Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72D881A08BF911EDA3542A22C4F9AE02.roa
File:                     72D881A08BF911EDA3542A22C4F9AE02.roa (raw, json)
Hash identifier:          Y7QDbXeaJuBMie5eoTfXXhX6CVDBN9XaWEvg25UKlTs=
Subject key identifier:   A4:1C:F1:91:B0:68:EC:8B:05:D8:FC:AC:E0:59:4A:78:00:B6:35:81
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       627A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72D881A08BF911EDA3542A22C4F9AE02.roa
Signing time:             Wed 04 Jan 2023 06:31:41 +0000
ROA not before:           Wed 04 Jan 2023 06:31:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133252
IP address blocks:        103.38.150.0/24 maxlen: 24
                          103.233.120.0/24 maxlen: 24
                          103.235.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25210 (0x627a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan  4 06:31:41 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63b51d4d-1996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:19:5f:75:f3:d4:60:af:7d:71:75:8e:59:
                    0b:65:ba:0c:69:ca:c2:a0:f8:2d:03:03:f4:5e:2e:
                    ca:ff:96:90:74:40:7c:b8:61:f6:24:e8:8f:49:82:
                    ea:38:f2:56:8e:fa:0f:f5:66:3d:3e:6a:40:2a:69:
                    d7:9c:2a:96:de:22:5d:ae:5b:0b:69:0e:f3:9b:6c:
                    15:2a:b4:e6:91:82:94:09:97:bd:0f:15:cb:8e:f4:
                    84:2f:7d:c4:72:e6:b6:51:94:cb:9b:89:71:95:0e:
                    40:53:57:9c:1a:10:c5:d0:9f:72:3d:86:48:f0:8b:
                    0f:06:ec:a9:8e:0c:70:49:57:ce:f5:90:fb:b5:f7:
                    74:c6:7a:23:f4:56:7d:10:bf:dc:57:9e:43:39:b6:
                    9d:f5:af:12:12:be:73:a1:27:73:53:01:76:aa:0f:
                    c4:c4:39:31:fc:59:09:45:4a:12:82:15:5b:a9:93:
                    d9:55:d3:9e:ff:a2:72:e9:af:4a:ef:b3:7f:0c:96:
                    04:44:a7:79:b4:9e:b1:f6:50:f2:e9:68:49:de:a1:
                    c6:43:83:38:4e:62:41:18:aa:4b:30:07:46:2b:7e:
                    62:16:33:50:00:84:9b:79:7b:60:b3:72:52:af:8d:
                    80:5e:fc:8b:63:c6:70:f2:df:3d:c2:d3:ff:10:0c:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1C:F1:91:B0:68:EC:8B:05:D8:FC:AC:E0:59:4A:78:00:B6:35:81
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72D881A08BF911EDA3542A22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.150.0/24
                  103.233.120.0/24
                  103.235.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:48:bb:bc:9e:9d:e9:7a:f2:4d:68:fe:3f:52:3e:95:e4:7c:
         ac:89:40:d7:2f:a3:35:ac:86:90:d3:30:86:45:be:10:fc:42:
         60:52:ec:c2:a2:99:dc:83:14:94:9d:00:66:c9:f9:d4:58:56:
         02:31:7e:fd:2d:95:f6:84:bc:d8:8e:b9:84:8a:79:ea:c2:10:
         c0:88:0e:3e:6b:5f:fa:6b:32:9e:df:8a:90:05:03:78:68:48:
         05:dc:b8:40:18:74:f4:0e:f0:3a:99:18:1b:55:c1:d8:67:7f:
         87:23:11:6c:c1:fe:f9:6e:90:d5:06:e0:42:ca:7f:69:54:f4:
         4a:e7:fe:41:75:1b:3c:67:38:d1:1c:7a:b3:08:de:ee:9c:cd:
         bd:de:74:e4:ce:22:01:c9:ae:d3:7d:2f:09:11:4a:ab:b3:49:
         77:ed:6d:20:3d:ae:82:4d:bd:7e:0f:d7:c7:cc:05:fb:54:67:
         ba:d3:93:3a:20:ce:b4:b3:03:81:7f:4e:27:c5:e9:ee:28:49:
         17:da:8c:c8:fc:8a:be:1c:f1:ba:59:a8:79:86:f7:62:d4:77:
         af:b3:8b:35:c3:2c:5a:85:50:60:1d:c0:de:da:c6:ce:a0:da:
         ec:38:9f:35:ed:f1:8c:8c:3c:8b:07:74:98:b3:e3:36:97:01:
         5a:dc:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----