Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/6E15D560321411EAA320C25EC4F9AE02.roa
File:                     6E15D560321411EAA320C25EC4F9AE02.roa (raw, json)
Hash identifier:          mhf9lb19JCfl16qHtko+EiT6PD8C63Rc13O158kuRYU=
Subject key identifier:   AC:68:DD:5D:7C:76:BD:D1:F7:EB:CF:FA:94:D9:23:70:32:BE:1F:B2
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       05BE
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/6E15D560321411EAA320C25EC4F9AE02.roa
Signing time:             Tue 15 Jun 2021 20:48:00 +0000
ROA not before:           Tue 15 Jun 2021 20:48:00 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     137548
IP address blocks:        103.112.204.0/24 maxlen: 24
                          103.112.205.0/24 maxlen: 24
                          2402:b1c0::/32 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Jun 15 20:48:00 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=60c911ff-401e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:9f:e7:1c:77:f3:e2:d0:bd:0f:90:3c:c4:
                    15:df:ab:62:06:61:17:31:dd:15:a5:08:38:ab:f0:
                    f1:29:c2:a7:95:17:42:fb:47:17:04:5e:01:ca:43:
                    bb:87:17:b2:a4:e5:f7:2d:3e:d1:6c:8f:85:a5:f9:
                    46:a7:72:a5:21:9c:48:e6:f0:d6:de:ec:1a:b1:01:
                    80:a9:fd:e9:fe:48:ba:0e:36:67:e2:d5:0f:c3:0a:
                    54:2a:c9:6e:11:64:54:b0:f4:13:9e:79:0b:4b:b6:
                    28:18:05:6a:37:b2:32:a5:b9:ce:f2:4c:14:51:49:
                    08:0d:ca:e1:ad:e9:0e:26:f8:b3:cd:6d:9d:b1:c1:
                    54:45:cd:a2:8b:6e:01:a1:47:07:b4:de:ac:09:c6:
                    00:21:55:85:a6:8d:c5:88:6c:af:6b:a7:5d:7b:46:
                    e6:c5:ed:27:0c:e2:0e:1d:77:62:1e:b1:fa:6b:28:
                    88:c7:90:01:84:10:d1:3f:17:29:a1:25:45:f8:24:
                    ac:62:7c:39:5e:4e:0b:a1:41:cf:e6:7a:fd:d5:3b:
                    f0:9c:18:81:94:5b:6a:51:2c:f2:2e:b3:43:66:f4:
                    a5:36:06:78:6f:31:f6:56:6b:94:b1:2b:07:10:08:
                    cf:89:ca:db:f0:ae:e5:13:0d:c2:d5:3b:04:75:b1:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:DD:5D:7C:76:BD:D1:F7:EB:CF:FA:94:D9:23:70:32:BE:1F:B2
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/6E15D560321411EAA320C25EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.204.0/23
                IPv6:
                  2402:b1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:68:cc:7e:59:fa:41:2d:92:e9:1c:98:81:e0:13:61:8a:c8:
         93:38:79:d1:50:f1:02:27:5e:a8:d6:ea:76:3c:03:b2:07:0d:
         4e:a3:20:3e:82:ed:32:00:63:a2:e0:6f:10:80:41:6e:6b:2a:
         d1:e1:c4:ee:32:cc:e2:52:23:bf:7d:4b:2a:e6:34:62:e1:7a:
         7d:cb:59:30:74:fc:ca:27:96:d5:7c:a0:9d:ab:f6:50:cd:de:
         b0:b3:04:30:d7:81:ee:0b:9a:01:89:e7:6b:50:83:d7:6d:95:
         0f:4e:a0:2e:3e:8e:25:04:2a:7c:44:73:1a:a7:34:f0:88:d3:
         55:cc:f2:82:27:da:1b:2a:75:cc:99:c7:63:60:a9:b9:0f:81:
         38:01:cd:eb:84:2a:6c:d8:78:e7:27:3b:74:e7:59:c1:80:ec:
         8a:f8:39:0d:e7:7b:d8:00:21:78:46:e4:16:a9:b9:0d:36:51:
         bf:53:f7:ae:15:86:80:39:4b:76:98:8b:7a:f5:41:d5:83:a7:
         68:6d:71:7f:72:59:fe:a6:7a:58:bc:39:46:84:cf:98:54:c4:
         45:83:46:61:86:c1:3e:f7:d3:b8:59:de:88:ca:c3:ae:9b:76:
         d4:a6:fb:23:3a:75:31:e3:78:07:41:5f:cb:49:ae:af:5f:66:
         c5:18:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----