Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9591DC5E08BA11EDA1354C10C4F9AE02.roa
File:                     9591DC5E08BA11EDA1354C10C4F9AE02.roa (raw, json)
Hash identifier:          KUsm4yK3orhU8/9x2F1pEYcQPVYoK3klO6NbVrMMjcU=
Subject key identifier:   AC:73:52:6C:04:49:C5:9F:F6:05:3E:D1:4B:5F:EB:38:6F:41:D9:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6725
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9591DC5E08BA11EDA1354C10C4F9AE02.roa
Signing time:             Thu 23 Mar 2023 08:41:51 +0000
ROA not before:           Thu 23 Mar 2023 08:41:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150044
IP address blocks:        103.89.44.0/23 maxlen: 24
                          103.178.248.0/24 maxlen: 24
                          103.190.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26405 (0x6725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 23 08:41:51 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=641c10cf-b50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:42:14:a8:67:b5:19:50:d5:b8:76:1b:80:
                    91:a4:0a:83:c9:30:35:8a:04:1a:41:ee:0c:9e:8b:
                    3f:1c:15:25:02:19:a5:94:00:cf:39:48:1c:7a:c4:
                    bf:2f:a6:7e:6d:99:8f:63:cd:11:da:ba:44:1d:54:
                    e7:be:4e:e7:4e:d2:93:cc:b6:b8:d8:86:37:e0:20:
                    e9:20:f5:4c:11:9c:9a:75:db:b0:9a:27:cd:71:ab:
                    04:af:ea:cb:ea:ee:ea:ef:10:01:be:ad:65:e2:2e:
                    15:f9:29:4f:72:6b:57:72:34:ce:80:6c:13:5e:1f:
                    75:e3:91:2e:d2:68:40:30:3b:ef:df:71:1a:ee:f4:
                    05:3b:cc:86:cb:12:5e:97:df:5c:77:e6:67:1c:dd:
                    0c:ac:57:d5:b7:82:84:db:12:e0:99:d5:af:61:e2:
                    7a:a7:a4:0e:af:65:09:3c:c2:a3:82:77:58:a0:b7:
                    17:07:fb:8e:47:99:d6:1e:db:93:45:27:1a:f0:dc:
                    3e:78:63:c5:ee:ce:9e:5a:5e:31:f2:6f:3d:db:e1:
                    9b:71:83:85:9c:60:74:d6:db:04:11:cb:93:38:63:
                    ec:23:e9:dd:02:9a:e2:99:ef:4d:e3:fc:02:96:5e:
                    f2:8b:1a:c1:28:63:67:21:95:ea:0f:2b:36:15:0b:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:52:6C:04:49:C5:9F:F6:05:3E:D1:4B:5F:EB:38:6F:41:D9:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9591DC5E08BA11EDA1354C10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.44.0/23
                  103.178.248.0/24
                  103.190.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:52:6b:71:a7:a0:fd:6e:92:af:37:80:03:3d:eb:ec:54:
         1b:a6:c2:92:a8:17:4c:be:15:a7:b6:2a:37:1f:ad:0e:2c:07:
         e5:44:11:97:f2:91:45:74:68:e0:ed:a8:07:ba:96:e1:b4:35:
         6e:d8:9b:e6:f4:b7:eb:8b:05:50:a2:92:d2:6e:59:80:7b:4a:
         53:84:e4:08:5b:a3:c3:62:d0:9c:30:86:1c:07:f1:a0:33:60:
         38:2e:b8:01:39:b3:99:d7:3a:bf:f3:ca:ba:98:1c:46:82:c2:
         5d:65:90:08:a1:4b:cf:c1:54:83:27:9d:94:01:eb:17:02:ac:
         b6:1b:75:f1:13:5d:b7:45:08:b9:f6:4d:2b:18:05:85:8a:96:
         9a:78:2e:ff:c5:cc:54:c4:62:a9:a9:af:45:af:8e:07:22:9b:
         d1:6f:8a:7e:ca:41:ba:b4:24:df:6f:90:2e:37:3b:10:39:2e:
         9b:66:1f:ab:e0:74:77:59:43:2c:3d:47:87:c3:d3:69:ee:b0:
         b8:67:73:bb:60:ec:81:92:5e:13:bc:98:8f:0b:79:51:97:7e:
         68:fc:94:3e:97:51:35:5d:b3:03:17:5b:68:7f:37:23:57:94:
         23:bf:b2:8e:0a:07:36:38:36:5b:4d:94:76:c2:f7:e9:ce:3c:
         da:89:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----