Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
File:                     CD8CEE3A489F11EDAA17361BC4F9AE02.roa (raw, json)
Hash identifier:          X5Icsl2uaB/zDdXhVlgZWgbwHSkRUXOvcXSWkJsjf2E=
Subject key identifier:   6E:06:64:8A:FF:DE:41:84:96:EF:BF:15:55:C2:C4:7B:8C:CB:82:BE
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       043C
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
Signing time:             Mon 10 Oct 2022 13:31:11 +0000
ROA not before:           Mon 10 Oct 2022 13:31:11 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     45250
IP address blocks:        103.146.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Oct 10 13:31:11 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=63441e9e-8fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:cd:7f:37:16:0d:19:50:dd:09:47:a1:d7:
                    aa:52:04:fe:dc:eb:4b:0e:fc:7e:b8:0e:f8:a5:ee:
                    c8:18:5a:a7:8d:67:53:46:94:8a:f9:12:d7:a2:18:
                    e1:0d:f6:7b:bc:66:aa:27:48:09:de:27:a4:b9:3e:
                    e1:01:1a:88:8a:59:8b:68:cd:03:62:43:78:34:3c:
                    1e:82:87:01:5a:02:14:99:0c:19:a3:db:87:82:f6:
                    cd:77:e0:31:1b:b0:5b:34:85:f1:b3:0f:38:0a:96:
                    47:32:ee:4a:d6:f8:fc:64:e3:20:23:3c:66:8d:65:
                    fc:49:66:05:5a:22:b8:c2:45:10:06:e1:0a:60:db:
                    5c:67:41:b6:fc:5e:f3:d3:9d:d5:26:94:53:19:dc:
                    6e:d4:87:62:a7:81:17:c8:a1:51:2f:84:44:85:60:
                    68:2e:d3:8e:c3:5c:e0:b9:4a:a7:ba:e5:10:01:ab:
                    b6:c6:5e:12:b6:81:cf:c6:4e:77:6e:17:47:37:0e:
                    7e:3a:5b:56:f1:92:4d:51:15:4e:65:b1:ab:29:12:
                    bb:19:6e:5b:56:d0:e9:34:a0:8c:05:61:69:88:d7:
                    bd:e9:28:1b:c3:84:b8:54:87:9f:84:fb:bb:e3:e7:
                    98:97:a0:7a:07:dc:cf:db:30:c1:7b:d9:8e:36:5d:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:64:8A:FF:DE:41:84:96:EF:BF:15:55:C2:C4:7B:8C:CB:82:BE
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/CD8CEE3A489F11EDAA17361BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:61:24:78:21:89:55:6a:f4:1e:f1:90:7e:41:ca:a9:a3:
         aa:04:2f:d9:2b:fd:c3:75:91:85:55:a0:9e:1e:c6:e0:28:fe:
         7e:fb:79:a9:86:a3:24:f0:4a:d9:d9:3c:c1:71:63:ef:7b:b6:
         ce:62:04:69:75:03:60:b4:15:a5:89:c0:9c:39:f6:e6:92:18:
         ef:ff:4a:d4:18:1e:ef:c4:f3:61:e3:60:99:46:ea:32:4f:e8:
         c1:eb:dc:46:e2:3c:76:c7:94:4f:0d:83:d1:f9:e5:90:86:7a:
         94:c0:d1:31:b5:9f:a9:ec:6f:1d:be:e4:30:64:88:e8:7e:f2:
         d4:76:57:76:42:6a:3d:eb:72:33:40:fd:e4:ac:ae:ba:01:7d:
         3c:ac:00:e1:c1:09:fc:45:45:29:92:2a:c8:06:f3:75:b0:de:
         6a:fc:94:36:64:7c:5a:66:76:6d:ab:26:3b:f8:4f:f2:8f:9c:
         7a:0e:bd:67:91:eb:f9:e2:0f:52:28:87:e5:6c:28:d2:d1:24:
         41:66:3f:58:bc:f6:c9:82:25:4b:5b:19:95:92:f5:f1:19:6a:
         34:53:84:30:45:88:96:2f:0b:2f:70:27:bb:cf:64:11:35:21:
         64:ba:e1:83:c2:57:e6:78:e5:cd:14:48:20:98:8a:50:48:24:
         18:b7:7d:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjIxMDEwMTMzMTExWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ0MWU5ZS04ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxXNfzcWDRlQ3QlHodeqUgT+3OtLDvx+uA74pe7IGFqnjWdTRpSK+RLXohjh
DfZ7vGaqJ0gJ3iekuT7hARqIilmLaM0DYkN4NDwegocBWgIUmQwZo9uHgvbNd+Ax
G7BbNIXxsw84CpZHMu5K1vj8ZOMgIzxmjWX8SWYFWiK4wkUQBuEKYNtcZ0G2/F7z
053VJpRTGdxu1Idip4EXyKFRL4REhWBoLtOOw1zguUqnuuUQAau2xl4StoHPxk53
bhdHNw5+OltW8ZJNURVOZbGrKRK7GW5bVtDpNKCMBWFpiNe96Sgbw4S4VIefhPu7
4+eYl6B6B9zP2zDBe9mONl0xJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG4GZIr/
3kGElu+/FVXCxHuMy4K+MB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDJBMUQvNDU0QkNEQTQ5RTk0MTFFQkJDODBERjIwQzRGOUFFMDIvQ0Q4Q0VFM0E0
ODlGMTFFREFBMTczNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkk4wDQYJKoZIhvcNAQELBQADggEBABJ8YSR4IYlVavQe
8ZB+Qcqpo6oEL9kr/cN1kYVVoJ4exuAo/n77eamGoyTwStnZPMFxY+97ts5iBGl1
A2C0FaWJwJw59uaSGO//StQYHu/E82HjYJlG6jJP6MHr3EbiPHbHlE8Ng9H55ZCG
epTA0TG1n6nsbx2+5DBkiOh+8tR2V3ZCaj3rcjNA/eSsrroBfTysAOHBCfxFRSmS
KsgG83Ww3mr8lDZkfFpmdm2rJjv4T/KPnHoOvWeR6/niD1Ioh+VsKNLRJEFmP1i8
9smCJUtbGZWS9fEZajRThDBFiJYvCy9wJ7vPZBE1IWS64YPCV+Z45c0USCCYilBI
JBi3fY0=
-----END CERTIFICATE-----