Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92C0560F9AB11EBBDA67F81C4F9AE02.roa
File:                     A92C0560F9AB11EBBDA67F81C4F9AE02.roa (raw, json)
Hash identifier:          YaGAwx2E6tIX6/nZLgOvsOUpdnz3Vpgn8J7pQNeaw+I=
Subject key identifier:   DE:F2:92:25:B8:6F:CF:0A:F0:83:35:CE:CA:99:52:F9:11:9F:25:23
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       4FA2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92C0560F9AB11EBBDA67F81C4F9AE02.roa
Signing time:             Mon 16 May 2022 04:07:02 +0000
ROA not before:           Mon 16 May 2022 04:07:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134249
IP address blocks:        45.126.188.0/22 maxlen: 24
                          103.109.84.0/22 maxlen: 22
                          103.109.84.0/24 maxlen: 24
                          103.109.85.0/24 maxlen: 24
                          103.109.86.0/24 maxlen: 24
                          103.109.87.0/24 maxlen: 24
                          103.195.68.0/22 maxlen: 24
                          2001:df4:3900::/48 maxlen: 48
                          2001:df5:fc00::/48 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20386 (0x4fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 16 04:07:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6281cde6-2985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:10:60:12:ce:04:df:d1:a0:e9:4b:b5:be:
                    20:e0:47:ba:00:b3:be:ee:36:f9:f9:13:01:4a:8c:
                    d4:3a:d9:1f:98:1f:a0:7d:f6:b3:12:3d:9c:97:b3:
                    3c:44:8d:9c:1c:0b:07:1b:df:42:8a:82:84:83:b5:
                    39:4f:fd:f1:14:03:4d:02:91:95:16:67:76:6c:d3:
                    af:b1:4e:a1:79:22:62:7e:0a:a6:0e:fd:46:36:41:
                    84:db:df:86:b9:d9:cf:34:65:4d:68:a6:b0:26:d8:
                    e6:f5:38:a5:e6:12:0a:fc:0c:b3:b1:f7:91:57:79:
                    89:6a:5d:3d:ae:15:cd:0f:72:c3:4f:4e:b7:93:9b:
                    61:36:05:70:a7:4e:f1:23:0b:07:08:dc:17:05:d1:
                    4a:3b:4b:3e:49:98:94:df:52:de:81:7f:35:40:b5:
                    0c:04:91:1c:c6:2a:ea:b6:a0:dc:50:80:99:89:b7:
                    00:ef:f9:f2:87:d3:d3:c2:3f:f1:75:27:3a:e0:81:
                    ee:fb:df:d2:1e:27:42:a4:50:85:d3:5f:f5:9b:86:
                    f2:7f:9d:76:5c:d0:17:36:97:c2:ee:4f:ab:0b:91:
                    39:81:11:eb:19:06:c1:0f:2b:bb:a7:d5:1d:6d:39:
                    0d:e4:7d:e0:ba:6f:48:b8:52:83:ed:96:ce:14:52:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:92:25:B8:6F:CF:0A:F0:83:35:CE:CA:99:52:F9:11:9F:25:23
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92C0560F9AB11EBBDA67F81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.188.0/22
                  103.109.84.0/22
                  103.195.68.0/22
                IPv6:
                  2001:df4:3900::/48
                  2001:df5:fc00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:b6:f4:75:b9:50:59:dc:96:f2:59:6f:5e:3e:3b:f5:fb:
         71:e8:37:e8:48:b3:fd:61:9f:1a:b2:d1:a7:3c:9e:66:5b:a0:
         d4:2b:8d:a5:3b:79:22:9e:06:15:67:78:d1:91:b0:5a:34:7c:
         cf:3e:01:1b:c0:a6:fd:1a:3b:8b:5d:18:94:51:5f:19:8b:6e:
         d7:d0:f0:8a:26:d9:31:f7:ca:aa:cc:d0:ed:68:fa:84:bb:f6:
         3d:bd:7c:ee:35:c3:fd:6d:41:83:26:d5:cd:c2:bc:40:11:b0:
         51:da:d4:9a:4b:c3:87:61:e8:e8:4b:ca:bb:50:8f:d6:a1:09:
         ef:4f:9a:2a:81:7b:a6:7f:b8:78:e6:1e:e7:11:39:57:0e:d5:
         94:5c:ed:81:19:a8:ef:26:96:74:24:d6:a4:61:7c:6d:b6:a8:
         42:a0:a2:df:29:38:e2:0b:0d:a4:33:a9:66:23:7d:68:d2:94:
         ec:01:ba:2b:08:c3:f8:30:a4:31:86:25:5e:58:dc:03:1f:cb:
         14:80:c5:40:2d:6e:54:8a:d4:93:d7:aa:d3:c5:54:90:6f:ac:
         b3:d0:9d:99:a6:b9:1d:40:ec:4b:03:58:fc:ef:5f:d4:c8:dc:
         f7:c2:5a:52:f6:b9:e5:b2:6b:b0:41:65:6c:b6:e6:3f:f9:81:
         6d:92:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----