Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/F547FC80AE9811ED96F12B66C4F9AE02.roa
File:                     F547FC80AE9811ED96F12B66C4F9AE02.roa (raw, json)
Hash identifier:          pnwFK8TjpQRzBHlduY9fNj9WNktzIkSfUF2IvrVTJKg=
Subject key identifier:   87:B1:DF:7E:90:3E:DE:21:17:14:CB:C1:CE:9C:20:0B:79:20:00:E1
Certificate issuer:       /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial:       09EA
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/F547FC80AE9811ED96F12B66C4F9AE02.roa
Signing time:             Fri 17 Feb 2023 07:59:09 +0000
ROA not before:           Fri 17 Feb 2023 07:59:09 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     150178
IP address blocks:        103.142.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
        Validity
            Not Before: Feb 17 07:59:09 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=63ef33cd-08cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:f5:3f:97:73:bd:e4:f9:ae:c8:a7:02:52:
                    69:61:a4:de:a0:bf:cd:b1:dc:8d:73:1f:25:82:1d:
                    6f:73:f2:2b:5a:d1:d0:f9:d1:78:63:b6:4b:86:19:
                    f3:97:41:03:07:a3:f4:97:b8:31:81:1e:f2:ad:02:
                    61:b3:4f:22:c2:de:32:e1:22:16:fe:2f:c8:0a:d9:
                    59:f9:e6:8f:b3:76:73:23:6c:ae:53:b5:52:42:68:
                    77:9b:7d:93:9c:05:1b:1e:d5:88:c2:4f:d3:91:b6:
                    58:60:38:9b:b4:cf:46:04:1a:a0:b8:86:a0:74:78:
                    84:88:3d:24:58:0e:e2:21:81:f0:3d:5e:5d:5e:28:
                    33:c8:b4:d7:5b:70:93:b8:00:3e:5c:96:e5:0f:1e:
                    e7:81:a8:43:65:5b:1c:fc:ee:9f:4b:94:12:c4:0f:
                    38:a5:64:a5:d4:84:10:ef:c8:f8:e3:fd:3b:7a:1a:
                    1d:72:16:6f:3e:7f:89:26:f8:b6:5a:5d:16:36:88:
                    f4:33:bf:b1:85:94:4c:05:29:f3:9b:f3:47:34:d3:
                    1d:dd:08:b6:31:a8:64:5d:8f:ff:f2:c2:71:ae:18:
                    08:40:9a:9b:66:e0:f8:fa:f9:4d:e0:a1:c6:92:c6:
                    ac:3b:6b:1a:a5:27:94:97:fd:c3:e0:ac:69:40:67:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:DF:7E:90:3E:DE:21:17:14:CB:C1:CE:9C:20:0B:79:20:00:E1
            X509v3 Authority Key Identifier:
                keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/F547FC80AE9811ED96F12B66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:3a:e7:cc:8d:2c:d1:ce:e6:fd:9e:81:24:7e:ed:ee:20:
         98:05:dc:ec:64:28:17:db:eb:7d:57:91:f2:68:2b:9b:ba:88:
         a9:63:5e:21:b9:1d:82:e1:d6:f7:79:18:e7:e4:f2:0b:55:46:
         72:99:5f:07:ab:e3:d2:df:ee:78:d1:d2:0a:f5:95:0d:08:69:
         d2:9e:0c:88:b1:e6:cf:8c:65:ff:b8:56:8d:c6:98:93:e4:66:
         33:01:9d:0b:13:64:36:de:dc:10:e2:9f:c2:b1:69:f3:9d:a6:
         56:54:df:63:7a:25:72:58:d6:bc:ba:16:e9:ff:11:06:92:7a:
         14:74:9c:ca:af:96:5a:b3:25:b1:c0:ae:32:53:77:db:5f:6f:
         b2:a8:9a:73:87:f6:a7:6c:f1:69:e4:2f:4d:39:3a:89:40:71:
         3f:0a:d4:01:b5:1d:03:11:89:c5:c6:c8:45:f7:18:78:06:c3:
         a7:6a:10:65:e8:ce:89:52:56:a4:0e:4a:a4:1e:49:2a:3b:35:
         da:c4:38:5f:19:e3:91:7d:b0:14:6b:52:34:b7:a3:b5:55:63:
         6c:67:30:7a:65:59:d1:66:25:b5:a5:02:63:e3:5d:50:9d:ea:
         57:d8:38:22:d1:80:25:97:71:9a:21:da:7e:cf:c4:c0:17:ad:
         27:db:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----