Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A660CC0FB711ECA0E62853C4F9AE02.roa
File:                     68A660CC0FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier:          bq+DEmstHM6JkfbFVlUOvy+Mk5AqUuFhEhsmAyJGNTY=
Subject key identifier:   21:A6:13:54:95:5D:04:4A:D2:22:57:49:6D:72:29:0B:F7:6B:DD:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5F85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A660CC0FB711ECA0E62853C4F9AE02.roa
Signing time:             Wed 02 Nov 2022 06:01:39 +0000
ROA not before:           Wed 02 Nov 2022 06:01:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142462
IP address blocks:        103.168.164.0/23 maxlen: 24
                          2001:df6:db80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24453 (0x5f85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov  2 06:01:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=636207c3-bfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:8e:b6:ec:8a:30:52:4f:9e:4b:4d:98:47:
                    b9:05:d6:cb:e5:c4:63:d3:a4:60:d2:1c:99:6f:32:
                    8e:e4:79:bd:06:a1:96:1f:f3:88:4a:30:35:73:81:
                    2e:89:d9:a0:87:59:70:75:6c:e3:68:92:11:b7:c5:
                    98:1d:74:3a:27:33:3d:29:60:7e:a7:95:e1:68:7e:
                    0c:5e:84:3e:50:3f:b4:0d:a2:44:a8:1d:3a:07:98:
                    7e:88:07:52:54:e4:21:da:f7:38:13:9f:ad:34:f1:
                    ee:fe:c7:ed:57:c1:02:2b:b6:77:15:55:54:35:38:
                    68:eb:66:32:7d:80:f1:70:55:2b:cd:d0:ac:13:e7:
                    ed:95:b5:fe:e1:ac:32:9a:5e:c7:ed:a8:6c:46:8f:
                    b5:5a:90:d1:71:9f:db:d9:86:33:f9:07:69:4b:c4:
                    e8:79:3f:62:85:5f:e0:88:29:62:44:c4:e8:10:a1:
                    96:61:af:41:f9:cd:b6:04:6a:33:38:18:54:2c:2e:
                    32:d9:b8:a7:cf:ae:f1:e4:40:f0:8f:db:6e:77:88:
                    8e:de:a3:4c:80:df:23:79:e3:d8:51:a7:22:9b:9d:
                    fb:99:08:8d:66:a4:b7:30:a6:12:e5:5b:33:31:0b:
                    05:73:26:6b:28:8e:d2:b5:d0:32:52:7f:4b:d8:f2:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A6:13:54:95:5D:04:4A:D2:22:57:49:6D:72:29:0B:F7:6B:DD:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A660CC0FB711ECA0E62853C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.164.0/23
                IPv6:
                  2001:df6:db80::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:11:eb:5e:63:91:42:c4:e7:40:ed:75:ee:b0:07:de:0d:19:
         d3:7e:36:24:5a:9b:7a:21:1f:c6:de:77:ed:19:78:49:0b:66:
         a1:6f:b5:c8:07:a3:d9:91:91:d7:31:2e:f5:b9:47:fc:b3:e6:
         10:ef:5f:75:dd:83:e7:2e:be:4c:2a:e1:60:c1:cd:72:98:59:
         5e:aa:95:63:6d:5a:76:75:ce:8a:d4:1a:20:0b:fd:19:78:c2:
         3b:1b:78:0d:01:28:ba:18:c0:77:55:3f:c4:48:a7:df:68:58:
         45:e8:95:3a:eb:6f:7b:66:c6:ad:0e:0d:16:19:63:02:64:26:
         d9:9e:11:1b:4c:24:24:87:a6:5a:83:f3:ca:44:de:f5:29:a4:
         25:39:c9:cf:3e:64:d6:52:78:cc:6b:47:e9:05:e4:64:d3:48:
         2d:7b:0b:4f:0b:3a:46:04:2c:7b:d1:11:ba:07:1c:90:21:58:
         59:a0:01:f2:e7:aa:b3:73:8f:f3:94:e0:a7:c9:de:d7:32:1a:
         d0:9c:31:d3:d0:8a:87:f7:22:ba:24:63:70:80:7d:6d:3d:a6:
         dd:0f:46:d9:aa:02:4d:0c:6e:d1:c3:a9:e1:af:64:8a:55:5a:
         9e:aa:d0:ad:19:6a:67:fa:01:af:e2:20:63:ab:34:b6:16:c6:
         02:4c:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----