Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54805258CA1711EDAABBB058C4F9AE02.roa
File:                     54805258CA1711EDAABBB058C4F9AE02.roa (raw, json)
Hash identifier:          QNQJtvrvclLDaungffTh6ZxcceaJAWOr3EIovdvoz/4=
Subject key identifier:   22:18:5E:0C:7E:1A:B5:9B:41:C8:FC:25:CF:72:3D:AA:B4:98:7D:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6734
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54805258CA1711EDAABBB058C4F9AE02.roa
Signing time:             Fri 24 Mar 2023 07:41:47 +0000
ROA not before:           Fri 24 Mar 2023 07:41:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     146846
IP address blocks:        103.83.248.0/22 maxlen: 24
                          2001:df2:1fc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26420 (0x6734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 24 07:41:47 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=641d543b-99c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:ba:44:20:e0:2f:48:87:1b:a3:62:17:e8:
                    dc:e5:eb:43:2c:59:24:bc:4b:0e:2a:e4:d9:fe:9e:
                    dd:8a:bb:ab:70:b7:bd:fc:2e:ab:bd:70:25:b8:39:
                    28:bd:5f:c8:67:e3:61:9d:58:03:cd:21:b5:4e:f6:
                    9c:66:cf:74:b4:74:09:6e:dc:fe:19:31:c5:e1:da:
                    52:4c:c2:7f:90:dd:2d:76:e6:b2:e1:65:1a:0a:de:
                    57:45:d9:8d:bf:c7:99:85:c2:04:09:9d:07:b7:00:
                    a9:11:90:92:5b:37:49:25:ab:b2:e2:fe:87:64:2d:
                    b5:05:97:a2:76:1e:f9:7a:e1:89:c0:9d:91:96:e7:
                    18:14:38:b5:51:7b:25:2c:3f:42:8c:5f:90:8a:7e:
                    23:36:17:09:6f:41:31:cf:47:05:d2:2b:23:3a:2d:
                    8b:a9:14:f4:bf:7f:3e:52:95:00:12:5b:16:88:1a:
                    54:d7:5c:e2:8b:a4:fd:bb:90:10:44:e2:e7:b2:6e:
                    be:49:21:32:84:f1:c1:a0:01:63:56:7a:49:d2:ce:
                    0d:d9:64:e3:3d:da:cd:4c:34:46:f5:c8:a6:f8:47:
                    07:59:62:3a:c8:29:ab:36:2b:c1:0a:bc:1f:0f:9c:
                    20:50:49:86:c4:9e:bf:b6:df:ec:0f:ed:02:90:f3:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:5E:0C:7E:1A:B5:9B:41:C8:FC:25:CF:72:3D:AA:B4:98:7D:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54805258CA1711EDAABBB058C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.248.0/22
                IPv6:
                  2001:df2:1fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:26:c2:51:a2:f6:ea:43:e8:0c:d1:10:b4:f3:56:34:1d:
         9e:ad:4a:e2:c3:58:eb:d1:11:99:f9:ab:f5:18:d9:26:5a:74:
         43:08:6e:2e:9e:2c:8e:ed:c0:e8:1f:f7:3d:1e:c2:32:b7:a0:
         93:86:5b:76:7f:30:b3:4d:b2:55:ff:ec:f8:6c:d4:57:77:46:
         4d:82:eb:75:13:97:fc:a2:45:5f:75:c0:6b:4e:60:72:dc:93:
         fb:13:aa:bf:ac:53:71:c1:17:ba:f8:75:82:ee:62:32:a5:66:
         8a:08:52:ea:49:b7:7c:27:51:0f:60:1c:66:c9:74:40:ae:c6:
         82:eb:32:f2:84:5b:8f:ae:0b:d4:19:f1:95:fc:aa:81:21:c8:
         72:58:f5:b0:27:44:3e:59:05:5a:98:c4:5c:af:d3:15:bb:75:
         5a:3a:db:4f:c6:bd:43:05:ee:bf:17:d3:89:87:ec:f3:1e:ba:
         a0:b6:b0:55:66:a9:8e:a2:18:9d:4d:62:8e:70:42:a1:92:93:
         be:d3:9d:e1:1c:57:cd:37:00:16:f2:0e:31:13:0e:a2:fd:c9:
         49:38:3d:c6:1f:1e:ab:59:76:d8:5f:84:94:33:97:93:cd:b8:
         4a:01:ba:ea:45:0f:1e:d4:75:dc:71:ca:3c:4d:5e:10:34:15:
         21:c0:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----