Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
File:                     CCA13788CE1011EC9D1F9E28C4F9AE02.roa (raw, json)
Hash identifier:          aECI+AIin0Jj6JJHUPhrXWoGIolCjwk0aa+zB916PMQ=
Subject key identifier:   81:F0:1C:CD:41:E8:06:21:98:2B:C8:B7:1F:82:50:F5:9A:FB:DA:90
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       39ED
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
Signing time:             Sun 08 May 2022 04:20:08 +0000
ROA not before:           Sun 08 May 2022 04:20:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14829 (0x39ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May  8 04:20:08 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=627744f8-d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:b6:1b:75:64:16:b6:75:5e:df:8a:22:f5:
                    a4:8c:9a:6f:3a:5c:c3:37:56:3a:14:ec:31:16:e7:
                    e5:ba:0b:e1:5b:d5:3b:35:71:09:12:fb:5a:e6:a2:
                    9c:a4:f6:78:8e:8b:10:de:70:99:62:ff:8d:d9:45:
                    db:11:03:ce:b8:02:8b:7f:dc:1b:01:7b:e2:5d:84:
                    85:14:c1:63:3f:17:9b:26:66:d8:35:22:a9:97:39:
                    3d:c0:ee:75:ba:7a:5a:d7:09:fd:23:e6:c3:dc:83:
                    f2:7b:9e:ae:da:30:49:06:7b:27:f6:56:23:5f:d8:
                    2b:57:1f:7e:87:c4:7b:a6:4d:31:33:ba:98:18:ad:
                    49:83:4f:74:54:03:22:21:db:4f:76:ff:63:c0:03:
                    5d:8b:c8:ba:0a:01:d4:37:ef:e6:65:17:8d:f8:29:
                    c5:09:e3:a9:13:ef:e1:6c:87:e0:0a:cb:17:ac:82:
                    ee:a1:a3:5b:06:3e:be:45:51:f7:9f:fc:a9:1a:16:
                    6a:2a:1b:49:62:f8:f4:27:e3:bd:bc:bd:54:7e:30:
                    9d:84:97:67:4c:23:65:d3:8f:32:18:d7:cb:3f:c0:
                    20:4e:1a:26:65:de:63:5a:96:f1:08:78:3e:12:6a:
                    63:28:fd:43:9f:4c:5b:64:88:3a:50:22:23:26:f9:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F0:1C:CD:41:E8:06:21:98:2B:C8:B7:1F:82:50:F5:9A:FB:DA:90
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/CCA13788CE1011EC9D1F9E28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:2d:64:1f:86:f5:d5:4d:5b:91:31:78:7d:75:a2:40:9d:94:
         73:9a:39:9c:c0:de:5f:ca:be:e4:c9:d5:cd:5d:c9:25:b0:01:
         56:fc:5c:60:5f:e5:5d:a6:6d:da:fb:a7:a9:59:c6:b5:4e:ba:
         6e:61:ac:34:b3:63:b6:25:6b:31:06:4a:7f:ef:f7:d5:58:2b:
         d0:74:90:1f:9a:3e:91:e0:69:21:1b:2a:7e:28:d3:5f:c2:bf:
         9b:41:e6:aa:fa:d3:83:dd:f8:46:34:9f:f2:31:99:57:d8:14:
         be:de:0c:7e:31:84:a7:a1:d5:6b:36:a8:a3:f9:89:f7:09:8d:
         92:8d:c5:12:0a:fb:26:34:b7:46:d6:c6:e9:61:32:ca:bf:d1:
         96:77:a5:34:05:68:6f:9d:18:25:be:67:dd:0c:d3:1e:ad:95:
         69:08:b4:2c:75:70:25:9b:47:8f:99:c0:ef:14:f7:59:8d:e0:
         94:fc:47:b7:c3:b2:9d:48:e1:0d:dd:b1:23:05:37:6f:be:a6:
         11:3d:e6:af:ef:6d:61:a0:0c:9a:08:db:dc:12:39:48:2f:b8:
         19:1a:8b:1f:69:57:9c:4b:e3:b6:84:b5:f5:eb:9f:e5:67:ff:
         c1:77:74:63:43:3d:14:9e:8c:97:db:9f:6c:f1:22:fb:24:96:
         13:3b:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----