Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F8B383645DE11EBB965E641C4F9AE02.roa
File:                     4F8B383645DE11EBB965E641C4F9AE02.roa (raw, json)
Hash identifier:          SX81A71lEAO/aW6AkYL3cTTjUy+mOtn14x+a049b+uo=
Subject key identifier:   C2:6E:39:AD:43:C1:B5:3E:0F:2D:96:50:89:01:64:62:00:3E:6C:7A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6005
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F8B383645DE11EBB965E641C4F9AE02.roa
Signing time:             Fri 11 Nov 2022 06:41:36 +0000
ROA not before:           Fri 11 Nov 2022 06:41:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141574
IP address blocks:        103.151.198.0/24 maxlen: 24
                          103.151.199.0/24 maxlen: 24
                          103.160.210.0/23 maxlen: 24
                          2406:f140::/32 maxlen: 32
                          2406:f140::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24581 (0x6005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov 11 06:41:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=636deea0-bf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:19:b5:b7:ce:c7:ce:0a:5f:fe:81:42:72:
                    d3:07:96:cd:6b:28:f3:38:7c:8f:39:10:65:17:fa:
                    34:bf:e1:82:8f:ed:02:1b:04:2a:75:34:cc:d0:29:
                    25:b7:82:8f:dd:1d:a5:cc:5d:b4:77:d4:ae:fa:85:
                    eb:0e:ff:a6:5c:0b:e7:53:2f:59:57:a7:64:76:28:
                    2a:91:6b:60:18:ab:5a:2a:21:6d:91:f5:e5:c7:34:
                    b6:56:db:c0:d5:f3:cf:f0:83:80:da:a6:e5:0c:1d:
                    ea:61:92:c7:fd:aa:84:a4:9d:8c:ab:81:4d:3b:f5:
                    b2:b6:3f:9e:88:9b:eb:f1:a7:88:69:f5:49:b5:14:
                    8f:8f:ed:57:99:4c:8b:a9:21:2b:47:dc:dd:1c:05:
                    0b:84:13:15:20:0b:f6:1e:45:d4:45:c9:56:f5:69:
                    ee:b2:d1:a1:bb:c7:8f:65:59:c0:2f:6c:d8:f6:27:
                    e5:65:45:ec:09:73:31:33:d9:5c:15:9d:c7:6a:f6:
                    03:c4:2e:34:c6:fa:a4:89:e7:63:83:ef:26:11:f5:
                    86:87:06:0d:f3:e1:a8:8b:9e:88:5e:e5:07:c3:f3:
                    a6:9d:a7:b9:14:10:34:e3:80:b0:9e:a8:e4:d2:c3:
                    2c:aa:b1:13:b1:69:73:b1:16:8d:25:4b:9e:cf:29:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6E:39:AD:43:C1:B5:3E:0F:2D:96:50:89:01:64:62:00:3E:6C:7A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F8B383645DE11EBB965E641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.198.0/23
                  103.160.210.0/23
                IPv6:
                  2406:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:48:6b:c6:ec:06:55:be:1a:a5:e5:13:f4:ea:7e:34:05:b1:
         82:4e:d4:94:88:17:eb:82:ab:aa:a0:cd:56:67:a3:91:aa:0d:
         e3:e6:5f:b6:7e:77:cb:65:e4:62:d7:49:ee:45:60:2c:66:58:
         6a:72:df:05:ec:f8:2b:bf:36:5b:6f:12:ee:9a:fb:24:e2:04:
         06:00:14:79:69:b9:92:ac:ee:1e:f1:d5:b8:79:83:c7:c4:f4:
         ab:c2:9f:8d:79:84:ee:45:af:ae:d0:9d:db:66:5c:a5:40:4d:
         df:0c:06:73:d3:91:44:6d:27:e7:6a:9a:b1:10:00:76:6d:9c:
         c5:60:1f:48:e4:94:21:2c:69:a5:4c:80:7d:8e:95:48:bf:38:
         dd:ef:9b:dc:11:93:18:c3:5f:f1:ab:c0:0c:3c:88:fe:ac:4a:
         45:74:9e:4c:b2:c1:6c:cc:f2:39:32:44:64:08:d4:17:0f:40:
         08:82:a0:20:6e:a4:30:b2:01:c5:b7:2c:f5:9a:72:2e:4e:0c:
         fb:25:2e:dc:f7:34:26:0a:5e:d7:22:06:ec:5e:39:4e:8d:50:
         e1:cc:2b:21:8f:b4:22:45:aa:cf:33:db:c2:07:db:67:7b:f7:
         97:2c:97:60:45:b6:f3:49:c4:b9:9a:b9:e0:01:f2:8c:84:26:
         17:49:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----