Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/3A3F925ECD4D11EC9431E129C4F9AE02.roa
File:                     3A3F925ECD4D11EC9431E129C4F9AE02.roa (raw, json)
Hash identifier:          oRYgT3O8x+Bb71ZssZoNFhIRkCl4oiOrWmQuBBlcw1Q=
Subject key identifier:   90:43:C9:DA:35:60:F4:0A:BF:63:43:2D:F6:90:DA:C6:9A:B9:61:4B
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       39E1
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/3A3F925ECD4D11EC9431E129C4F9AE02.roa
Signing time:             Sat 07 May 2022 04:20:09 +0000
ROA not before:           Sat 07 May 2022 04:20:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14817 (0x39e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May  7 04:20:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6275f379-4314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:57:66:fd:c8:23:62:67:6e:8a:a2:cc:63:
                    1c:c9:28:da:e3:e4:65:a2:26:cd:75:2e:3d:34:13:
                    24:8f:29:f3:16:54:2a:12:8a:32:f5:33:54:0a:8f:
                    fa:f9:e5:eb:23:87:28:80:b6:39:fa:92:2e:f9:1b:
                    f3:47:19:72:c4:d9:29:0f:7d:c3:08:b4:92:0a:0d:
                    0b:cb:c8:24:48:48:d1:08:95:49:05:a1:18:ef:e4:
                    f1:a1:8f:a7:c2:19:b6:00:7f:74:56:19:0b:bc:2a:
                    a7:ab:25:5b:b7:a7:63:9b:8a:a5:a3:a8:23:b7:d7:
                    21:4d:ff:0b:e7:e2:27:2f:58:5d:53:44:ca:2a:72:
                    2b:18:ae:fc:8c:26:6b:5c:ba:12:67:f8:20:69:c5:
                    65:25:a9:ed:9e:44:93:4c:21:4f:fb:4a:6f:23:cb:
                    38:33:54:d2:37:f9:a5:0a:14:4e:d8:22:0a:11:03:
                    30:89:e8:54:5c:62:a6:89:5a:e5:9f:f5:48:03:06:
                    32:14:2e:0d:21:76:98:6b:41:56:3e:05:6a:8b:0d:
                    27:a2:3e:0e:db:41:f6:92:38:fe:39:a1:64:ba:50:
                    54:c2:6e:da:b5:41:58:37:be:b9:d5:3b:40:72:21:
                    97:25:14:44:a1:72:0a:85:40:05:18:a3:5d:fb:5a:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:C9:DA:35:60:F4:0A:BF:63:43:2D:F6:90:DA:C6:9A:B9:61:4B
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/3A3F925ECD4D11EC9431E129C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:24:e9:5d:5c:4e:ac:b0:88:c2:76:6f:e2:ec:f3:64:f6:
         4c:cf:68:f6:f7:12:3c:20:68:6d:1d:41:ef:52:e2:bf:26:25:
         48:8f:8b:2c:2b:f5:43:01:1c:d4:a6:b4:e7:02:bf:f1:18:77:
         58:0c:08:6b:1b:fb:55:65:3a:98:1b:ac:3b:b9:14:24:d6:76:
         bd:1f:b7:a7:a0:d8:40:9c:6d:13:5c:ed:0e:17:ee:e3:17:5c:
         f5:02:fe:24:d5:71:fb:51:44:7a:0e:fd:3f:fd:ae:78:4e:bc:
         b0:bc:81:f6:e3:31:94:d8:73:aa:41:b1:5a:41:67:26:15:ff:
         f3:9f:60:c2:03:ff:91:e3:8b:b3:d6:47:53:14:1e:32:69:46:
         ef:14:e6:e3:35:b6:7f:ff:01:97:a7:6f:b1:07:50:c9:48:97:
         15:09:e6:53:a1:2e:ce:e8:a9:73:f4:ef:92:4c:d6:8e:b1:fa:
         cd:0b:21:bf:98:71:0e:4c:7a:b1:44:df:b0:65:10:74:eb:c8:
         4c:1e:8a:33:3b:aa:bb:0b:39:03:ae:32:9f:8c:e4:90:a5:4b:
         cf:97:19:2a:fc:0a:2d:d4:ba:36:cf:8a:a2:b6:5a:7c:06:29:
         78:22:de:d1:20:d1:5d:a8:99:14:46:0b:b1:43:b5:41:1e:6b:
         38:80:c6:55
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICOeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwNTA3MDQyMDA5WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjc1ZjM3OS00MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHFXZv3II2JnboqizGMcySja4+RloibNdS49NBMkjynzFlQqEooy9TNUCo/6
+eXrI4cogLY5+pIu+RvzRxlyxNkpD33DCLSSCg0Ly8gkSEjRCJVJBaEY7+TxoY+n
whm2AH90VhkLvCqnqyVbt6djm4qlo6gjt9chTf8L5+InL1hdU0TKKnIrGK78jCZr
XLoSZ/ggacVlJantnkSTTCFP+0pvI8s4M1TSN/mlChRO2CIKEQMwiehUXGKmiVrl
n/VIAwYyFC4NIXaYa0FWPgVqiw0noj4O20H2kjj+OaFkulBUwm7atUFYN7651TtA
ciGXJRREoXIKhUAFGKNd+1o4UQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJBDydo1
YPQKv2NDLfaQ2saauWFLMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvM0EzRjkyNUVD
RDREMTFFQzk0MzFFMTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAgvwk6V1cTqywiMJ2b+Ls82T2TM9o9vcSPCBobR1B71LivyYlSI+LLCv1
QwEc1Ka05wK/8Rh3WAwIaxv7VWU6mBusO7kUJNZ2vR+3p6DYQJxtE1ztDhfu4xdc
9QL+JNVx+1FEeg79P/2ueE68sLyB9uMxlNhzqkGxWkFnJhX/859gwgP/keOLs9ZH
UxQeMmlG7xTm4zW2f/8Bl6dvsQdQyUiXFQnmU6Euzuipc/TvkkzWjrH6zQshv5hx
Dkx6sUTfsGUQdOvITB6KMzuquws5A64yn4zkkKVLz5cZKvwKLdS6Ns+KorZafAYp
eCLe0SDRXaiZFEYLsUO1QR5rOIDGVQ==
-----END CERTIFICATE-----