Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5F57306A589211EA872AE786C4F9AE02.roa
File:                     5F57306A589211EA872AE786C4F9AE02.roa (raw, json)
Hash identifier:          /KPuCsca/UbEKp7Amqa8wEOnBtT/CPzxoeoQjUZOw3Q=
Subject key identifier:   86:44:DD:DE:57:17:5A:C5:4B:63:77:DE:56:AC:65:B3:2C:CC:9D:65
Certificate issuer:       /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial:       315C
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5F57306A589211EA872AE786C4F9AE02.roa
Signing time:             Thu 14 Apr 2022 10:40:43 +0000
ROA not before:           Thu 14 Apr 2022 10:40:43 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     63922
IP address blocks:        103.44.40.0/22 maxlen: 22
                          103.74.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12636 (0x315c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
        Validity
            Not Before: Apr 14 10:40:43 2022 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=6257fa2b-bbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:58:ce:ce:19:df:ab:63:1d:55:77:fb:61:
                    d1:07:22:0a:e6:3e:82:43:6d:60:9f:26:7c:d5:0a:
                    54:e7:3f:3e:1f:47:6f:94:db:bf:35:16:d9:ae:7c:
                    13:d2:8b:52:4b:20:f4:46:7b:5e:1f:ba:db:5a:b9:
                    dd:e1:d3:9f:fa:ea:72:3d:65:1c:95:b5:d9:35:e0:
                    b9:b7:e7:3a:42:66:27:87:0a:94:ec:a1:3c:44:4d:
                    ec:09:91:66:33:e3:22:8f:06:8d:7c:76:91:1b:55:
                    41:38:27:32:ab:5a:40:64:9b:a7:29:db:fb:0b:4d:
                    f3:89:9f:de:a0:40:3f:29:e6:ae:71:d4:ba:79:b7:
                    95:50:86:6f:fe:02:53:54:0f:75:ad:92:45:d3:31:
                    cd:93:08:6d:37:79:fe:27:af:1c:7d:75:5e:8d:19:
                    09:32:f6:3e:8d:25:51:24:2c:f0:b4:11:74:a8:9e:
                    94:9e:e9:3b:45:20:ab:ce:31:00:3b:e5:33:15:3e:
                    3b:91:77:f0:b7:d4:65:79:51:42:6f:80:3b:7c:03:
                    92:cb:b8:53:eb:88:05:fe:47:9a:ba:2e:e1:31:4a:
                    d1:bb:dc:c8:9f:a5:4d:cc:1f:49:f9:97:63:7e:34:
                    64:6f:5a:8d:05:af:1e:27:8b:a0:4c:6d:04:63:e3:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:44:DD:DE:57:17:5A:C5:4B:63:77:DE:56:AC:65:B3:2C:CC:9D:65
            X509v3 Authority Key Identifier:
                keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5F57306A589211EA872AE786C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.40.0/22
                  103.74.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:72:62:65:74:c3:68:56:a2:92:bf:f4:c0:69:c3:c0:46:6b:
         70:83:87:5a:63:b4:fa:30:0a:bb:9e:16:3e:9a:de:9c:d2:3a:
         1e:21:d2:8d:4c:7e:f4:48:95:c6:41:ac:74:8c:d1:46:18:41:
         cc:55:14:65:e3:e3:16:10:dc:52:82:e5:dd:58:8f:84:49:d2:
         11:1e:53:79:d5:38:67:82:ae:e1:ee:13:35:d3:b2:68:3a:15:
         20:48:dd:78:4e:0f:9a:a1:97:89:29:4b:58:81:51:b2:dc:03:
         b6:03:d1:f5:60:0d:29:0b:0c:db:65:fd:2b:92:e8:02:10:0b:
         43:34:3e:c7:c0:d0:ac:ca:e3:63:45:17:04:a6:5c:06:78:ff:
         b8:ac:9a:51:80:e5:9e:9e:ea:92:8c:61:ec:37:7c:26:6c:01:
         b3:6a:61:bd:a3:4d:95:a2:88:8d:e1:0b:bc:fa:82:93:fa:4c:
         33:1b:dc:5e:2f:1e:5e:10:62:11:e9:0d:ea:62:fa:27:38:3a:
         14:33:b6:a8:59:a2:79:8e:c4:bc:a0:26:a5:1f:bf:36:da:89:
         de:06:dc:ad:4a:40:35:51:74:4c:7f:2b:33:9a:df:10:00:c4:
         ba:bb:6b:3a:42:23:9e:ff:69:d3:29:cc:d9:b8:ea:59:93:77:
         32:af:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----