Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82379D92835911EC924B6886C4F9AE02.roa
File:                     82379D92835911EC924B6886C4F9AE02.roa (raw, json)
Hash identifier:          oOvA8Y77XORRf9sAotd2D1xedl9/1lXFkZXqt+SXb+I=
Subject key identifier:   96:F4:21:66:E3:CE:4E:2B:39:96:2D:33:DA:34:CF:75:61:50:6D:46
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5553
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82379D92835911EC924B6886C4F9AE02.roa
Signing time:             Tue 17 May 2022 05:01:57 +0000
ROA not before:           Tue 17 May 2022 05:01:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137097
IP address blocks:        103.105.176.0/24 maxlen: 24
                          103.105.177.0/24 maxlen: 24
                          103.105.178.0/24 maxlen: 24
                          103.105.179.0/24 maxlen: 24
                          2400:7b60::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21843 (0x5553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 17 05:01:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62832c44-b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:20:a7:b9:0d:57:15:77:37:98:9f:63:02:
                    e2:4e:44:14:4e:6c:0e:14:36:1a:eb:4c:05:b9:4d:
                    c1:b3:a1:86:8e:0c:cc:e5:72:be:3f:54:70:7f:bd:
                    9c:b4:21:eb:e4:5e:3a:7c:ee:ee:c2:27:3c:fa:73:
                    7a:80:0d:ca:29:98:6f:17:93:b1:b1:60:1a:4d:4d:
                    6f:15:9e:7e:18:6e:ed:53:b2:2a:90:dd:1c:95:a2:
                    1c:73:ef:97:0e:54:1a:97:6b:00:7e:c3:d8:ac:4b:
                    15:3a:bd:f9:11:10:d7:f5:b4:d5:e5:72:ac:2a:db:
                    26:a1:7d:66:02:00:1e:ca:d7:f8:95:72:bd:f2:8e:
                    d4:93:f2:7a:24:14:28:a5:2d:c4:74:ac:1c:ed:f0:
                    58:24:d5:f1:12:f8:8c:cd:de:0b:e3:d6:e9:7e:ae:
                    05:48:6b:53:b5:dd:78:03:9a:83:dd:6e:d1:16:2b:
                    31:60:a1:8a:98:1c:67:ae:6d:a8:ea:6b:da:d8:2b:
                    64:d5:17:85:fe:02:f9:c2:cc:6b:ac:43:7a:84:f1:
                    25:f2:b7:dc:61:e0:4e:7b:9c:54:44:84:0f:41:6a:
                    a4:e0:03:bf:7a:f8:2e:f9:27:97:07:6b:ee:1a:0a:
                    db:3f:4a:26:90:e7:d7:36:a2:7b:80:0e:18:b5:16:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F4:21:66:E3:CE:4E:2B:39:96:2D:33:DA:34:CF:75:61:50:6D:46
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82379D92835911EC924B6886C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.176.0/22
                IPv6:
                  2400:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:c9:14:24:58:18:0c:85:f5:d1:77:5d:1f:22:de:f5:17:
         69:fd:07:cb:ff:cd:71:5c:8d:d4:2e:bd:bd:00:2f:e9:14:e4:
         be:5e:1e:84:c0:6d:29:06:ae:64:e3:35:7f:05:1e:24:9e:bc:
         62:a1:11:b1:8a:9b:b8:c7:31:da:46:ba:67:4b:29:50:a9:a2:
         58:75:9d:b6:5d:2c:0c:7a:cc:ad:e7:ee:a1:42:4e:22:7a:c1:
         7b:55:0b:62:cb:30:26:e1:93:17:6d:8c:2c:42:f1:a2:13:e4:
         f3:24:4c:08:78:25:b3:be:9e:1a:27:8a:ae:58:3a:25:cc:f6:
         32:e6:15:41:c8:98:f9:d2:23:23:3c:06:37:19:53:d0:a2:f7:
         47:88:51:b9:a7:a0:f0:59:d4:44:04:f7:cd:f6:c8:0f:04:88:
         ed:8a:26:30:09:a0:40:a4:3d:d5:b7:e3:e4:f9:e1:fe:bc:9e:
         0c:62:43:0e:bf:31:1a:f6:06:10:e6:5e:df:ab:77:69:f5:c4:
         cb:dd:ab:11:76:7d:b6:62:22:c8:b9:83:54:53:a8:0f:f1:33:
         07:56:f7:0f:df:b0:8d:0e:87:47:51:93:18:fb:40:ea:58:e8:
         03:3c:0f:6e:b5:9f:52:54:e6:4e:c8:63:c5:07:a4:d5:ae:9d:
         34:10:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----