Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/78C2F836811411EABAD68C17C4F9AE02.roa
File:                     78C2F836811411EABAD68C17C4F9AE02.roa (raw, json)
Hash identifier:          m30DlJghORObCT0ZS+6E8s6kcVViu0maJADPOZMrDdU=
Subject key identifier:   FC:6D:14:6E:09:10:F7:3C:0A:D4:D5:C7:4D:F3:96:B3:93:38:38:7C
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       13F2
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/78C2F836811411EABAD68C17C4F9AE02.roa
Signing time:             Fri 18 Feb 2022 06:25:01 +0000
ROA not before:           Fri 18 Feb 2022 06:25:01 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     9398
IP address blocks:        180.148.64.0/19 maxlen: 19
                          2404:b000::/32 maxlen: 32
                          2404:b000:3000::/36 maxlen: 36
                          2404:b000:4000::/36 maxlen: 36
                          2404:b000:5000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5106 (0x13f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 18 06:25:01 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=620f3bbd-eaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:56:9c:99:73:6d:87:49:84:ad:0d:79:64:
                    b8:cc:ce:1e:fa:77:62:5d:26:25:c5:87:ea:b3:97:
                    86:dd:d9:ac:ba:9f:1e:03:23:13:76:5e:94:58:61:
                    98:11:dc:bb:59:9f:e8:04:16:2c:4d:df:45:e5:1c:
                    a5:20:ed:dc:b7:31:5d:b4:67:73:2b:ac:89:81:f6:
                    4a:ec:ad:eb:ca:f5:56:81:fe:1f:1e:b2:b5:41:31:
                    b2:61:c3:08:75:7a:2f:7a:4e:a3:92:1c:dd:af:4e:
                    40:ec:04:e2:0e:4d:5d:ed:e3:fe:d8:11:9b:f9:72:
                    3b:17:2e:e5:17:6b:1c:25:70:fb:0f:3b:b8:ba:e8:
                    b0:d5:ee:69:6b:30:87:7f:0e:45:92:24:f6:00:44:
                    8a:62:e4:d2:2e:d7:8a:28:3c:f6:3b:03:22:30:c5:
                    47:9d:a3:e9:70:ce:77:a4:eb:a6:a8:e1:43:1b:56:
                    0a:f3:6e:62:af:4e:4e:6f:45:13:87:61:41:52:d1:
                    92:0e:3b:c7:31:ec:91:77:03:50:8d:4d:3f:bf:92:
                    eb:3b:d0:06:5d:af:fc:9f:c2:db:9c:9f:83:ed:be:
                    e3:e9:a1:4e:e5:60:c3:d0:2d:e6:d5:b2:6c:22:df:
                    0b:ac:19:6b:49:47:ba:97:39:d6:8e:94:58:59:50:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:14:6E:09:10:F7:3C:0A:D4:D5:C7:4D:F3:96:B3:93:38:38:7C
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/78C2F836811411EABAD68C17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.64.0/19
                IPv6:
                  2404:b000::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:33:98:62:8b:80:40:80:7a:cb:ca:55:fb:c2:92:ed:15:
         d3:69:53:16:8f:c5:8e:0b:18:f2:68:48:ef:b3:a0:8b:7b:5b:
         1e:86:58:ee:f5:76:02:34:77:9f:7d:c5:2d:2f:98:bb:37:b9:
         7b:d4:76:10:98:2f:69:c4:e0:5d:22:72:9a:4d:3d:64:4c:58:
         b2:8a:56:cc:8b:d7:05:75:ec:92:df:b9:75:19:57:9d:57:3f:
         c1:83:45:eb:59:c2:ba:8e:4c:e2:7f:6a:49:ee:68:8b:ee:c1:
         8d:9e:fc:ed:73:a8:af:95:85:f5:33:1d:64:d8:21:df:e4:c1:
         be:1a:c4:28:d0:2a:7b:c9:3a:15:17:d5:e0:db:a5:98:22:c1:
         d3:5d:68:18:cd:89:af:5b:81:76:6f:0c:ab:25:6a:e1:4f:a9:
         ef:0f:ad:71:bb:60:eb:c7:c2:24:d5:7e:2a:d9:6b:2a:01:cc:
         2e:d3:07:bb:81:dc:e1:cb:1a:95:2c:03:bd:80:b2:18:7d:76:
         7f:fe:76:91:c2:47:71:ee:22:7d:c6:1e:6c:40:2a:50:b5:1d:
         85:b3:83:90:e9:d4:7a:db:5a:21:d7:b8:c4:64:5f:fe:f4:be:
         54:0b:f3:db:9c:f9:ce:8c:bf:ae:94:10:10:ae:c4:c2:fc:4b:
         56:cf:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----