Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/53CD8872BBDF11ECA1F12A0DC4F9AE02.roa
File:                     53CD8872BBDF11ECA1F12A0DC4F9AE02.roa (raw, json)
Hash identifier:          Vr+p/MbnaadFJTEHGHD3g/I6Uhy/yDBTMah38dq/U0I=
Subject key identifier:   2A:C5:F0:3E:04:36:16:0A:58:23:65:28:40:6D:93:F0:CA:FD:67:C8
Certificate issuer:       /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial:       3159
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/53CD8872BBDF11ECA1F12A0DC4F9AE02.roa
Signing time:             Thu 14 Apr 2022 10:40:40 +0000
ROA not before:           Thu 14 Apr 2022 10:40:40 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     132908
IP address blocks:        103.74.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12633 (0x3159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
        Validity
            Not Before: Apr 14 10:40:40 2022 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=6257fa28-3fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:06:7d:c5:a4:3a:51:a3:0d:7b:3f:19:43:
                    2e:85:3f:60:39:6c:34:24:9d:78:11:62:17:c8:a1:
                    f5:a2:09:50:b4:ec:a7:23:88:2a:e1:b1:0f:1b:78:
                    23:3e:13:1a:68:07:5d:84:84:f1:d6:5b:6e:88:60:
                    14:df:b9:48:16:c2:88:71:69:2d:95:fb:32:b3:43:
                    ff:1a:ec:9a:3b:1e:ca:a2:93:31:ac:b2:7f:16:23:
                    ae:17:5d:52:fe:4b:f7:b5:0d:9e:f3:1b:81:e1:ac:
                    1e:1c:ed:7b:f8:f1:33:95:73:a5:76:18:07:68:96:
                    19:78:3c:fb:42:6f:af:01:ae:fe:ed:bb:6d:63:1f:
                    79:f3:d7:7d:ec:e5:ff:db:42:59:6a:3e:87:a2:ab:
                    fd:eb:56:83:82:0d:91:28:bc:a7:c8:71:8f:d9:3a:
                    44:27:78:f3:88:62:e4:99:c1:0c:f5:d5:e7:cb:72:
                    3f:1c:fd:28:d1:04:fe:de:f5:c9:38:8d:69:3a:18:
                    f9:f6:bd:05:6c:4c:c1:fd:4d:bb:5f:df:df:5a:21:
                    2d:9c:ca:86:96:63:e9:47:47:14:ae:af:0c:7d:e8:
                    9e:ae:28:68:18:22:48:6d:95:23:e9:c5:ca:a1:76:
                    52:29:d8:05:3a:71:fc:5f:7f:2a:eb:48:34:f9:60:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C5:F0:3E:04:36:16:0A:58:23:65:28:40:6D:93:F0:CA:FD:67:C8
            X509v3 Authority Key Identifier:
                keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/53CD8872BBDF11ECA1F12A0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:50:26:6b:46:05:9f:e2:26:36:bd:36:52:e2:b8:e3:81:57:
         82:b8:9d:7a:dd:c9:53:6a:87:8d:bf:bb:73:71:30:e0:73:0c:
         a1:0c:c4:f7:76:ff:cf:25:6b:0f:2e:47:b8:ec:0e:6a:62:3d:
         10:91:02:6d:34:dd:97:73:3c:12:26:b3:46:48:1f:d4:d0:b2:
         bb:c6:1c:91:5a:41:ee:25:9d:93:66:d2:bd:f4:a0:8a:74:cd:
         a2:b0:2f:dd:70:47:6d:39:25:66:2d:7e:70:e3:fe:a0:21:3e:
         70:d5:bf:6e:dd:4b:c0:10:6a:68:81:5e:68:8f:07:6f:5b:3e:
         75:ca:07:bb:ce:18:ed:ca:1b:ab:85:50:09:ad:0a:2b:1f:aa:
         69:2e:eb:a8:03:c1:06:1e:4b:ba:e5:76:11:0c:9d:62:24:41:
         d9:be:01:80:b4:4b:f2:c9:4f:50:48:b6:de:92:f9:5b:67:ef:
         db:50:b1:29:9e:4e:2b:12:cf:19:a7:a5:32:a8:0a:dc:31:00:
         0e:18:58:91:dd:b0:de:85:c9:c7:81:09:a7:13:8c:9e:ca:a4:
         7f:ee:cc:66:35:10:93:7f:ff:09:c0:78:af:2e:23:25:e1:79:
         e9:63:13:8c:9e:95:78:c6:23:25:3d:52:f1:14:df:fa:7d:da:
         84:0a:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----