Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/B40ABE3659BE11EC973EC644C4F9AE02.roa
File:                     B40ABE3659BE11EC973EC644C4F9AE02.roa (raw, json)
Hash identifier:          uIVE1qdlxfu0oimDyAzYe3V7+OWmwLXjHORAY1a/qLo=
Subject key identifier:   F2:22:4C:E2:61:C9:91:53:B8:2D:8E:72:D1:16:98:6A:CE:3B:43:11
Certificate issuer:       /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial:       04B7
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/B40ABE3659BE11EC973EC644C4F9AE02.roa
Signing time:             Sat 03 Jun 2023 02:39:35 +0000
ROA not before:           Sat 03 Jun 2023 02:39:35 +0000
ROA not after:            Sun 01 Oct 2023 00:00:00 +0000
asID:                     141677
IP address blocks:        103.165.84.0/24 maxlen: 24
                          103.165.85.0/24 maxlen: 24
                          2407:47c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
        Validity
            Not Before: Jun  3 02:39:35 2023 GMT
            Not After : Oct  1 00:00:00 2023 GMT
        Subject: CN=647aa7e5-9c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:c7:c5:6c:40:4d:86:fe:39:a1:4b:8d:9a:
                    40:40:ea:ab:8f:d2:ff:a7:f2:35:78:a4:a4:59:c0:
                    fa:e7:49:24:8d:6d:0a:39:53:f0:1b:81:63:5c:fd:
                    31:27:f2:6a:5b:ba:18:4b:54:1e:5f:d0:25:46:c0:
                    f5:82:c6:e0:4b:dc:e9:c5:b0:5b:19:c4:72:da:80:
                    62:ec:38:8d:7d:d1:36:91:ab:5d:50:4b:7c:71:98:
                    93:97:af:81:cd:3c:2d:6c:d4:c9:9e:08:64:20:c9:
                    62:f5:8f:f7:ca:67:86:94:7a:77:04:17:6a:cf:cd:
                    33:0f:ef:4a:b1:ce:2e:f9:63:4f:1f:43:6a:f2:a0:
                    93:c2:f3:9b:f2:89:2f:2b:2e:d1:0e:ce:fb:ce:af:
                    a2:61:39:4a:75:50:97:e3:88:0f:e9:ad:6e:39:8f:
                    7a:be:ee:d3:9d:7c:23:10:73:1b:72:88:16:0a:b9:
                    b1:30:6f:d1:74:bd:e7:0f:54:7e:4e:8f:d3:bc:1d:
                    95:62:e5:5f:79:d7:5d:af:2f:01:ff:57:ed:03:9a:
                    b3:a4:24:a6:53:87:d3:16:3b:f0:23:50:08:2b:e7:
                    38:39:47:7a:4d:60:99:a9:34:13:d3:ef:72:a3:24:
                    99:5a:4e:f3:9c:6c:a8:13:b8:88:20:91:f7:53:a4:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:22:4C:E2:61:C9:91:53:B8:2D:8E:72:D1:16:98:6A:CE:3B:43:11
            X509v3 Authority Key Identifier:
                keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/B40ABE3659BE11EC973EC644C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.84.0/23
                IPv6:
                  2407:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:c6:7d:8f:cd:0c:df:69:59:d4:c1:82:5d:9d:20:7f:b9:
         80:64:f9:98:1d:df:79:93:9f:06:87:84:32:1c:db:f0:1c:2d:
         db:73:94:7f:08:85:96:73:d1:0d:89:f0:1e:bc:10:f0:7a:2e:
         1f:21:bf:69:3c:09:5b:48:2d:25:ec:7b:34:25:06:23:08:5a:
         f5:ab:f1:f8:5f:c5:42:9a:bb:2f:64:a7:b1:f6:eb:0f:04:69:
         68:c2:30:0b:b8:db:cf:8f:d4:e7:b9:5a:ba:34:9b:af:53:d7:
         fb:8d:6a:16:fe:f5:ec:d7:f0:76:41:12:2d:2e:0e:ea:1b:2c:
         1b:e8:04:5a:16:73:3c:56:00:90:e2:d8:93:81:21:93:cd:dc:
         52:32:ec:05:9c:e9:44:50:95:81:38:57:f0:75:2f:cf:db:c8:
         f9:3d:d7:a4:ce:f6:00:f2:2a:ad:2e:65:a0:2c:62:ab:ee:43:
         2a:ad:1d:9f:2c:31:ad:eb:a3:c8:36:7a:76:ef:e6:25:92:7b:
         de:e7:1c:b1:2a:70:f2:de:15:28:ea:d7:56:9a:79:5c:47:09:
         ba:2b:11:36:1b:e7:3f:10:ca:34:99:5b:ca:76:20:ef:cf:14:
         73:3e:e0:32:11:08:be:90:9e:65:91:77:58:ca:d5:d2:86:1c:
         93:f1:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----