Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
File:                     882E3A46995F11EC8EE3AD7EC4F9AE02.roa (raw, json)
Hash identifier:          Kpj8M7gccjsQiyLDgtJdkBslK4SL3L/5nIctYs3kSzI=
Subject key identifier:   45:48:7C:F3:23:6C:E5:52:FA:48:59:AB:65:85:99:D4:B3:00:41:E0
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       377E
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
Signing time:             Wed 02 Mar 2022 04:40:09 +0000
ROA not before:           Wed 02 Mar 2022 04:40:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14206 (0x377e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Mar  2 04:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=621ef529-81e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:e3:fc:bc:03:de:b3:58:85:fe:23:55:76:
                    80:0f:73:7d:93:f4:4f:b3:0e:d3:fa:86:e8:e5:4a:
                    a1:91:8c:6f:d4:78:f7:9c:a4:36:90:27:f4:8e:1a:
                    d2:5b:e3:3d:0f:b8:93:a3:ca:30:5c:49:6d:94:92:
                    24:4f:ee:87:7f:da:ba:6a:f4:94:6f:84:43:f1:21:
                    90:16:13:da:23:1a:24:63:fc:0f:38:8b:52:9a:9d:
                    f2:bf:b2:71:2f:8c:3b:b0:b9:2b:e4:af:93:8c:32:
                    2c:56:d8:77:8d:16:66:2e:ab:2c:11:72:79:92:bc:
                    31:c8:42:fe:42:eb:12:a5:f3:29:a9:39:7a:1a:e3:
                    f3:bf:f7:d2:65:92:12:de:6a:85:a0:2b:80:8a:c6:
                    b9:a9:7b:07:f2:2b:54:b6:39:0b:17:2c:b8:66:3f:
                    a0:dc:e6:c5:5b:df:58:09:4f:82:00:ec:08:af:6c:
                    c9:04:76:57:85:3a:c7:c5:ba:ac:54:6c:82:fa:41:
                    e0:73:8e:e2:42:fc:9e:b2:c9:33:7a:a5:cd:91:29:
                    5c:51:f3:a2:20:a4:f8:b5:2e:a7:31:da:03:b3:1e:
                    cd:c1:da:f8:2c:00:7f:4f:5e:86:8f:ec:fb:a9:0f:
                    8a:d6:7e:0e:9e:79:a9:10:07:7f:fd:34:a7:81:bb:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:7C:F3:23:6C:E5:52:FA:48:59:AB:65:85:99:D4:B3:00:41:E0
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/882E3A46995F11EC8EE3AD7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:11:cd:86:82:85:fa:e2:4a:9f:1e:2b:40:cf:e1:c2:cc:
         55:5f:8b:bd:2c:3b:a5:f6:b9:4b:52:0c:23:95:fb:93:25:6b:
         03:a1:dc:6b:48:75:39:fa:dc:fd:a8:c4:6b:be:60:2d:3c:01:
         44:79:4e:17:42:58:68:4c:8d:e6:8d:08:b8:d9:0f:e8:bb:56:
         bb:55:11:f6:3e:32:48:90:b9:26:c6:10:6b:d0:d0:6e:25:1f:
         58:99:7c:a7:d8:07:95:bf:85:4c:64:52:4a:ff:16:29:1b:e8:
         9d:b5:79:eb:82:8c:39:02:37:11:9c:4f:cb:50:9a:d3:7d:1e:
         89:f4:ae:3c:3c:19:66:4f:ac:c2:1e:64:32:99:05:17:a7:c9:
         df:d7:aa:2f:e7:7f:f6:f1:65:b7:28:17:7c:3a:1f:25:74:45:
         8f:ea:13:d8:62:18:33:92:02:38:3a:18:02:37:9e:66:db:fd:
         ec:1e:b8:92:f6:fe:d5:cf:13:9a:ff:de:a9:0d:1f:22:62:f5:
         46:27:78:99:60:d9:47:1e:45:f0:15:b2:f5:a0:81:d4:e9:e9:
         4c:9a:01:0e:2d:21:ab:c8:a8:f0:63:b5:32:44:60:9f:f1:27:
         41:cd:2a:b4:fe:16:3b:af:7b:28:ca:c0:2f:6c:73:f4:c3:46:
         26:3a:f2:af
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICN34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwMzAyMDQ0MDA5WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjFlZjUyOS04MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhXj/LwD3rNYhf4jVXaAD3N9k/RPsw7T+obo5UqhkYxv1Hj3nKQ2kCf0jhrS
W+M9D7iTo8owXEltlJIkT+6Hf9q6avSUb4RD8SGQFhPaIxokY/wPOItSmp3yv7Jx
L4w7sLkr5K+TjDIsVth3jRZmLqssEXJ5krwxyEL+QusSpfMpqTl6GuPzv/fSZZIS
3mqFoCuAisa5qXsH8itUtjkLFyy4Zj+g3ObFW99YCU+CAOwIr2zJBHZXhTrHxbqs
VGyC+kHgc47iQvyesskzeqXNkSlcUfOiIKT4tS6nMdoDsx7Nwdr4LAB/T16Gj+z7
qQ+K1n4OnnmpEAd//TSngbuHQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEVIfPMj
bOVS+khZq2WFmdSzAEHgMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvODgyRTNBNDY5
OTVGMTFFQzhFRTNBRDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEApoERzYaChfriSp8eK0DP4cLMVV+LvSw7pfa5S1IMI5X7kyVrA6Hca0h1
Ofrc/ajEa75gLTwBRHlOF0JYaEyN5o0IuNkP6LtWu1UR9j4ySJC5JsYQa9DQbiUf
WJl8p9gHlb+FTGRSSv8WKRvonbV564KMOQI3EZxPy1Ca030eifSuPDwZZk+swh5k
MpkFF6fJ39eqL+d/9vFltygXfDofJXRFj+oT2GIYM5ICODoYAjeeZtv97B64kvb+
1c8Tmv/eqQ0fImL1Rid4mWDZRx5F8BWy9aCB1OnpTJoBDi0hq8io8GO1MkRgn/En
Qc0qtP4WO697KMrAL2xz9MNGJjryrw==
-----END CERTIFICATE-----