Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
File:                     BD43FC98FBE911EBBBD6245FC4F9AE02.roa (raw, json)
Hash identifier:          o0JP7z2x2qC17Kg1/IxJI35oMk4kiO7GfQHGAzyuDWc=
Subject key identifier:   29:09:01:C4:FD:F0:66:C3:1A:A3:8E:FB:BF:0D:D1:59:98:1D:94:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       56DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
Signing time:             Tue 07 Jun 2022 08:51:42 +0000
ROA not before:           Tue 07 Jun 2022 08:51:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        103.165.72.0/23 maxlen: 24
                          103.165.88.0/24 maxlen: 24
                          103.165.89.0/24 maxlen: 24
                          103.166.180.0/24 maxlen: 24
                          103.167.152.0/23 maxlen: 24
                          103.173.15.0/24 maxlen: 24
                          103.181.151.0/24 maxlen: 24
                          2001:df6:9580::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22237 (0x56dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  7 08:51:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=629f119e-cf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:0d:42:6f:b7:f9:8e:ab:e4:cb:c9:7f:b6:
                    8b:b6:1e:50:63:5d:e1:9e:24:80:51:3b:b8:29:dd:
                    2e:7a:76:ed:15:c3:a2:fb:02:74:be:12:7a:a2:e6:
                    83:c4:c9:1b:ef:2b:c2:05:f1:2a:8c:ec:1b:39:15:
                    ff:82:5f:df:4e:62:1e:9e:d2:d4:4c:ab:28:bc:84:
                    05:d7:20:ff:c7:93:34:b6:60:bd:49:9e:7c:5c:e3:
                    54:e6:d4:fc:c7:ee:3e:b5:73:02:39:04:84:27:11:
                    83:8a:7a:22:92:cf:50:b4:92:e8:15:07:9f:5e:d9:
                    cb:fb:04:24:e1:80:9e:01:c9:60:74:d8:ac:a0:5c:
                    17:65:70:f6:a0:9b:1d:95:e0:aa:c8:8c:a4:17:bb:
                    dd:74:45:d9:64:f3:54:61:81:c5:05:1d:00:b3:57:
                    a7:b1:47:a0:e4:51:4a:e6:e4:d3:1e:f4:4a:25:a9:
                    0b:fa:5b:cc:bb:aa:25:9d:8b:ef:76:10:84:65:04:
                    0e:5e:50:4a:21:b4:61:4f:27:39:ad:e5:47:77:ac:
                    89:ab:e4:00:97:63:4d:fe:6f:b6:12:bd:d4:c7:80:
                    39:76:52:fc:75:0a:1a:45:23:3c:84:c0:fb:96:ca:
                    52:2a:f9:e1:bb:05:c8:2a:ff:bd:38:3d:bc:0f:43:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:01:C4:FD:F0:66:C3:1A:A3:8E:FB:BF:0D:D1:59:98:1D:94:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.72.0/23
                  103.165.88.0/23
                  103.166.180.0/24
                  103.167.152.0/23
                  103.173.15.0/24
                  103.181.151.0/24
                IPv6:
                  2001:df6:9580::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:58:a8:38:c3:40:bd:0e:cd:74:d0:1d:b1:84:0f:c9:4f:0d:
         53:c5:ae:ed:16:95:84:79:95:5d:e0:72:4c:63:56:aa:f0:c2:
         31:e8:8f:d9:ad:62:af:a6:10:8b:76:80:15:1b:e6:0a:89:f6:
         bf:c0:1c:02:46:11:42:d2:67:13:c9:e3:86:97:57:aa:ad:2b:
         06:27:3d:3a:46:b2:ea:8e:37:d6:ac:58:6b:db:a3:43:2a:fc:
         f3:e9:d4:34:5f:45:a6:ad:1c:81:b6:34:6b:7b:93:ef:22:22:
         a8:42:45:0c:19:c3:0b:4d:21:ae:b3:ae:ee:86:db:17:fb:74:
         e9:5f:5c:e6:44:bd:32:c7:d9:e6:41:34:2b:cb:ac:40:d1:54:
         84:0d:1f:c3:e8:fe:4a:5a:20:e8:ad:6b:f4:6c:90:35:dd:85:
         2e:81:73:fb:09:96:43:82:ae:8a:02:cb:8d:c2:2e:27:85:47:
         f0:1d:2b:4c:ec:bd:1b:ee:fe:17:d9:0f:2c:ea:69:bd:ef:c1:
         96:6f:f6:66:4e:67:26:b6:6d:99:c9:73:3f:d2:4a:fe:c7:21:
         86:4c:87:8b:99:19:a0:ce:8a:ad:ae:5e:b2:d2:ac:26:cb:d6:
         13:b2:80:cb:89:2c:54:ab:86:bb:d4:aa:d2:fc:db:3f:8d:9d:
         b3:de:6d:c2
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgICVt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjA3MDg1MTQyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjlmMTE5ZS1jZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwANQm+3+Y6r5MvJf7aLth5QY13hniSAUTu4Kd0uenbtFcOi+wJ0vhJ6ouaD
xMkb7yvCBfEqjOwbORX/gl/fTmIentLUTKsovIQF1yD/x5M0tmC9SZ58XONU5tT8
x+4+tXMCOQSEJxGDinoiks9QtJLoFQefXtnL+wQk4YCeAclgdNisoFwXZXD2oJsd
leCqyIykF7vddEXZZPNUYYHFBR0As1ensUeg5FFK5uTTHvRKJakL+lvMu6olnYvv
dhCEZQQOXlBKIbRhTyc5reVHd6yJq+QAl2NN/m+2Er3Ux4A5dlL8dQoaRSM8hMD7
lspSKvnhuwXIKv+9OD28D0P9MQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFCkJAcT9
8GbDGqOO+78N0VmYHZRZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkQ0M0ZDOThG
QkU5MTFFQkJCRDYyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E
PzA9MCoEAgABMCQDBAFnpUgDBAFnpVgDBABnprQDBAFnp5gDBABnrQ8DBABntZcw
DwQCAAIwCQMHACABDfaVgDANBgkqhkiG9w0BAQsFAAOCAQEAr1ioOMNAvQ7NdNAd
sYQPyU8NU8Wu7RaVhHmVXeByTGNWqvDCMeiP2a1ir6YQi3aAFRvmCon2v8AcAkYR
QtJnE8njhpdXqq0rBic9Okay6o431qxYa9ujQyr88+nUNF9Fpq0cgbY0a3uT7yIi
qEJFDBnDC00hrrOu7obbF/t06V9c5kS9MsfZ5kE0K8usQNFUhA0fw+j+Slog6K1r
9GyQNd2FLoFz+wmWQ4KuigLLjcIuJ4VH8B0rTOy9G+7+F9kPLOppve/Blm/2Zk5n
JrZtmclzP9JK/schhkyHi5kZoM6Kra5estKsJsvWE7KAy4ksVKuGu9Sq0vzbP42d
s95twg==
-----END CERTIFICATE-----