Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/C2210BF48F3011ECB867A584C4F9AE02.roa
File:                     C2210BF48F3011ECB867A584C4F9AE02.roa (raw, json)
Hash identifier:          dHK9lpOMSette7WbTS1O4OQWTNp9/a5XeUWf9mmJqH0=
Subject key identifier:   8C:96:21:1B:05:FB:38:28:4B:5E:FD:DC:91:E9:F9:C6:7B:71:31:85
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       36ED
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/C2210BF48F3011ECB867A584C4F9AE02.roa
Signing time:             Thu 17 Feb 2022 05:00:15 +0000
ROA not before:           Thu 17 Feb 2022 05:00:15 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14061 (0x36ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Feb 17 05:00:15 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=620dd65f-5d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:5e:88:0a:f4:26:19:a6:40:fd:6f:7b:50:
                    aa:8d:e3:c1:fd:03:4f:59:a7:05:ea:89:8a:6b:c1:
                    2f:59:12:1b:cc:25:76:55:9c:b2:0a:fe:f8:93:7f:
                    bf:aa:99:88:e1:6b:7c:6d:1a:5e:9f:29:0e:73:fa:
                    6d:af:5b:e0:77:c1:01:a4:b8:4d:fc:ee:01:09:8b:
                    2f:79:3e:2e:e0:a0:8e:f7:35:b2:4d:f1:62:64:df:
                    69:66:e5:06:49:8c:74:3c:b6:da:9b:57:11:b8:b4:
                    68:f6:3d:28:65:64:2b:d5:75:41:16:5a:ac:7b:d6:
                    ef:18:6c:a5:62:c6:9a:e3:de:df:b6:f1:82:1a:27:
                    dd:21:66:94:1d:70:d5:a2:a6:ce:3b:53:84:56:84:
                    73:1e:29:de:9e:c9:bb:cb:2e:2c:76:09:e7:ca:f6:
                    84:7f:2e:75:5e:0f:58:98:6e:a5:c8:22:3e:89:89:
                    d5:5e:9f:d3:bc:7d:ae:05:81:18:53:61:49:30:56:
                    30:70:3a:90:0c:23:36:b0:c7:85:b7:a8:ea:e7:da:
                    13:bf:2a:08:90:8b:62:b1:de:89:ed:33:03:e8:18:
                    53:15:4c:0c:8f:f1:a4:6f:9f:68:ac:4e:1c:f0:21:
                    ea:9e:b3:4b:30:9c:07:5a:73:8b:c9:ea:75:5a:79:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:96:21:1B:05:FB:38:28:4B:5E:FD:DC:91:E9:F9:C6:7B:71:31:85
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/C2210BF48F3011ECB867A584C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:19:21:37:e7:31:f1:bb:1d:d2:fa:ea:18:6e:48:98:f8:
         28:8e:0a:bd:f0:8a:e9:da:fa:48:5e:da:e5:11:14:60:00:13:
         a8:e2:33:9b:24:39:16:1e:a5:9f:9c:55:67:c7:cb:a4:9a:c0:
         24:80:84:e7:24:9e:31:d4:51:4b:ed:a8:1d:4f:48:a8:d8:b6:
         a3:29:10:8a:e8:f5:dc:9c:1c:86:97:6e:b6:ea:07:5a:e8:69:
         d9:de:14:ea:08:a1:48:c6:8a:cc:ed:80:0a:39:07:63:76:9c:
         9b:13:56:c5:bb:ac:e4:44:85:2a:7b:54:d0:1b:d3:13:a1:b5:
         4b:5a:2b:55:52:26:cc:6a:10:3f:53:51:aa:6a:79:86:43:8f:
         0f:c8:86:9b:37:dc:cc:14:6e:d8:99:d7:1a:e3:98:93:ce:6c:
         19:78:5b:2d:76:3a:a1:81:2e:7e:cb:c6:b0:51:15:f8:58:71:
         21:8b:c6:d9:1c:2f:2d:d5:36:25:d6:d4:95:3a:d3:b4:1a:ec:
         16:49:70:54:0e:ce:9f:b3:34:86:b5:f2:65:d8:20:e0:5b:ed:
         6b:b4:b1:9e:a3:fa:48:c1:4e:54:b5:7f:dd:ae:5e:ac:cc:3d:
         b8:6e:53:e7:54:aa:b4:56:af:27:e6:91:0c:05:92:3b:64:c1:
         13:f9:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----