Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
File:                     4B929D4EF90911EB936B6086C4F9AE02.roa (raw, json)
Hash identifier:          9jLyT3I2nez7M2KwO38IS8+H7YG5hwiG0iu5cRtJJwg=
Subject key identifier:   7C:57:11:2C:F5:3A:49:2C:3D:5A:0B:E0:9F:5D:B0:72:B9:99:C8:C5
Certificate issuer:       /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial:       014D
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
Signing time:             Mon 09 Aug 2021 11:59:48 +0000
ROA not before:           Mon 09 Aug 2021 11:59:48 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3786
IP address blocks:        103.151.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
        Validity
            Not Before: Aug  9 11:59:48 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=611118b4-c6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:a8:9e:64:b1:97:b1:b0:2f:61:26:1a:74:
                    0e:9d:ec:46:6e:c9:12:b6:5d:12:57:7f:17:71:d9:
                    ae:ac:1d:4b:58:e0:8d:94:91:8c:c0:c7:e9:32:5e:
                    1b:f6:77:bd:b7:1c:9c:4f:19:e4:1b:9c:4c:32:d2:
                    a0:2d:09:1c:ae:1e:2b:48:e2:3c:38:ac:2b:37:fa:
                    a7:39:6d:1d:e0:b4:55:ba:6c:a1:61:05:1a:e1:1d:
                    2b:f3:b7:9e:0a:0a:69:9a:9f:c0:2d:30:78:76:cd:
                    98:f7:ec:46:af:61:bf:89:81:5e:27:2c:59:de:a4:
                    f4:c5:d9:06:21:2e:c3:fa:95:a3:8c:c8:d0:6d:0a:
                    d1:ff:09:63:d6:14:36:89:53:d0:f2:13:e3:32:55:
                    23:b3:00:4f:97:af:fc:d1:45:87:17:1c:08:7e:57:
                    24:ec:db:cc:29:d1:25:67:f9:8f:83:ac:df:e1:1e:
                    b8:f3:1a:40:63:76:c7:62:09:c1:27:5d:ff:6b:1d:
                    e5:9d:3f:5c:db:cc:5b:6f:19:1f:b3:d2:73:0b:2e:
                    8d:7b:69:7f:9d:bc:10:23:46:d4:63:a3:fe:76:db:
                    b9:e5:be:cb:2d:3f:20:06:d5:37:50:d1:31:d9:65:
                    16:6d:bb:4b:67:db:22:ac:e1:b9:9f:68:1e:9f:ca:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:11:2C:F5:3A:49:2C:3D:5A:0B:E0:9F:5D:B0:72:B9:99:C8:C5
            X509v3 Authority Key Identifier:
                keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:37:b6:72:9a:5e:5e:1d:70:8d:51:1e:1e:46:b3:3a:34:b4:
         dd:95:11:18:46:30:d3:9f:81:bb:da:a9:af:de:85:87:b5:79:
         00:13:a3:c6:f2:b6:79:71:1e:02:29:b9:3d:ea:28:ca:3f:67:
         e5:8b:94:d2:f1:fe:af:ea:bc:dd:d4:b2:d2:b6:44:e2:d6:0b:
         02:26:4d:cd:f6:c7:78:23:60:4f:94:30:0e:5f:39:82:e6:2e:
         4c:4b:62:b6:d8:94:c4:37:d0:33:cb:e6:26:e2:05:fe:c2:21:
         c9:8b:b0:7a:8e:56:b4:b3:64:ce:18:75:f9:0a:f3:42:70:c4:
         f9:8c:4a:51:6d:36:91:8c:18:f2:e4:f3:5f:8b:67:d4:0e:a9:
         10:ee:0c:fa:5d:cc:7c:44:49:e4:72:70:10:95:37:ed:14:10:
         40:09:d7:ec:98:82:a5:ea:16:1d:5f:fd:6c:00:dd:ba:ac:37:
         6c:a9:38:e2:f0:fe:2a:4e:cd:86:11:11:f5:e5:c1:72:13:f5:
         6c:d0:8d:66:0c:89:e0:ac:b4:ae:bc:59:a4:12:c6:72:22:49:
         63:5b:f2:c2:cd:8a:bf:b0:5d:2c:d0:41:90:76:66:56:2d:ba:
         77:e0:38:35:3b:31:99:3a:bd:5b:d3:90:89:6f:3a:f0:aa:44:
         0e:60:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----