Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
File:                     0E1212F0D13B11EC993B0E27C4F9AE02.roa (raw, json)
Hash identifier:          Q7AJuwe+HCC/9AMzR6hAqKLzsDKQGriKsYRc47zXpZE=
Subject key identifier:   BB:46:02:57:87:E5:8E:94:00:FC:D8:67:69:3F:B3:3C:9B:89:1B:4D
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3A19
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
Signing time:             Thu 12 May 2022 05:40:10 +0000
ROA not before:           Thu 12 May 2022 05:40:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14873 (0x3a19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May 12 05:40:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=627c9dba-61a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:cc:52:e5:35:28:38:61:ab:8e:cd:d5:bb:
                    26:cc:d4:7f:ae:2b:a2:45:d1:0a:ed:a9:f1:fc:9b:
                    59:7a:d0:07:3c:0c:d2:a2:7e:26:2c:60:7b:7f:09:
                    85:56:55:56:ee:67:50:2c:0b:f2:8e:1d:5c:e3:f7:
                    fb:3e:2c:ea:7b:fd:78:87:1c:a7:96:71:76:e4:8f:
                    d6:54:8b:26:0f:8e:04:25:35:29:c7:83:df:1b:02:
                    d1:4f:e0:8e:61:8b:a2:1d:09:0b:13:68:2e:cb:0a:
                    ad:82:16:96:52:df:47:81:ef:a2:79:9e:b3:b0:f4:
                    08:ec:8f:72:ef:65:9e:36:34:c4:4a:d9:53:27:34:
                    51:c4:e1:1f:a6:77:c0:8c:7b:fa:1a:b8:7e:ee:71:
                    75:6e:c2:aa:eb:72:07:14:f8:cb:47:9f:17:7f:24:
                    48:ff:8c:c5:02:e2:84:dd:0d:dc:3e:08:8b:eb:04:
                    76:d5:e3:e8:d0:6f:d6:e3:bc:82:e4:9b:ba:fa:64:
                    67:5b:f8:dc:55:1e:c3:c9:cf:fe:87:bb:a0:02:37:
                    7d:e9:27:f4:33:62:5b:f4:05:ac:b6:f3:96:1f:47:
                    9a:ae:7e:7e:9d:2d:9a:06:fa:86:1d:7a:c5:08:60:
                    c3:e5:b8:6e:e0:45:33:87:86:35:04:7b:c0:60:20:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:02:57:87:E5:8E:94:00:FC:D8:67:69:3F:B3:3C:9B:89:1B:4D
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/0E1212F0D13B11EC993B0E27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:e5:b2:25:78:9e:a1:d4:48:2d:c1:3c:96:4d:ad:8d:1f:
         3e:7e:5f:ae:c8:08:e2:69:f6:c9:5a:51:c3:c1:04:68:8e:8e:
         96:15:78:6a:69:fa:e0:7f:be:98:2b:bd:0f:01:7c:71:1a:d7:
         b4:cd:50:2c:69:aa:30:82:02:d1:4e:4a:cc:5d:95:e3:d7:29:
         1b:01:cf:e3:08:e2:fe:62:48:05:ff:ad:58:3b:6d:45:ab:f4:
         02:c4:73:a7:30:79:9a:97:e4:93:73:e2:60:80:36:ad:1c:6d:
         31:9d:a5:71:8c:02:cb:aa:38:30:05:b9:9a:a1:23:bd:bc:80:
         a5:1e:08:3f:7f:17:d8:0f:c6:b2:3d:1b:5e:0d:42:4d:da:23:
         98:1c:20:91:1e:42:d1:f7:47:cc:30:15:23:d8:70:a9:d3:af:
         80:b4:ac:6c:0e:1d:ad:7e:11:3a:99:45:04:51:dc:72:a3:19:
         ac:65:c7:df:26:9d:04:83:c8:e4:42:76:0a:79:97:5c:ad:2a:
         0c:1b:e4:da:a1:27:94:f6:32:18:f5:ad:b5:8e:24:b0:49:a1:
         14:b4:de:f8:a1:0e:1f:ea:fb:ab:1f:46:cf:ca:e2:f5:09:57:
         f4:cf:fe:7a:04:d5:e9:74:48:20:e2:7b:c4:76:fa:bf:4b:e2:
         85:84:f3:ad
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICOhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwNTEyMDU0MDEwWhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjdjOWRiYS02MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykDMUuU1KDhhq47N1bsmzNR/riuiRdEK7anx/JtZetAHPAzSon4mLGB7fwmF
VlVW7mdQLAvyjh1c4/f7Pizqe/14hxynlnF25I/WVIsmD44EJTUpx4PfGwLRT+CO
YYuiHQkLE2guywqtghaWUt9Hge+ieZ6zsPQI7I9y72WeNjTEStlTJzRRxOEfpnfA
jHv6Grh+7nF1bsKq63IHFPjLR58XfyRI/4zFAuKE3Q3cPgiL6wR21ePo0G/W47yC
5Ju6+mRnW/jcVR7Dyc/+h7ugAjd96Sf0M2Jb9AWstvOWH0earn5+nS2aBvqGHXrF
CGDD5bhu4EUzh4Y1BHvAYCBW0QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLtGAleH
5Y6UAPzYZ2k/szybiRtNMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvMEUxMjEyRjBE
MTNCMTFFQzk5M0IwRTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAA63lsiV4nqHUSC3BPJZNrY0fPn5frsgI4mn2yVpRw8EEaI6OlhV4amn6
4H++mCu9DwF8cRrXtM1QLGmqMIIC0U5KzF2V49cpGwHP4wji/mJIBf+tWDttRav0
AsRzpzB5mpfkk3PiYIA2rRxtMZ2lcYwCy6o4MAW5mqEjvbyApR4IP38X2A/Gsj0b
Xg1CTdojmBwgkR5C0fdHzDAVI9hwqdOvgLSsbA4drX4ROplFBFHccqMZrGXH3yad
BIPI5EJ2CnmXXK0qDBvk2qEnlPYyGPWttY4ksEmhFLTe+KEOH+r7qx9Gz8ri9QlX
9M/+egTV6XRIIOJ7xHb6v0vihYTzrQ==
-----END CERTIFICATE-----