Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
File:                     B82F77DE71E811E8ACB86768C4F9AE02.roa (raw, json)
Hash identifier:          wypSowIiJqz1vuJEeVjlkKy9B3nmkxI0NlOZ1geBf8Q=
Subject key identifier:   69:C2:1D:06:F8:5D:88:24:3A:A8:12:C9:01:74:4B:E9:E1:CA:5D:48
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       112B
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
Signing time:             Tue 26 Apr 2022 06:04:41 +0000
ROA not before:           Tue 26 Apr 2022 06:04:41 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     136557
IP address blocks:        103.108.228.0/23 maxlen: 23
                          103.108.228.0/24 maxlen: 24
                          103.108.229.0/24 maxlen: 24
                          103.108.231.0/24 maxlen: 24
                          2402:7340:1::/48 maxlen: 48
                          2402:7340:2::/48 maxlen: 48
                          2402:7340:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4395 (0x112b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Apr 26 06:04:41 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62678b79-c5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:92:f9:92:aa:a0:e1:1a:23:b2:c1:41:ee:
                    6c:c8:f6:3a:ea:e0:3f:82:84:9d:52:4b:df:26:f8:
                    d3:c6:bb:49:7a:77:af:b1:55:1b:5e:95:bb:dd:97:
                    6a:05:17:b9:ec:67:ed:65:80:94:de:85:2e:96:a6:
                    b2:ad:47:cf:61:24:56:16:32:2f:5f:da:e2:01:da:
                    4d:f3:da:35:48:71:f8:60:19:d3:83:98:10:91:23:
                    cb:27:52:7a:5e:bf:7e:00:8b:5a:f0:77:d2:7a:dd:
                    69:d1:cc:c7:47:b0:56:fd:48:3f:0a:e7:8b:ff:20:
                    aa:53:81:bc:a1:cb:b3:3b:ab:9c:14:0a:df:fb:cb:
                    52:b3:53:fb:31:b1:e4:4c:f3:46:a2:ab:03:ed:71:
                    c6:50:a2:dc:99:15:7e:9b:e7:f3:6b:a5:c3:c4:af:
                    e0:78:e5:1f:03:9a:03:cf:ac:ac:b1:27:40:cc:22:
                    29:61:04:bf:fd:b1:ec:b9:d2:8c:88:04:7c:5f:34:
                    9e:14:e8:b5:66:42:b4:20:50:2f:4c:e7:59:b9:cc:
                    74:87:e9:24:1d:6f:7b:82:81:22:c9:c8:a4:9f:d1:
                    43:f0:90:90:99:0f:74:fe:53:b9:38:a3:bb:e1:5d:
                    9c:45:43:2c:96:85:db:84:c7:31:df:49:41:5a:6e:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C2:1D:06:F8:5D:88:24:3A:A8:12:C9:01:74:4B:E9:E1:CA:5D:48
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/B82F77DE71E811E8ACB86768C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.228.0/23
                  103.108.231.0/24
                IPv6:
                  2402:7340:1::-2402:7340:3:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         49:15:38:fb:23:63:62:33:75:48:1e:90:db:07:6e:4b:d4:92:
         c9:c8:b0:27:94:9f:a6:2c:50:44:ef:2c:3e:d0:fb:05:3d:b5:
         f7:bb:02:76:ba:ff:ae:be:0b:00:02:ec:64:ae:b0:0d:0d:30:
         6b:6b:96:c2:a8:2c:cd:b3:c1:db:34:df:58:72:47:77:96:4b:
         0a:7b:65:91:0e:eb:50:48:91:01:b1:38:5f:f1:34:bc:12:18:
         75:04:aa:71:b0:fc:df:18:f8:89:cb:fd:72:87:48:7c:28:a6:
         75:de:f1:43:2c:ba:15:7b:d8:ca:b6:f0:28:29:a9:96:ca:4d:
         7a:e8:58:d6:85:1f:a6:14:1f:79:38:72:5c:5b:95:a2:ab:04:
         84:10:1b:75:a9:f1:fb:95:0e:b9:44:71:74:3f:ae:23:6c:a7:
         71:b8:41:39:97:de:12:cf:2c:f7:3a:f7:e9:70:1c:42:d3:70:
         80:bf:11:97:7b:d3:fa:52:a8:4c:2a:56:b0:9d:91:a0:04:0c:
         7d:52:53:5f:aa:ab:37:95:25:a3:3a:9d:af:d2:bf:d8:24:94:
         77:7d:7b:1f:33:08:02:75:51:1a:98:26:d8:56:8d:6a:08:25:
         61:d0:31:c1:b4:1f:3f:b0:bb:80:de:b1:5d:7e:15:22:18:94:
         ce:50:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----