Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
File:                     087F6CD6BB1811ECB6D3E21CC4F9AE02.roa (raw, json)
Hash identifier:          TWPVRH8Dg9vak5Vj9xnFACsriopw6DAapeeDeIzBhRc=
Subject key identifier:   FD:A5:5A:23:BB:FB:78:D3:B0:77:9C:86:8D:3A:31:E2:2E:86:E0:4B
Certificate issuer:       /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial:       0183
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
Signing time:             Wed 13 Apr 2022 10:54:04 +0000
ROA not before:           Wed 13 Apr 2022 10:54:04 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     147050
IP address blocks:        103.174.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
        Validity
            Not Before: Apr 13 10:54:04 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=6256abcc-5f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:be:0c:1e:b3:e1:82:74:03:b5:72:a7:89:
                    c8:ea:ca:d8:5c:8b:14:f7:ad:77:69:61:7b:a7:54:
                    63:af:47:63:ea:94:eb:4f:bf:78:11:27:8e:84:20:
                    18:af:7b:e5:b7:5a:31:9c:2a:ce:46:0e:6a:ca:39:
                    d4:7d:b4:85:33:71:a2:8d:bb:2b:f7:94:55:21:8c:
                    98:55:42:0a:e3:bc:9c:3e:ae:50:9a:47:90:1e:5b:
                    c2:7d:4d:8a:ae:b5:25:2c:12:d3:b0:35:5d:68:57:
                    4e:02:a8:e2:75:1f:0d:cc:5d:96:f7:49:14:42:91:
                    57:e1:cc:0f:04:8f:4c:67:92:25:34:9f:ec:fc:07:
                    94:ea:e1:33:f8:8e:84:f8:58:cd:f9:ac:cf:98:10:
                    b1:00:3e:83:7c:cf:42:bb:87:41:5a:e0:2a:54:5f:
                    51:5d:28:ab:dd:8b:0c:5f:30:8f:30:c6:54:dd:4f:
                    35:fd:9a:b6:12:6e:1d:27:8b:32:19:7c:0b:72:f7:
                    9c:cb:ee:34:83:4c:0c:95:ea:b7:3d:f7:a5:fa:c6:
                    35:7c:cf:66:76:d8:f5:d7:4c:fe:e7:b7:e2:76:38:
                    4e:72:b6:07:fe:6d:0c:f9:e1:17:03:d5:5f:16:76:
                    f4:b1:11:56:59:2c:3f:48:28:4c:a5:eb:9d:d2:99:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A5:5A:23:BB:FB:78:D3:B0:77:9C:86:8D:3A:31:E2:2E:86:E0:4B
            X509v3 Authority Key Identifier:
                keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/087F6CD6BB1811ECB6D3E21CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:f6:95:be:cd:a3:30:fe:e1:48:da:cd:36:d9:82:38:64:
         7b:d6:6b:52:c5:21:a3:ec:5a:df:fc:20:ea:e0:52:2a:23:35:
         10:d5:88:48:52:2e:b7:31:df:80:65:94:8d:3a:d8:00:c9:a1:
         08:01:11:65:73:f6:77:fd:52:f1:bb:f6:d3:6d:8f:37:2b:0f:
         ac:67:4a:e7:e2:e1:2a:c6:c6:e1:52:07:55:c3:08:77:46:63:
         ea:eb:d9:24:7f:b1:ca:86:99:e0:b8:6d:eb:6b:e3:43:12:ea:
         ee:b1:1e:f2:e3:29:28:a2:8f:4c:22:45:60:4a:a7:68:76:cf:
         92:09:24:ca:73:cd:1a:91:ce:4f:81:58:10:38:7c:f8:a4:fd:
         71:4b:e5:2e:24:00:61:a4:db:b4:64:f8:b5:f0:0a:67:8f:ad:
         b2:b9:38:13:19:43:1e:4d:38:a8:a2:f1:6e:45:85:f4:5f:73:
         63:a4:25:f5:7e:9b:9d:21:6f:a5:b3:7f:c1:b7:4d:6d:03:6b:
         13:20:d8:bf:b9:93:8d:fb:85:e1:f0:4e:4d:46:4a:1f:37:79:
         52:4d:32:83:f6:b2:08:03:34:be:93:e6:ae:2b:9a:87:a5:47:
         9c:f1:08:d4:a2:19:a5:05:75:aa:27:0c:ad:36:65:fe:98:1a:
         18:9a:dd:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCQzYxMTAvBgNVBAUTKEVGNUI0OTdGRkQ4QjI1OUVFOUVBMTU3QjAyMjJCMTEw
MjY2Q0Y1OUYwHhcNMjIwNDEzMTA1NDA0WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjU2YWJjYy01ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4O+DB6z4YJ0A7Vyp4nI6srYXIsU9613aWF7p1Rjr0dj6pTrT794ESeOhCAY
r3vlt1oxnCrORg5qyjnUfbSFM3Gijbsr95RVIYyYVUIK47ycPq5QmkeQHlvCfU2K
rrUlLBLTsDVdaFdOAqjidR8NzF2W90kUQpFX4cwPBI9MZ5IlNJ/s/AeU6uEz+I6E
+FjN+azPmBCxAD6DfM9Cu4dBWuAqVF9RXSir3YsMXzCPMMZU3U81/Zq2Em4dJ4sy
GXwLcvecy+40g0wMleq3Pfel+sY1fM9mdtj110z+57fidjhOcrYH/m0M+eEXA9Vf
Fnb0sRFWWSw/SChMpeud0plrDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP2lWiO7
+3jTsHecho06MeIuhuBLMB8GA1UdIwQYMBaAFO9bSX/9iyWe6eoVewIisRAmbPWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUJDNi80ODkwOTFDRTI2
NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8yTEpaN3A2aFY3QWlLeEVDWnM5
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcxdEpmXzJMSlo3cDZoVjdBaUt4RUNaczlaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjlCQzYvNDg5MDkxQ0UyNjY3MTFFQ0I5QzIyQzc3QzRGOUFFMDIvMDg3RjZDRDZC
QjE4MTFFQ0I2RDNFMjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnri8wDQYJKoZIhvcNAQELBQADggEBAAGK9pW+zaMw/uFI
2s022YI4ZHvWa1LFIaPsWt/8IOrgUiojNRDViEhSLrcx34BllI062ADJoQgBEWVz
9nf9UvG79tNtjzcrD6xnSufi4SrGxuFSB1XDCHdGY+rr2SR/scqGmeC4betr40MS
6u6xHvLjKSiij0wiRWBKp2h2z5IJJMpzzRqRzk+BWBA4fPik/XFL5S4kAGGk27Rk
+LXwCmePrbK5OBMZQx5NOKii8W5FhfRfc2OkJfV+m50hb6Wzf8G3TW0DaxMg2L+5
k437heHwTk1GSh83eVJNMoP2sggDNL6T5q4rmoelR5zxCNSiGaUFdaonDK02Zf6Y
Ghia3SI=
-----END CERTIFICATE-----