Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/CD0AC3508D7A11EC917B017AC4F9AE02.roa
File:                     CD0AC3508D7A11EC917B017AC4F9AE02.roa (raw, json)
Hash identifier:          mp3h+xaPClY3Nt0IAsetrbKTDEJwyg8NnEowT2cRjOQ=
Subject key identifier:   68:09:9F:6A:2E:F7:46:FD:B7:5C:AE:07:42:55:AC:28:D5:88:56:C2
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0AEE
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/CD0AC3508D7A11EC917B017AC4F9AE02.roa
Signing time:             Mon 14 Feb 2022 09:45:11 +0000
ROA not before:           Mon 14 Feb 2022 09:45:11 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     134715
IP address blocks:        103.197.176.0/22 maxlen: 23
                          220.158.236.0/22 maxlen: 24
                          2403:580::/32 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2798 (0xaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Feb 14 09:45:11 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=620a24a7-e5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:8d:d7:28:ef:f1:47:19:69:41:82:32:c3:
                    2e:7b:0d:3e:85:e6:42:cc:45:e3:b2:7a:97:f2:48:
                    22:7f:3a:bf:ad:1b:f3:c5:bb:39:43:51:90:18:99:
                    f7:7e:41:95:03:b1:f4:62:e5:f2:50:dd:60:f8:e7:
                    d6:a2:1d:59:c3:c8:b4:cf:b1:de:05:d5:98:52:7b:
                    0f:dc:45:18:4e:5b:4d:58:b2:a5:b8:be:7c:9a:cc:
                    1b:52:6a:56:18:4d:9c:b5:84:d9:bb:fa:16:7b:65:
                    48:e8:b2:35:4b:d9:01:a0:ef:be:ee:20:ae:4a:7b:
                    b5:10:1b:7e:59:65:6d:e4:f3:3a:ff:d6:5a:55:10:
                    8c:05:dd:dd:bf:ed:a4:a3:77:9c:9b:e2:69:de:7d:
                    9d:78:c1:1c:89:8f:73:e1:bf:ae:3d:04:07:95:8e:
                    4b:38:5c:85:9b:c4:34:84:dc:7d:29:39:bb:12:9e:
                    fa:75:cf:9e:cb:35:eb:78:4a:ab:68:a7:f6:a8:29:
                    6e:91:b1:a2:c4:32:8a:07:00:4a:59:b5:ec:eb:24:
                    64:c3:86:cd:df:85:3b:be:be:61:0d:3e:eb:69:37:
                    68:a9:4f:0d:a7:25:5b:13:49:c7:c9:5d:1b:75:79:
                    fe:cb:3c:e1:8e:08:2e:be:45:f9:31:2f:b1:1a:4d:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:09:9F:6A:2E:F7:46:FD:B7:5C:AE:07:42:55:AC:28:D5:88:56:C2
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/CD0AC3508D7A11EC917B017AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.176.0/22
                  220.158.236.0/22
                IPv6:
                  2403:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:0f:cb:a1:36:0d:3c:ac:46:4a:e8:5e:ad:d6:b2:6e:8d:
         e6:9f:a7:fe:69:07:ac:cd:73:66:67:a1:53:b2:c8:a3:81:c3:
         7f:5a:33:5e:27:e4:9a:24:e9:3d:29:5d:63:bd:a6:0e:40:de:
         79:69:6c:c6:e2:f1:f4:2b:c5:40:d4:cb:b3:d9:19:55:5a:be:
         89:9d:80:f0:43:14:80:b1:bd:8f:90:24:97:42:ba:94:72:26:
         e8:77:15:cb:29:5d:b5:e8:7b:5f:b1:ac:37:80:4a:84:69:0a:
         d6:81:fb:f6:6d:b3:ca:67:6f:7c:a8:b0:23:18:2b:bd:0e:0e:
         bd:6f:cb:5b:17:9d:b2:2c:13:98:1f:03:77:9b:9b:78:f3:be:
         9d:10:f6:2a:0f:23:7f:8b:50:50:dd:b9:1c:92:66:a8:a9:16:
         52:11:05:51:95:52:8d:da:24:b4:74:41:f1:00:67:27:5c:b7:
         77:5e:71:f4:5e:2c:94:da:3b:56:71:c2:1b:cb:ce:c3:86:a7:
         03:6e:e1:cd:22:0a:bf:9a:be:99:e5:14:14:d1:10:49:6f:b9:
         0d:12:91:72:df:31:04:78:f8:40:02:47:bd:dc:68:d2:de:be:
         11:cb:4b:85:6b:fc:05:4a:2c:75:46:3e:4b:b8:84:57:22:48:
         d1:7c:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----