Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45D9AC1A6A5611E99AE37942C4F9AE02.roa
File:                     45D9AC1A6A5611E99AE37942C4F9AE02.roa (raw, json)
Hash identifier:          ldCJ4FxzbXpvYYcHn/3dOH7p69Vp8YF/4j6kH4rFceI=
Subject key identifier:   B0:63:A4:95:85:DA:74:E2:DF:F6:C7:73:33:C1:B8:FA:BE:84:13:80
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5D26
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45D9AC1A6A5611E99AE37942C4F9AE02.roa
Signing time:             Wed 14 Sep 2022 08:11:41 +0000
ROA not before:           Wed 14 Sep 2022 08:11:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134944
IP address blocks:        103.126.228.0/22 maxlen: 24
                          2404:ca40::/32 maxlen: 32
                          2404:ca40::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23846 (0x5d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 14 08:11:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63218cbc-eb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:63:4c:5f:bc:06:be:f7:f6:8e:e9:7e:b2:
                    32:9f:e5:0c:fa:fd:36:e4:78:b2:ef:74:b9:0e:b9:
                    e5:94:92:98:2a:74:a0:7c:73:0a:c6:c2:36:08:d9:
                    aa:c6:32:37:63:b4:e7:83:2b:2b:44:b6:3c:4b:4c:
                    d6:2d:ab:30:b9:17:41:56:e6:39:d7:8e:e0:de:cf:
                    11:7c:77:11:73:e7:0d:7b:57:0e:97:34:f8:aa:3d:
                    49:16:b5:6a:bf:fe:df:4b:75:19:b4:08:53:3d:f8:
                    30:a8:44:48:99:1b:f3:fa:1c:28:9a:7c:fa:d9:da:
                    2e:b8:e2:d1:04:bc:d2:62:ea:fa:3e:63:5f:66:c0:
                    7a:06:0d:b8:81:96:5c:84:0b:f0:ee:cb:4b:4e:97:
                    75:7d:2f:92:ca:32:3a:a9:24:d4:f8:e9:c9:18:a9:
                    ec:66:28:2e:4f:40:ce:d8:ac:6a:98:16:38:32:4c:
                    6c:44:dc:f4:c4:23:48:c8:6e:23:b6:f3:da:e0:1e:
                    9b:3e:dc:40:df:31:85:8e:f7:d6:55:7a:43:aa:9b:
                    5b:cb:c4:9b:95:15:85:73:75:07:8e:a1:9a:2f:54:
                    1c:07:7d:ff:28:8c:0f:4b:d8:0b:c7:de:c7:92:7f:
                    e3:ab:5c:43:39:7c:7d:80:cb:45:ca:26:b0:fc:33:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:63:A4:95:85:DA:74:E2:DF:F6:C7:73:33:C1:B8:FA:BE:84:13:80
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45D9AC1A6A5611E99AE37942C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.228.0/22
                IPv6:
                  2404:ca40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:99:40:63:79:eb:9b:15:36:c0:ed:6c:45:b6:50:55:b3:19:
         2a:70:9d:f7:9b:26:da:ec:42:a6:5a:0c:0c:c3:f1:2b:e7:27:
         69:a7:74:67:1d:2b:56:24:a6:80:7a:20:c7:a6:b0:0a:38:de:
         d3:16:7a:8e:3b:b4:a1:98:a0:62:7a:ee:97:a6:a3:92:08:9f:
         59:d4:31:dc:22:94:6a:bd:61:7d:76:3f:7c:6d:f4:0c:c4:3f:
         fd:16:9a:ad:39:09:de:68:32:4f:32:3b:29:aa:e3:3c:3f:67:
         80:89:fa:74:5d:0c:f2:8e:86:cd:05:ba:b8:77:76:d8:3b:e7:
         84:98:10:bf:6c:b4:41:d1:fd:07:c1:95:52:3e:7e:d6:1f:a5:
         77:a5:1f:de:a1:37:ce:37:87:4e:3e:3f:fa:47:65:b8:eb:70:
         9e:bd:b5:49:11:fd:21:55:b4:b4:5c:27:c0:3e:10:47:ea:73:
         1f:c7:0a:1e:dc:07:82:c4:6d:d8:d7:b3:f2:6c:4a:09:be:cb:
         b9:4d:0c:09:84:47:e1:37:2e:d1:ee:65:4c:3f:a3:c6:35:04:
         f3:ce:97:4a:b8:c5:b6:d6:8c:41:ba:fd:3c:b8:37:3a:29:8c:
         61:59:b3:ac:5c:88:80:8b:5a:96:42:1d:00:93:2e:9a:5a:59:
         db:e7:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----