Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/925DB0920F6D11EA8840135DC4F9AE02.roa
File:                     925DB0920F6D11EA8840135DC4F9AE02.roa (raw, json)
Hash identifier:          PykvjdKpn7Robs0AMP1J36Fxjk9oyb8vmFzyboGTkAA=
Subject key identifier:   96:EE:49:25:C6:9A:C7:58:DF:DF:6F:FB:50:6F:76:E9:87:0F:E3:91
Certificate issuer:       /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial:       0752
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/925DB0920F6D11EA8840135DC4F9AE02.roa
Signing time:             Wed 13 Oct 2021 08:55:58 +0000
ROA not before:           Wed 13 Oct 2021 08:55:58 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     134383
IP address blocks:        103.121.140.0/22 maxlen: 24
                          2001:df6:4300::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
        Validity
            Not Before: Oct 13 08:55:58 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=61669f1d-7a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:ae:63:60:80:63:ff:6c:fb:1d:3f:24:31:
                    de:87:41:94:4a:57:b3:37:06:81:32:9c:62:e3:8e:
                    86:7c:96:04:6a:20:0a:f1:84:36:6c:24:04:aa:a1:
                    c5:38:53:9e:55:f4:5c:5d:51:e6:ba:aa:f5:08:b2:
                    15:44:f0:1d:23:b2:5a:f7:5f:2d:ec:1c:14:6d:8c:
                    f9:4c:16:60:cb:e6:cb:c4:21:ab:26:d2:04:22:fb:
                    ed:06:df:8f:10:85:d8:90:04:bf:18:95:a4:9e:09:
                    13:e3:32:9b:61:de:f3:3a:19:d0:49:3d:36:34:c8:
                    b5:0f:7d:ec:ea:a5:c0:ab:2c:f1:a9:7b:71:d2:52:
                    15:ad:13:ba:37:e5:39:f3:41:5c:aa:95:39:d2:f3:
                    48:85:c3:1b:74:59:9b:ca:90:24:dc:dd:51:22:40:
                    56:2d:48:0c:80:c2:8c:80:c9:8a:ed:07:51:b8:6d:
                    52:d8:c3:3d:cc:7b:69:7c:32:a2:50:44:43:05:e9:
                    12:7f:13:49:29:f9:0b:d0:77:fc:25:6c:1d:e3:2f:
                    0a:81:05:2c:2a:8c:f7:51:31:5b:ac:c2:83:28:52:
                    78:06:07:14:d7:79:4f:ba:21:cf:34:3a:ea:c0:39:
                    03:e0:67:05:87:d7:5f:8f:73:1b:d3:e0:1f:0f:8d:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:49:25:C6:9A:C7:58:DF:DF:6F:FB:50:6F:76:E9:87:0F:E3:91
            X509v3 Authority Key Identifier:
                keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/925DB0920F6D11EA8840135DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.140.0/22
                IPv6:
                  2001:df6:4300::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:43:88:f9:ac:59:42:c3:e9:45:12:49:3b:da:1c:e7:b9:
         25:09:f7:8f:49:ee:72:24:19:d3:76:12:f2:41:62:53:3c:43:
         f0:cc:e9:57:07:77:f1:bd:c6:59:0a:5c:6f:e9:6b:b7:18:0d:
         5a:d0:40:bf:68:91:03:65:66:2c:24:1e:1c:07:7f:4b:08:5a:
         aa:c6:d8:e4:aa:56:2d:53:16:c3:11:97:bc:60:00:0a:5f:d5:
         49:20:d8:af:f8:4b:0f:27:a7:9c:7e:e6:e2:dc:2a:95:fb:d1:
         a4:d9:33:90:21:18:42:1d:24:45:4f:83:c5:69:67:27:35:cb:
         6a:9c:3e:76:fa:94:db:8f:59:19:96:2e:22:f1:64:25:3e:db:
         ed:4b:85:f5:69:b1:e0:c5:9a:10:6e:7a:b2:64:a5:39:64:51:
         ba:cf:4d:9d:ff:aa:c1:6f:ca:80:04:94:95:96:3d:64:8d:78:
         57:aa:eb:24:74:35:ad:19:a2:19:c9:9f:55:98:9f:13:c8:99:
         ec:56:cd:c2:4d:f9:04:cc:4a:24:0f:c8:98:36:43:0e:37:40:
         ab:6b:68:93:73:c5:a9:17:da:55:11:92:ba:72:1d:be:11:8e:
         f1:02:ea:e3:2c:84:3f:93:13:e4:77:8f:74:39:63:29:2d:f9:
         a2:7f:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----