Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FF09C58745F11ED890CA515C4F9AE02.roa
File:                     7FF09C58745F11ED890CA515C4F9AE02.roa (raw, json)
Hash identifier:          8B8wP/ltifogErZRigCKf9onSPgBduA8pLtmmtVgK20=
Subject key identifier:   13:00:DE:BD:E5:F7:AD:EC:66:59:77:87:CA:29:66:1C:F8:FD:A6:31
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6110
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FF09C58745F11ED890CA515C4F9AE02.roa
Signing time:             Mon 05 Dec 2022 05:41:44 +0000
ROA not before:           Mon 05 Dec 2022 05:41:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140168
IP address blocks:        2001:df6:4880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24848 (0x6110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Dec  5 05:41:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=638d8497-86aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:82:a4:c7:0e:a1:1a:58:46:74:71:7e:37:
                    34:32:14:10:08:cc:3f:65:eb:d3:56:24:e5:4a:45:
                    30:a5:67:0b:c0:44:67:3a:7b:02:c4:12:2e:d2:c6:
                    73:33:33:10:e9:a1:90:5e:be:80:d5:6f:f4:d4:50:
                    a4:eb:f2:ce:57:e5:72:45:af:6b:dc:29:3b:a3:7a:
                    87:7d:ac:d9:f1:21:c4:05:14:a4:86:65:49:6b:27:
                    71:39:cf:93:0a:ca:c7:4f:6d:f4:c1:12:ce:d0:be:
                    74:f6:44:dc:16:69:6a:9d:b2:48:68:5a:bf:d1:c2:
                    45:6f:b5:98:2e:be:6d:cf:f2:8d:70:ff:d1:f0:ef:
                    7f:6b:8e:22:f5:e7:84:6f:22:58:f1:6f:dd:64:78:
                    2b:8a:c1:ae:e6:8e:fa:4b:c6:0c:51:c7:40:d8:6f:
                    74:65:70:4a:05:5c:e8:4e:1f:93:70:c2:1f:f2:a7:
                    49:9c:71:9c:85:91:d7:76:74:30:f6:d8:71:c4:9a:
                    2c:0a:7a:52:93:29:41:58:52:af:9f:96:9d:2b:c7:
                    7a:eb:e8:74:fa:fe:51:45:8c:53:17:6c:72:0c:ca:
                    30:21:d3:4e:4e:ae:89:4e:52:3c:b8:79:58:a4:aa:
                    70:d6:3c:37:bc:1e:7b:c9:d1:6a:07:f3:f9:08:ba:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:DE:BD:E5:F7:AD:EC:66:59:77:87:CA:29:66:1C:F8:FD:A6:31
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FF09C58745F11ED890CA515C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4880::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:29:83:34:db:6a:82:69:c1:72:a8:cf:a2:ef:18:ec:8e:4a:
         a0:b3:21:74:b1:ee:15:b8:66:14:c0:b4:cc:aa:a5:db:5a:b7:
         20:dc:ca:65:ad:e0:97:8f:ac:36:70:6f:04:c9:14:b9:2c:00:
         74:0f:4e:bc:e9:fa:68:04:ff:5f:cf:80:81:44:8b:f7:b1:e5:
         59:1f:7d:c9:a4:08:be:04:38:fa:35:af:b1:d0:a8:60:0d:5d:
         48:5e:0c:4f:d1:c7:58:52:ff:68:bd:2e:e6:b0:55:22:7b:11:
         08:70:39:a0:a1:01:06:1a:b3:4a:5f:2c:a3:78:cb:a1:bc:de:
         ea:a4:0f:65:45:96:f7:65:f9:e1:fc:a6:2c:48:60:7a:2e:08:
         a8:1d:b7:1e:c1:e4:0b:1d:5c:cf:86:17:f3:0f:c4:a4:00:cf:
         1d:51:d4:a5:8b:0d:56:68:d7:75:2d:47:03:63:98:7e:e3:1c:
         89:60:b1:5f:8c:9c:9a:3f:27:e8:0b:21:b0:d8:3f:5b:12:53:
         e0:cc:19:01:f0:ac:7d:76:26:dc:8c:1c:66:30:3b:1f:f6:ac:
         c4:9a:25:1f:16:e7:f7:72:6f:bf:0b:ba:b5:62:48:20:86:aa:
         39:66:6b:de:74:0d:a3:5d:23:8e:fa:27:d5:61:f7:bf:2e:bd:
         ca:45:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----