Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FC0BBD8065911EDA9E54956C4F9AE02.roa
File:                     7FC0BBD8065911EDA9E54956C4F9AE02.roa (raw, json)
Hash identifier:          6wYWawUZsSNzo/F8rPGB0DZ6qXEDq/c9sY47pkWZkHc=
Subject key identifier:   BA:FB:63:A4:F5:C7:47:F5:B4:3A:2E:6C:BA:C9:A2:BD:CE:9F:2A:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5EAE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FC0BBD8065911EDA9E54956C4F9AE02.roa
Signing time:             Fri 14 Oct 2022 10:41:41 +0000
ROA not before:           Fri 14 Oct 2022 10:41:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137677
IP address blocks:        103.117.236.0/22 maxlen: 24
                          103.176.194.0/23 maxlen: 24
                          103.186.121.0/24 maxlen: 24
                          103.186.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24238 (0x5eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 14 10:41:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63493ce4-1e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:96:ac:67:7f:57:e9:a1:6c:ce:0d:38:1e:
                    30:df:cc:c7:5c:6b:3f:ca:39:67:ff:65:c9:7d:ef:
                    47:11:cf:57:a9:04:a3:1e:23:c8:58:93:0e:bb:fd:
                    9e:7f:e2:a4:e0:90:d4:13:40:63:91:1a:1c:c5:0f:
                    33:1c:23:d0:16:0f:14:b4:60:ba:59:d6:75:ba:f5:
                    42:8b:64:f1:09:ea:06:a5:d7:9c:1c:50:be:d8:3b:
                    30:4e:08:0d:b2:61:80:cb:01:64:20:83:af:13:17:
                    d0:b4:4a:08:76:33:a9:a2:98:13:7f:ba:87:cc:5b:
                    4d:ff:cf:80:5f:91:91:e3:61:7d:da:3d:05:3c:0b:
                    72:f8:e5:3a:48:3a:d7:e7:c8:36:86:12:90:86:43:
                    9e:45:43:06:af:30:09:b0:d9:d6:89:4b:c7:03:ae:
                    61:13:7f:ff:7c:b8:09:04:28:0a:fc:bd:c2:82:6a:
                    72:d1:c9:c5:af:5e:20:01:88:86:98:51:d8:5d:6e:
                    09:2a:0e:2a:fc:f5:14:f7:3e:25:29:ff:04:fe:ad:
                    d2:b4:f1:df:28:39:b1:63:9a:f9:54:57:75:00:e1:
                    38:86:ce:c5:2c:94:7b:1d:2d:46:b8:08:13:4d:ff:
                    d4:87:a3:50:57:e2:a2:2e:b0:bf:72:99:07:2d:75:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:63:A4:F5:C7:47:F5:B4:3A:2E:6C:BA:C9:A2:BD:CE:9F:2A:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FC0BBD8065911EDA9E54956C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.236.0/22
                  103.176.194.0/23
                  103.186.121.0/24
                  103.186.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:e4:23:35:9b:5c:bf:b7:a3:0a:c1:4a:49:a3:2e:c6:f6:
         c6:e6:cf:20:01:63:89:d8:c5:8d:77:b3:07:ba:ab:61:c8:b5:
         8a:e4:fc:3a:01:65:1f:22:d3:92:a5:9f:2b:b5:98:17:64:dd:
         f0:2f:8e:5e:74:cd:34:0e:6e:4b:fe:34:c3:85:1b:08:a5:ad:
         d6:89:da:d4:f4:9c:1f:85:72:d3:34:b1:f6:82:64:4e:2a:b6:
         3d:ca:53:ee:0d:d7:1e:c2:15:a8:21:d3:68:56:93:55:ac:cd:
         08:0d:8b:2c:cc:8d:85:95:87:39:3e:0e:38:d6:7f:21:68:2b:
         73:e7:5d:50:00:99:e9:44:40:24:fb:ad:8f:7c:47:84:47:3f:
         eb:2f:aa:ad:1a:e7:d8:35:84:03:1e:8d:fe:84:49:ca:86:5d:
         30:f8:65:a0:22:bf:70:85:45:c9:10:83:d0:21:8b:14:8a:0e:
         f9:e8:36:f0:5c:08:1f:4c:c0:a6:ee:fa:18:e4:ea:fa:1b:9f:
         eb:9c:f9:9c:0e:97:c4:ca:a4:8c:c4:17:96:45:81:f7:81:29:
         38:58:6e:d4:8d:03:a8:2e:ca:b1:7c:c7:c7:a1:55:18:02:68:
         38:66:07:ef:e6:04:61:83:17:72:7d:00:c7:08:f3:f7:e7:6f:
         b5:8c:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----