Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78FC84C2066711ED8098BF45C4F9AE02.roa
File:                     78FC84C2066711ED8098BF45C4F9AE02.roa (raw, json)
Hash identifier:          hqiJw5AJVrjCV+hfXcz7c3vg52HwjlqxeaxN+C/5uVw=
Subject key identifier:   61:ED:79:7B:64:33:F7:3E:A4:55:5C:1A:84:DC:59:1C:D8:E3:AA:30
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       59DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78FC84C2066711ED8098BF45C4F9AE02.roa
Signing time:             Thu 21 Jul 2022 12:41:34 +0000
ROA not before:           Thu 21 Jul 2022 12:41:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133997
IP address blocks:        45.249.168.0/22 maxlen: 24
                          103.17.110.0/23 maxlen: 24
                          103.176.128.0/23 maxlen: 24
                          103.194.69.0/24 maxlen: 24
                          103.198.128.0/24 maxlen: 24
                          2001:df6:3880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23004 (0x59dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 21 12:41:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62d9497e-8829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:87:72:0d:40:6f:f7:a7:b6:5c:2f:c4:4d:41:
                    83:78:80:2a:22:da:aa:ce:62:e3:38:05:30:4f:eb:
                    13:aa:cf:23:c8:71:ba:57:22:b3:08:f4:e6:db:65:
                    9c:11:6b:b1:6b:5a:99:19:a1:e6:9f:5c:0e:99:40:
                    99:ff:12:eb:3c:89:bd:6b:f8:85:e6:b3:3f:a6:de:
                    af:0f:f9:98:32:61:86:b7:14:af:f8:2b:e9:52:74:
                    aa:49:73:9c:7a:53:18:73:5d:64:0f:91:0a:9e:a4:
                    18:ad:0e:9d:8b:76:51:b8:11:bd:ac:cf:ef:ac:51:
                    57:bf:88:62:65:b6:98:aa:a5:73:04:16:a8:65:18:
                    1f:2f:0d:fe:1a:f8:28:59:27:24:04:8e:d5:15:2b:
                    77:d7:60:fc:52:0b:f5:c0:03:9c:29:01:13:90:aa:
                    83:38:f0:e5:e2:73:ec:80:13:6f:2f:d0:61:a9:6f:
                    30:6f:72:f0:c3:a9:47:ce:dd:f2:3e:aa:9d:0b:5f:
                    b6:b6:88:95:f0:e8:a3:bd:1e:02:07:16:73:df:55:
                    80:fd:54:4b:16:5d:31:7b:e8:9f:30:20:f5:d6:75:
                    a2:03:20:c3:97:45:57:9d:93:91:ac:e1:c8:49:1b:
                    0a:29:a5:4f:22:0e:7f:2f:3a:48:12:44:ad:1d:39:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:79:7B:64:33:F7:3E:A4:55:5C:1A:84:DC:59:1C:D8:E3:AA:30
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78FC84C2066711ED8098BF45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.168.0/22
                  103.17.110.0/23
                  103.176.128.0/23
                  103.194.69.0/24
                  103.198.128.0/24
                IPv6:
                  2001:df6:3880::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:8e:56:da:65:56:98:8e:b0:63:5d:85:6c:7b:11:e9:cf:
         a8:b7:3c:54:35:57:65:e2:e2:73:6a:f0:4b:22:40:ea:69:72:
         6a:a1:02:fe:db:b1:3f:4e:d7:b2:c3:b7:ae:db:d8:b8:8b:24:
         35:09:d7:35:1c:d8:c9:ef:4c:01:63:e9:ba:c6:9b:ca:07:74:
         3c:b8:b3:b7:43:06:1e:64:ca:25:a4:4f:ce:a7:7a:42:20:02:
         c3:21:93:4e:d1:e5:1e:6e:16:8c:18:22:d0:15:bc:4e:79:4b:
         9e:58:c9:d8:6d:ef:df:e4:c0:44:b9:9e:a1:9c:93:90:54:f8:
         a7:20:cc:d8:76:a4:be:bf:ec:1b:a0:9d:54:5f:09:7e:a7:3c:
         08:15:c8:85:68:40:5f:e9:15:e7:6f:7a:7c:5e:f8:f2:56:55:
         a6:49:16:86:c4:f6:e5:40:7c:b5:ee:86:28:b0:8b:98:96:a6:
         bf:aa:81:da:36:39:11:0e:25:81:44:b0:41:7d:42:4f:ef:4b:
         12:38:61:98:70:70:a9:88:73:fb:26:fe:ec:b3:e1:fa:13:85:
         5d:c1:bf:c2:85:8e:c2:e7:e3:98:a1:4b:28:cc:6d:8c:96:a4:
         f3:c3:85:25:a2:f4:d5:ae:ff:9a:c9:ba:1f:a2:c8:48:40:bc:
         d3:20:05:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----