Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C191C364F50611EB8BF98975C4F9AE02.roa
File:                     C191C364F50611EB8BF98975C4F9AE02.roa (raw, json)
Hash identifier:          uCszu7LAz2CKHz0B8twGLJt8J2N2fk2XN6nRIJkvztU=
Subject key identifier:   C6:8E:94:AD:DD:77:87:B6:B9:4F:E8:2B:E3:BA:C5:C3:76:C4:9E:35
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       53A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C191C364F50611EB8BF98975C4F9AE02.roa
Signing time:             Mon 16 May 2022 04:26:19 +0000
ROA not before:           Mon 16 May 2022 04:26:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142474
IP address blocks:        103.170.106.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21416 (0x53a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 16 04:26:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6281d26a-1762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:72:b4:0a:a7:92:7a:38:3e:b3:13:8e:eb:
                    b5:76:45:e0:31:b7:6b:54:6c:65:ec:99:df:2c:9e:
                    36:df:09:0f:56:07:51:43:74:a9:92:d8:8c:00:ca:
                    91:70:b5:dc:b9:ab:a2:0c:42:8a:f4:5a:28:c6:45:
                    a0:22:cb:c4:8a:f8:ee:5c:27:7c:f5:4a:31:22:09:
                    00:5b:79:66:59:29:67:d3:e7:81:2a:ed:5b:fa:04:
                    2c:98:df:52:80:9b:42:75:fb:ff:74:99:9c:21:b9:
                    e6:2d:92:60:8c:58:1b:62:48:09:45:0e:2b:73:e4:
                    34:d8:1c:49:4a:bc:f2:15:b9:c0:22:60:74:cd:0a:
                    3c:51:b9:ac:18:e4:5f:be:c7:49:da:96:17:b0:c3:
                    7d:4c:db:e0:ca:65:a0:76:d0:49:61:a5:df:5e:7f:
                    12:63:3c:29:8c:80:13:b4:e1:5f:6f:83:65:11:27:
                    09:06:36:9d:42:a4:41:58:6d:2a:ae:d9:6b:2e:fa:
                    56:b6:3c:23:03:7b:a2:05:ad:5c:2b:ab:17:ba:5f:
                    0b:01:1d:e2:13:c5:20:50:ee:c1:64:90:0b:93:35:
                    f8:64:85:47:86:48:7f:bb:22:91:dd:aa:d1:02:73:
                    ce:d0:40:61:5d:89:d9:4e:80:f0:1f:56:26:b2:bb:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:94:AD:DD:77:87:B6:B9:4F:E8:2B:E3:BA:C5:C3:76:C4:9E:35
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C191C364F50611EB8BF98975C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:61:f6:83:2a:64:c5:b7:00:f9:e3:60:25:f0:98:39:16:
         d5:4b:f4:13:a7:61:0c:d2:88:0e:08:9c:b5:f4:24:93:0f:bc:
         9b:08:d5:c8:7d:e2:7c:00:6a:ef:10:6b:c1:48:f8:83:fc:8a:
         36:56:ce:f8:7e:b3:5f:fd:6a:0d:75:75:04:8f:05:ee:42:29:
         0a:aa:63:8e:74:0a:4b:7b:b6:e6:10:e5:ab:6f:12:ff:20:31:
         24:e7:dd:cf:55:96:28:66:0a:f4:d2:5e:a2:52:c5:35:57:c5:
         4d:65:de:f9:16:21:af:bf:50:c0:a7:37:ee:a8:cf:d5:53:40:
         bf:49:e7:78:6e:1b:ec:a5:52:fa:a2:e9:65:c2:f9:bc:89:c5:
         83:1f:71:08:b8:af:32:2d:eb:6a:78:24:24:30:04:17:73:91:
         d3:16:52:3d:c2:8a:91:0f:e3:81:b7:44:99:cf:2b:84:4f:3d:
         50:35:3d:2e:17:f7:58:a6:4e:59:e1:c0:b2:02:75:6c:37:a0:
         dd:9f:92:0a:f3:9e:38:fe:12:2d:15:50:27:b0:15:ef:1f:20:
         70:da:4f:0a:a3:79:3f:2c:88:e2:4b:f5:bb:f1:10:c3:17:2c:
         6b:8b:3a:fe:d4:8b:58:e8:7d:a0:f9:a0:b5:1d:d8:9f:c4:5b:
         d6:d1:21:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICU6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNTE2MDQyNjE5WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjgxZDI2YS0xNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmNytAqnkno4PrMTjuu1dkXgMbdrVGxl7JnfLJ423wkPVgdRQ3SpktiMAMqR
cLXcuauiDEKK9FooxkWgIsvEivjuXCd89UoxIgkAW3lmWSln0+eBKu1b+gQsmN9S
gJtCdfv/dJmcIbnmLZJgjFgbYkgJRQ4rc+Q02BxJSrzyFbnAImB0zQo8UbmsGORf
vsdJ2pYXsMN9TNvgymWgdtBJYaXfXn8SYzwpjIATtOFfb4NlEScJBjadQqRBWG0q
rtlrLvpWtjwjA3uiBa1cK6sXul8LAR3iE8UgUO7BZJALkzX4ZIVHhkh/uyKR3arR
AnPO0EBhXYnZToDwH1Ymsrv03wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMaOlK3d
d4e2uU/oK+O6xcN2xJ41MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzE5MUMzNjRG
NTA2MTFFQjhCRjk4OTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqmowDQYJKoZIhvcNAQELBQADggEBAJWsYfaDKmTFtwD5
42Al8Jg5FtVL9BOnYQzSiA4InLX0JJMPvJsI1ch94nwAau8Qa8FI+IP8ijZWzvh+
s1/9ag11dQSPBe5CKQqqY450Ckt7tuYQ5atvEv8gMSTn3c9VlihmCvTSXqJSxTVX
xU1l3vkWIa+/UMCnN+6oz9VTQL9J53huG+ylUvqi6WXC+byJxYMfcQi4rzIt62p4
JCQwBBdzkdMWUj3CipEP44G3RJnPK4RPPVA1PS4X91imTlnhwLICdWw3oN2fkgrz
njj+Ei0VUCewFe8fIHDaTwqjeT8siOJL9bvxEMMXLGuLOv7Ui1jofaD5oLUd2J/E
W9bRITg=
-----END CERTIFICATE-----