Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4BBCAE0335911ECBAA0EA80C4F9AE02.roa
File:                     B4BBCAE0335911ECBAA0EA80C4F9AE02.roa (raw, json)
Hash identifier:          lcw8aWaAaCVJUXu4Z4SWH8lh+vkVh6nnNupe00khy7o=
Subject key identifier:   76:94:14:59:96:0F:D3:A0:B1:82:C6:50:95:C6:B4:E3:4F:A7:DC:71
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       54CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4BBCAE0335911ECBAA0EA80C4F9AE02.roa
Signing time:             Mon 16 May 2022 04:31:40 +0000
ROA not before:           Mon 16 May 2022 04:31:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206150
IP address blocks:        103.142.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21710 (0x54ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 16 04:31:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6281d3ac-32f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5f:67:34:23:4f:20:6a:13:be:76:53:ab:3e:
                    f1:6c:cf:a1:fd:9e:49:80:3b:ef:75:29:d6:60:16:
                    16:ca:c0:a6:d5:94:42:b0:99:53:c3:00:c2:58:ef:
                    d9:65:a4:c2:8b:06:51:ce:97:b4:bb:44:b0:d7:4c:
                    ae:e2:94:75:f1:71:21:bd:da:1d:8f:8e:55:2c:bc:
                    08:8a:f6:68:df:d3:c3:fb:ef:c0:10:21:72:e4:ee:
                    ca:31:0e:0a:81:c6:4b:a3:8c:9e:18:a5:b2:03:9f:
                    65:95:d0:1c:4f:e7:1b:33:d6:b9:8e:eb:72:4c:ad:
                    33:3d:ce:df:50:52:97:64:2a:ea:82:64:72:39:81:
                    5a:ae:8f:8b:63:e2:eb:9a:1b:fb:55:74:74:ea:48:
                    2a:b9:44:90:19:26:21:1c:01:2b:b7:19:5d:ac:e8:
                    a3:cf:59:3a:33:a6:00:30:7b:60:b6:da:ec:73:68:
                    29:51:fc:2d:ce:b4:2c:8b:a0:b7:cb:f1:d3:25:65:
                    b7:b0:ef:50:73:01:b1:50:ea:3a:f0:55:4c:d9:ed:
                    70:fe:d5:27:0b:15:f3:a8:bd:0f:20:23:35:c4:54:
                    3c:99:10:6d:45:3a:10:09:c2:8a:5a:35:a7:f8:ba:
                    14:95:72:62:e9:ab:58:d4:da:ce:47:c8:1d:aa:8b:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:14:59:96:0F:D3:A0:B1:82:C6:50:95:C6:B4:E3:4F:A7:DC:71
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4BBCAE0335911ECBAA0EA80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:17:7b:5c:d7:31:49:7d:71:76:e1:63:c7:dc:30:6d:58:
         53:68:00:7a:b2:b6:34:85:c7:df:ae:a9:e4:ec:3f:6a:4c:b2:
         b2:9c:76:64:b2:04:e8:a4:01:7e:59:cf:bc:a7:ba:b2:82:4f:
         f4:e1:8c:9d:69:43:78:7e:a3:ec:83:9f:d1:d9:45:ea:e2:81:
         ae:8f:b3:5b:25:3d:56:fd:f6:ae:af:50:2c:db:68:d3:b4:1a:
         ae:83:47:cd:87:66:3a:64:e6:dd:22:b6:60:1f:7a:32:99:15:
         20:0d:4b:e7:11:bd:fc:70:9c:62:bc:a6:3c:c8:0d:90:24:d6:
         95:e8:af:82:b6:3d:7f:bf:21:a7:38:f1:ff:09:6a:1c:63:b1:
         b5:a8:50:c4:72:72:85:ae:f5:08:84:4c:eb:23:7c:76:3a:4a:
         7a:48:74:a2:1e:89:6e:02:99:fd:f2:ee:11:8f:9e:61:0c:53:
         d1:5e:d9:09:ab:4d:cc:c0:f1:34:c2:98:aa:a2:fe:11:ed:de:
         04:70:96:66:65:f0:83:91:20:88:0b:c0:30:e7:df:29:ec:5a:
         4e:68:79:86:2f:73:aa:c8:ae:83:81:76:c7:d9:c1:20:1a:8d:
         a5:b7:c3:56:28:3e:42:10:8a:3d:67:e5:29:ba:f1:62:a8:ac:
         f3:57:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----