Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/3F935C9A12A511EB93D31069C4F9AE02.roa
File:                     3F935C9A12A511EB93D31069C4F9AE02.roa (raw, json)
Hash identifier:          PTS9FcIBCNi6NNeNXmqFxt6vZdisnRsakCyf3ka/2/A=
Subject key identifier:   44:84:5B:12:49:3E:03:14:C2:29:64:CF:FA:CD:6E:E1:3E:05:98:BD
Certificate issuer:       /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial:       08CF
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/3F935C9A12A511EB93D31069C4F9AE02.roa
Signing time:             Wed 30 Mar 2022 20:26:27 +0000
ROA not before:           Wed 30 Mar 2022 20:26:27 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     138346
IP address blocks:        103.134.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Validity
            Not Before: Mar 30 20:26:27 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=6244bcf2-84ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:e5:fe:58:03:bf:a5:0c:44:ce:c0:63:a4:
                    fa:7a:ca:6d:23:b5:46:0e:6e:ae:13:d1:8c:97:19:
                    a5:3d:7a:1e:d9:e8:cf:8d:ec:bb:c5:c7:ea:ab:2e:
                    95:f5:ef:e9:15:a0:ab:b1:90:0a:d9:b7:ab:16:09:
                    f6:ca:ef:be:61:f5:9b:a3:53:2e:9c:27:5b:f9:61:
                    b9:c3:cb:22:5c:dc:17:69:12:85:fd:6b:48:00:c7:
                    4e:02:4f:ce:d9:2b:58:a1:77:9e:1f:16:59:74:d2:
                    0b:cd:2c:26:9b:50:2e:94:e8:d8:c1:b5:5a:84:89:
                    23:0f:1f:aa:85:93:9c:01:a9:03:b8:0c:8b:c9:1a:
                    d8:db:d4:61:9e:04:03:66:6a:3f:b5:59:fc:0a:89:
                    40:bb:cd:27:3d:b0:b9:2f:4c:bf:07:4c:59:48:7b:
                    ec:dc:3a:e3:43:be:c9:dc:f2:86:1b:0c:e1:a4:a7:
                    3e:69:ea:8c:87:d2:7d:3e:cd:d2:af:65:e4:7c:74:
                    12:3c:3c:c0:3f:e9:ec:51:f7:dd:32:71:38:f7:ec:
                    a1:30:36:c8:43:6b:37:fc:d7:3e:dc:6e:72:c6:2a:
                    8e:a9:38:72:c6:eb:79:7f:9a:d0:a6:0a:cd:c0:4f:
                    f6:70:f5:31:57:df:00:68:6a:60:e0:89:b5:1c:38:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:5B:12:49:3E:03:14:C2:29:64:CF:FA:CD:6E:E1:3E:05:98:BD
            X509v3 Authority Key Identifier:
                keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/3F935C9A12A511EB93D31069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:54:11:4b:6e:5c:4f:ea:4c:cc:1d:11:ad:bb:95:7a:b1:
         ea:e1:03:88:5d:5b:c8:98:c2:36:8d:db:78:1e:13:1a:80:4e:
         c1:f5:f6:2a:9b:a5:37:b1:9a:9f:8e:b0:e7:61:6d:28:7d:56:
         ca:77:fa:b6:2a:c4:09:16:6d:ea:b9:ad:9e:91:6b:4e:0b:fe:
         e0:a5:cf:3b:e3:90:9b:29:af:29:58:72:0c:2e:2c:6c:6c:c1:
         90:82:09:83:34:63:53:44:b5:e9:84:a7:9c:8d:1d:09:85:f2:
         f0:d6:3c:f5:59:4b:e0:3a:cf:c7:8d:ff:ef:95:f0:74:23:98:
         c1:65:07:6e:81:ed:5d:5a:17:2d:f2:24:0f:ae:90:2b:67:96:
         cc:28:ed:7c:55:b4:23:96:85:49:15:6b:e0:b3:18:99:5c:3e:
         a5:6d:5d:90:bd:7a:e0:68:de:2f:15:0c:2e:1d:e8:dc:53:12:
         ed:bc:3a:f4:4f:6e:4b:81:7e:3a:81:79:bb:b4:ba:86:42:8f:
         6f:9a:f1:4c:26:c3:b2:8f:a6:ec:b9:d4:d1:7c:7b:96:57:a7:
         b4:46:db:90:93:6a:b7:58:58:5e:6d:13:b9:a3:12:bb:49:ef:
         ba:5a:6b:03:73:2c:6d:5a:2d:b5:df:73:aa:cf:db:4b:df:a6:
         a6:66:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----