Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AFEA1E72B211EBA7388458C4F9AE02.roa
File:                     94AFEA1E72B211EBA7388458C4F9AE02.roa (raw, json)
Hash identifier:          TXxMfmK3CHrI3KBz8R9WndLTrx9JzwJjxNaHeMnwLDU=
Subject key identifier:   34:0C:3B:92:D3:6D:57:DE:83:18:5A:F9:F1:BA:E2:1F:4D:2D:5C:73
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       562E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AFEA1E72B211EBA7388458C4F9AE02.roa
Signing time:             Fri 27 May 2022 08:11:47 +0000
ROA not before:           Fri 27 May 2022 08:11:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     131442
IP address blocks:        103.97.240.0/22 maxlen: 24
                          103.187.81.0/24 maxlen: 24
                          103.200.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22062 (0x562e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 27 08:11:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=629087c3-0359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:f9:b5:0b:f5:17:e7:1c:c1:11:d5:58:03:
                    92:3a:fc:ea:78:51:a7:61:cb:f1:8d:d8:a1:a3:b0:
                    1d:17:0c:8d:34:51:c4:2d:3c:a4:47:00:aa:df:11:
                    ac:6b:88:41:de:89:ba:9b:b6:a0:48:78:6a:c6:de:
                    bd:03:39:e3:95:14:40:12:64:e3:75:24:84:a3:bb:
                    e8:13:3c:aa:db:9e:9a:8f:76:52:06:99:a9:bc:92:
                    eb:3c:ea:93:4d:2e:06:23:ce:16:ee:c5:0c:b7:07:
                    f1:27:13:b6:6c:18:9e:b1:b7:4a:84:49:e9:a8:b9:
                    f8:03:95:29:22:d6:76:23:e3:c7:a5:bf:be:49:c7:
                    6c:ec:fa:20:f5:b2:8d:d8:af:77:77:e6:a5:81:98:
                    e8:a5:a3:bc:60:cd:4e:13:01:4e:88:54:f8:91:65:
                    8c:ab:2c:95:da:01:35:37:4a:0a:e5:c1:0d:44:db:
                    ef:f7:8c:35:5b:4a:22:86:dc:05:f9:b4:5c:0b:6e:
                    2c:8f:66:46:c6:a8:0b:6d:c4:8c:45:8f:a4:b9:6f:
                    9a:8f:97:4d:8d:5f:29:cb:54:49:cd:83:9e:6a:c4:
                    6f:31:c0:d9:6b:09:8a:31:33:39:5c:7a:2e:3a:a4:
                    84:34:86:23:8a:4a:20:8a:8d:61:76:3d:bb:4d:2e:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:3B:92:D3:6D:57:DE:83:18:5A:F9:F1:BA:E2:1F:4D:2D:5C:73
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AFEA1E72B211EBA7388458C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.240.0/22
                  103.187.81.0/24
                  103.200.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:40:22:98:a9:b1:59:85:c3:31:60:d1:71:a8:c6:92:de:93:
         3c:48:ff:70:69:d0:2f:2a:d0:0f:b2:b6:6e:68:dd:f3:41:f1:
         99:82:7a:59:76:08:d4:2f:5b:b9:c7:26:d3:74:b2:34:e5:4f:
         1d:34:94:91:f4:5c:32:16:bc:16:50:b4:46:75:22:bf:2b:04:
         f9:f4:cd:f3:60:67:ad:ae:9c:ad:51:f3:f5:45:2f:2e:fe:54:
         63:e4:c4:a3:31:c7:bf:c9:c0:2e:9c:6b:ef:f0:71:ac:a9:a8:
         43:ea:00:9a:63:f8:aa:0e:2f:0e:3e:ed:ac:b3:00:b4:a0:30:
         a6:f3:f3:90:a1:cb:b9:35:dd:c9:37:61:3c:78:f6:19:18:13:
         e6:02:62:91:60:47:f5:1f:43:2b:66:17:08:0b:45:ea:5c:7b:
         1b:26:bf:d8:ab:12:74:a5:5b:6d:45:9c:fc:16:cf:c2:de:65:
         7c:1d:c5:6f:74:62:b1:eb:bd:f2:0a:4e:3d:0a:2d:86:10:73:
         22:10:a2:0c:89:f6:69:7c:c1:4a:b0:5d:19:c9:64:ba:45:35:
         de:46:6c:32:0a:47:4e:8a:2a:96:5c:88:83:69:9c:21:2c:72:
         35:88:58:33:42:7e:76:f9:54:d4:c0:39:81:48:c7:eb:cd:f9:
         f4:07:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----