Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
File:                     849897D0203111EB93E5E643C4F9AE02.roa (raw, json)
Hash identifier:          NN9Evh4gGyyokXubRXvB0BGKlt4+vLK/pyGol4EsJMQ=
Subject key identifier:   B5:7B:1F:10:A0:E9:DC:55:52:41:CC:02:EB:3C:16:BE:A6:68:E1:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       60A7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
Signing time:             Fri 25 Nov 2022 08:21:34 +0000
ROA not before:           Fri 25 Nov 2022 08:21:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138718
IP address blocks:        103.113.104.0/22 maxlen: 24
                          103.186.48.0/23 maxlen: 24
                          2001:df5:3880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24743 (0x60a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov 25 08:21:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63807b0d-bba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:91:68:fd:af:ca:65:dc:54:21:4e:d6:29:
                    6e:cc:48:5b:7b:ed:7a:a7:97:fb:41:35:67:9b:79:
                    4c:fd:de:64:f2:92:af:de:b3:20:74:44:c6:e1:12:
                    9c:21:c7:b9:be:a6:e2:44:43:46:0e:c7:de:6b:eb:
                    01:8d:e3:4e:48:36:fa:fb:3f:90:10:e1:72:5a:b8:
                    60:fb:50:02:7c:6a:f2:cb:dc:5b:6e:68:8a:f2:bc:
                    f9:38:05:10:98:52:a7:67:48:e5:0c:84:06:ea:54:
                    dc:b0:47:91:34:b9:91:1e:6f:c2:dd:f0:45:d8:61:
                    87:9a:5f:12:de:f4:f3:65:6b:01:79:0b:8b:eb:4d:
                    71:51:a6:2c:ce:fc:f2:fb:8d:61:bf:bc:9a:66:7a:
                    eb:fd:3d:36:c0:87:98:8c:71:aa:22:6e:64:d7:d1:
                    13:c9:a5:5a:0a:d5:01:1c:ef:fc:43:f1:04:9f:d1:
                    63:24:21:27:ab:06:45:14:08:16:81:a4:eb:24:5f:
                    ce:a3:7e:41:c1:1d:dc:fc:32:0c:1b:90:ca:c4:d1:
                    70:d2:4e:d3:23:3f:d5:c2:8b:e9:25:a3:6a:95:71:
                    49:49:67:1b:7f:d9:48:45:84:ac:77:e4:f3:a7:49:
                    ff:f2:9f:9a:96:51:73:f9:23:8d:85:c9:9f:9b:1c:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:1F:10:A0:E9:DC:55:52:41:CC:02:EB:3C:16:BE:A6:68:E1:C9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.104.0/22
                  103.186.48.0/23
                IPv6:
                  2001:df5:3880::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:8a:e4:21:0c:66:40:31:13:97:9f:57:ce:13:ef:2c:c9:f7:
         a1:05:a9:d3:ec:7f:6f:0b:6c:07:94:ab:9e:70:0b:cc:02:42:
         18:95:27:72:af:7e:d4:9a:5d:dc:16:96:23:94:61:dd:2a:e6:
         88:c5:02:53:e7:76:dd:c4:3e:36:72:00:56:ec:a0:cb:de:be:
         01:19:b4:c8:14:52:09:e1:39:37:c6:12:24:1a:aa:78:d5:72:
         80:f0:4e:d1:24:6f:52:cd:44:34:be:f2:d0:f0:85:a1:e3:41:
         f1:11:6c:5f:f2:cd:64:5b:9f:51:c2:f7:96:0f:05:43:56:7a:
         fb:e4:76:f8:32:c5:e5:09:a5:14:2c:e6:8e:b2:8e:f5:d8:44:
         0c:6d:d8:4b:60:fa:d4:17:0e:15:af:28:38:65:bc:93:fe:f5:
         fa:1d:cf:c5:92:6a:01:15:ea:6b:f6:ab:6d:4f:8f:8e:b5:ee:
         82:65:d9:4f:e2:b2:8e:6f:c2:e4:2e:9c:11:04:f5:3a:0c:73:
         b5:82:57:5d:59:14:58:6d:75:4f:81:e9:f5:34:2d:fd:95:0f:
         d7:50:ee:b7:f4:fc:bc:b9:4c:b1:e4:eb:0b:55:28:a3:14:d9:
         7a:61:97:a5:9a:cf:cc:4b:16:22:0b:d3:5d:2d:be:a8:f9:d3:
         1e:78:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----