Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/6C661B10608F11ED8E609A6EC4F9AE02.roa
File:                     6C661B10608F11ED8E609A6EC4F9AE02.roa (raw, json)
Hash identifier:          tODPZUQK/1oUB/OitSEeZutwnIRY35CiYP8UT2oNsVk=
Subject key identifier:   3F:D8:32:DC:0B:0D:7A:8D:42:9F:74:46:23:C6:40:83:F5:D1:7C:70
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       0C
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/6C661B10608F11ED8E609A6EC4F9AE02.roa
Signing time:             Mon 21 Nov 2022 22:54:25 +0000
ROA not before:           Mon 21 Nov 2022 22:54:25 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     147012
IP address blocks:        103.172.232.0/23 maxlen: 23
                          103.172.232.0/24 maxlen: 24
                          103.172.233.0/24 maxlen: 24
                          2407:dac0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Nov 21 22:54:25 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=637c01a1-12ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:b7:b5:ae:6b:de:5e:ce:df:b7:6b:1b:4f:
                    5e:77:7a:84:c5:3b:02:bc:55:97:95:cc:6e:d8:c5:
                    30:1c:c9:59:4d:2d:95:bd:02:64:00:cb:c6:19:4b:
                    58:88:a7:6e:b9:97:a5:63:f4:81:30:38:ed:a6:1a:
                    90:e3:1b:05:57:dd:35:7c:49:b2:38:f2:1f:7d:06:
                    36:2f:30:18:59:f1:5f:c1:6c:65:ac:81:69:ea:fc:
                    25:e4:53:af:ea:87:71:1f:7d:2c:2d:1c:4d:3b:da:
                    6d:13:3e:0c:b3:cb:d3:55:d0:0a:7c:f3:57:b1:89:
                    7d:1b:d2:a2:b4:4f:22:66:4d:56:68:52:db:a3:49:
                    7f:fc:d2:c8:6b:89:99:9f:8b:2c:68:e0:eb:a9:e1:
                    67:66:15:63:42:3f:27:66:99:93:2c:6d:e8:c8:d6:
                    75:9f:f3:49:ea:d9:a5:2c:81:44:ae:3a:05:24:5e:
                    0f:5e:43:93:81:9c:e7:0b:6d:f3:29:f5:d9:a8:45:
                    57:34:ae:fa:ef:70:e3:74:46:e3:59:6f:e8:a3:f9:
                    8f:be:f0:6f:43:95:04:be:f4:83:34:71:c0:ab:a2:
                    85:a2:04:c6:d7:de:91:57:34:8e:ff:a8:49:60:cb:
                    ea:2a:a3:0d:5c:98:92:4c:07:1d:40:e3:a6:b6:85:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D8:32:DC:0B:0D:7A:8D:42:9F:74:46:23:C6:40:83:F5:D1:7C:70
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/6C661B10608F11ED8E609A6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.232.0/23
                IPv6:
                  2407:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:ad:0d:8b:56:15:b2:41:da:1d:82:82:f2:08:4a:a5:65:
         a8:9f:ae:59:cb:3d:2e:7b:17:a3:7b:30:12:cc:7a:c0:4f:5e:
         7a:b9:9b:2d:f5:29:04:db:d2:ef:5f:10:df:bf:a8:98:29:2e:
         8e:1a:07:19:4b:f2:47:3d:12:1e:80:c1:82:2c:f7:5d:b2:19:
         3b:78:8f:c6:72:fe:ef:d4:66:2f:70:30:19:3e:d4:28:5d:84:
         4d:b2:87:46:c0:bf:14:9a:07:d5:4f:40:d8:21:76:12:fc:0e:
         9e:ba:e6:36:00:88:ab:8f:17:70:62:92:d5:2a:6c:fb:64:66:
         a7:aa:35:d2:6c:68:6b:c7:1d:53:23:52:02:47:4b:bf:49:73:
         00:8b:c0:60:e7:a5:9b:6c:be:21:1e:6a:ee:e9:13:c9:a2:85:
         4b:1e:0a:be:a9:21:06:14:86:73:50:e0:a6:07:52:3a:3e:e5:
         d0:38:ef:da:4d:21:bc:1b:43:b2:71:ff:5e:12:18:a9:d5:fa:
         f0:73:f5:ed:5e:cb:84:b6:16:de:78:ef:86:ee:f1:42:f3:93:
         d3:4d:f6:27:de:eb:2e:cf:bb:4f:39:77:71:41:cd:97:6a:5c:
         0e:46:9c:ef:7d:d9:65:f6:80:5d:44:fc:57:45:23:d6:7a:f2:
         7e:52:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----