:8e:39:fa:16:37:6f:a9:42:92:7e:ed:
                    97:f5:6e:38:01:80:c3:03:f2:8e:de:a3:cd:11:55:
                    7d:87:97:83:84:fa:3f:c2:ab:02:fe:fe:5d:41:d4:
                    e4:c5:1b:be:33:1d:87:e9:b1:07:dc:38:6a:37:5b:
                    70:76:6b:a7:a8:01:ef:9f:2f:3a:c1:67:34:68:b3:
                    fa:6e:05:1a:bd:c0:24:75:38:6a:71:87:d9:4d:ff:
                    a0:c0:be:f6:eb:6f:36:ba:cd:03:89:ec:50:cb:fb:
                    70:d9:96:61:3a:0e:dc:5d:b9:80:db:aa:03:88:17:
                    36:63:3b:91:84:fd:4e:29:f4:e8:a4:ed:63:07:dd:
                    68:7b:00:75:ba:19:6c:bd:fd:2a:b4:6e:ea:8c:8c:
                    d0:6d:fa:15:a5:e3:a8:68:6e:4d:d2:36:af:7b:66:
                    ad:c2:a5:9d:dd:05:d0:16:21:97:7d:40:ab:68:dd:
                    54:7a:79:30:4f:2d:96:e3:aa:33:38:7c:22:e7:14:
                    11:10:90:47:67:4d:6c:08:c4:9e:21:c2:7c:11:09:
                    03:1b:1d:16:39:35:8d:9e:ce:ea:b9:c8:4c:11:2e:
                    a7:f9:f9:f3:50:f7:32:86:ae:a0:df:63:9c:8a:95:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:9A:7F:D0:8C:5D:1F:C8:3F:C4:6B:87:D5:D9:6E:11:AA:2E:F8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B720A6E22C911EDB0236E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.60.0/23
                  103.171.174.0/23
                  103.173.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:03:3a:83:54:cd:f8:59:59:3e:58:44:2b:14:97:33:c8:
         5e:a0:87:9b:7c:40:8d:fe:44:98:a7:43:b7:62:17:0a:e2:ec:
         03:c4:f5:09:83:c5:9e:79:4c:bd:1b:ae:a8:d5:cb:7f:7e:3e:
         25:06:7d:cb:f0:b2:47:5f:dd:86:25:74:7b:b1:fe:64:70:d9:
         fa:a7:ac:26:1b:80:bc:3b:60:fb:b3:a0:38:89:bb:f3:93:a0:
         b3:4d:06:7e:33:10:01:67:8b:7a:72:62:1c:04:1d:49:3d:c6:
         f5:8c:8f:84:c1:44:08:8f:a5:8a:b8:b0:48:7f:2c:87:13:29:
         26:a6:49:ce:b7:77:31:8e:d8:e7:0e:7e:3a:c7:6e:8a:ee:52:
         68:6b:95:d4:fa:83:36:5c:64:07:8e:5b:7a:7d:f2:2e:d8:7d:
         9f:3b:ea:ef:05:4e:8a:f5:cc:d2:6d:6e:ff:b8:3e:ba:05:a0:
         83:46:bb:7e:20:4d:ed:38:3b:85:a3:24:92:b1:56:24:9e:46:
         5d:ae:54:34:e8:1a:f7:22:d0:e3:9f:b4:eb:4c:fe:1b:00:c8:
         ae:b8:0c:f9:36:97:7e:c0:f5:46:c8:8f:0d:2c:b1:41:55:4d:
         6e:12:87:ab:91:0b:d8:77:a1:ab:da:c5:e0:e6:03:19:db:37:
         78:09:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----