Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
File:                     D37F4CB28A9311ED9F4B8F13C4F9AE02.roa (raw, json)
Hash identifier:          MsKl8cRUgnbZHPGhpAKl++YAjcwMDUrZNLpTz1Hpk3s=
Subject key identifier:   18:B1:65:0F:56:D2:A6:7A:5D:54:B5:ED:C1:15:BC:8A:0C:10:80:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6977
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
Signing time:             Tue 02 May 2023 11:31:46 +0000
ROA not before:           Tue 02 May 2023 11:31:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137163
IP address blocks:        45.248.3.0/24 maxlen: 24
                          103.81.24.0/23 maxlen: 24
                          103.81.26.0/23 maxlen: 24
                          103.216.140.0/22 maxlen: 22
                          103.216.140.0/24 maxlen: 24
                          103.216.141.0/24 maxlen: 24
                          103.216.142.0/24 maxlen: 24
                          103.216.143.0/24 maxlen: 24
                          2400:eaa0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26999 (0x6977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  2 11:31:46 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6450f4a2-ab59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:1f:90:2e:56:c4:1b:1b:85:28:95:7e:de:
                    b3:98:31:4b:f8:47:64:1f:eb:c8:e7:8c:f7:81:25:
                    bd:fd:79:d2:2e:2f:33:55:25:e3:39:47:9f:fa:cf:
                    53:5e:82:fd:bb:5b:e8:0c:1a:83:3e:53:9e:92:73:
                    a8:42:6a:c8:df:2a:40:38:67:ad:0b:ac:d7:97:4c:
                    03:96:dc:7f:0a:8a:e7:f8:09:f7:e2:67:dc:d4:cc:
                    2c:a3:f4:37:cf:bb:ea:1f:f2:78:fa:51:82:09:79:
                    8a:4c:50:d1:2f:2d:72:88:49:9c:2b:2b:83:56:17:
                    c3:a4:43:3d:79:54:6f:de:19:f9:04:9f:da:7d:18:
                    35:d8:10:81:b3:80:ed:75:52:06:65:43:18:83:9b:
                    60:c2:a9:21:c1:5c:c7:ba:a0:af:2a:25:b5:4b:99:
                    8d:49:52:11:a1:78:d3:c1:a5:6e:0d:5a:1a:e8:23:
                    89:8c:bb:06:4a:93:35:62:41:a7:1c:59:52:c7:f9:
                    90:41:d8:6c:ad:19:90:5c:b9:54:2d:9f:a8:f3:91:
                    e2:3b:9e:f0:b4:38:c9:b8:66:ae:33:91:3c:90:3e:
                    21:27:9f:46:80:16:da:55:fb:72:41:14:13:76:40:
                    90:47:0b:00:89:95:83:ba:3d:2e:88:c0:8a:99:5a:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:65:0F:56:D2:A6:7A:5D:54:B5:ED:C1:15:BC:8A:0C:10:80:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.3.0/24
                  103.81.24.0/22
                  103.216.140.0/22
                IPv6:
                  2400:eaa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:61:67:42:29:a8:6d:e0:b0:8a:07:d6:20:a7:0b:a9:28:a8:
         e7:3b:cc:74:85:6c:10:8b:57:a2:d8:3e:1a:54:48:45:32:fc:
         72:e3:c0:a5:b9:43:45:54:4c:11:83:65:76:b3:fa:80:8b:91:
         da:b6:66:1b:0a:72:52:42:b2:c9:e3:b6:25:1b:25:c2:1d:63:
         44:7b:98:b5:0e:52:1c:d3:4d:49:12:ca:06:cc:0d:9f:55:d0:
         f4:ce:32:56:64:2c:a1:7c:b5:6a:26:88:3f:cc:30:0a:0c:77:
         34:96:18:fb:59:f1:85:e8:36:49:f1:0e:c1:58:e1:54:5b:6c:
         e3:50:7b:fd:86:4c:ab:1e:46:d7:e2:18:3a:88:48:86:58:2d:
         37:9a:51:a6:df:3f:e3:0f:ee:e7:f7:74:14:5f:81:9f:1d:d7:
         c2:75:4e:f9:10:98:44:6a:a7:52:d7:49:c6:a3:eb:45:87:f2:
         30:f0:c3:d9:f8:1d:52:b1:23:14:5a:1a:aa:f3:6b:79:06:42:
         e9:e1:8c:a0:41:e9:09:61:76:98:48:15:9f:f8:a9:87:14:44:
         86:99:1e:53:2a:22:7c:ad:f5:08:38:e6:06:21:e0:f8:3c:c1:
         4e:7f:b2:54:53:c1:46:0f:8e:32:86:af:a8:46:b8:18:5f:57:
         1b:03:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----