Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
File:                     C6AD9C5A53DF11EC87359D24C4F9AE02.roa (raw, json)
Hash identifier:          brVhur4sFwK8KOObkl47Su9RWTh10VJbft/2GG4bLHw=
Subject key identifier:   0A:14:E2:4B:9D:E9:06:AE:D9:24:B9:10:1E:1B:BB:D1:D4:6F:96:FF
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       C0
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
Signing time:             Fri 03 Dec 2021 02:21:52 +0000
ROA not before:           Fri 03 Dec 2021 02:21:52 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     30058
IP address blocks:        103.172.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Dec  3 02:21:52 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=61a97f40-c711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:11:8a:07:3e:a8:cf:1d:08:18:4c:35:11:
                    74:cf:0a:02:7b:bd:cb:7d:58:bc:fb:fb:e4:1f:ab:
                    81:33:97:60:4f:f2:15:b2:85:ee:d9:a3:78:56:04:
                    69:13:f4:7e:8c:d7:ec:26:9f:7d:c7:8b:c4:1f:b9:
                    02:a1:19:09:03:86:13:9f:ce:12:13:62:b9:9c:fb:
                    77:4a:b3:ce:4f:bc:41:d8:d7:32:10:ce:73:e7:ff:
                    35:b2:5a:a2:b1:5d:e5:88:d9:51:85:3c:f1:dd:f3:
                    42:83:2f:07:3a:1a:1b:9b:49:67:ab:6d:67:35:8a:
                    81:bb:d2:c8:35:45:68:d0:9b:c6:7c:81:60:eb:c3:
                    66:35:7c:e7:5d:f7:11:b5:87:0e:f7:59:82:ab:90:
                    a8:87:ce:1d:3e:ce:af:6a:4b:cb:49:5d:be:14:51:
                    ee:0e:ff:63:c5:f0:7c:ad:2e:15:32:e6:b2:ac:ab:
                    9c:f6:b7:79:cf:a0:f4:3e:6c:f4:81:ad:9c:ce:ca:
                    0b:bd:93:aa:12:2e:7a:55:7b:a8:e7:aa:fa:51:ef:
                    05:05:60:d0:ec:d4:d8:00:e5:92:a3:7a:25:b4:55:
                    6a:66:9c:19:57:f8:42:67:85:bf:c0:37:61:fb:0d:
                    fd:55:8d:70:9e:6d:35:3f:1f:8a:87:29:a6:0e:ca:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:E2:4B:9D:E9:06:AE:D9:24:B9:10:1E:1B:BB:D1:D4:6F:96:FF
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C6AD9C5A53DF11EC87359D24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:46:08:0c:95:a1:29:e4:c7:a0:28:2d:3c:86:52:bf:17:0a:
         ba:89:e1:bb:33:83:6a:db:69:cf:94:67:26:86:0f:b3:76:71:
         1c:52:ea:4e:0f:8d:e2:bf:4d:54:21:4c:ea:70:65:f3:29:8f:
         10:2a:49:d2:f7:9d:1a:a3:93:5e:bb:16:20:50:17:ba:d4:d1:
         d2:5c:10:9a:9a:d7:96:d4:78:04:b2:1f:94:bc:38:0a:53:0e:
         c7:ba:1c:2b:da:62:c9:24:93:ca:03:14:ee:67:54:19:70:82:
         c3:fc:e7:54:a7:52:37:42:9b:5c:aa:c8:11:f6:80:dc:d1:b1:
         33:0e:e2:6b:09:a7:5e:1e:b7:4c:ba:da:62:64:7a:43:a5:a4:
         a6:f2:d9:8d:80:8a:89:bf:00:b6:d0:ea:60:98:ed:13:83:4c:
         56:53:d3:57:a1:ea:b1:72:72:05:ca:0d:12:7f:3a:03:69:bd:
         d4:5e:71:fa:cd:1c:11:98:b5:b2:51:29:63:e2:5d:94:35:7c:
         59:32:e8:e9:ee:2a:0a:19:bf:dd:d5:2d:f1:05:cc:7c:ba:e1:
         8e:03:81:05:6d:aa:05:4d:c6:c9:d8:8a:9d:3a:3a:e0:cb:c1:
         99:4f:7c:3e:0f:7c:bc:dc:75:0c:52:4f:fd:56:c8:09:1d:65:
         fe:13:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----