Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/6656F764FEB611E99758773FC4F9AE02.roa
File:                     6656F764FEB611E99758773FC4F9AE02.roa (raw, json)
Hash identifier:          CsIuhd0FG4o8UqwXFTN8MSu0KiNBr41Ambt0+k3s7x8=
Subject key identifier:   2A:9A:5D:75:75:6F:B3:5C:62:6E:AF:31:72:B7:B6:27:86:BD:A0:6F
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1732
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/6656F764FEB611E99758773FC4F9AE02.roa
Signing time:             Sat 29 Jan 2022 17:23:26 +0000
ROA not before:           Sat 29 Jan 2022 17:23:26 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     139764
IP address blocks:        103.81.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5938 (0x1732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Jan 29 17:23:26 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61f5780e-b188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:f4:ab:5b:20:89:5d:43:36:1d:ad:64:d5:
                    90:06:84:64:df:c1:5c:60:4e:80:f2:bc:ba:d8:d6:
                    ef:1c:08:29:67:2c:f6:fd:30:0d:5c:d6:38:db:21:
                    ed:15:bb:f9:45:2a:ff:de:e5:77:ed:df:84:c6:cc:
                    28:c4:ab:10:0d:0e:34:92:27:82:9c:90:45:ff:07:
                    a9:6b:0f:ef:e8:36:8c:98:98:f1:72:ef:5a:e9:b2:
                    67:35:f3:b5:52:0a:f4:d6:21:81:48:f3:05:89:5a:
                    08:65:0d:1b:96:c0:68:23:86:4f:d5:a9:d2:97:ce:
                    c1:dd:39:06:22:e7:b1:a4:d5:9d:4a:33:0c:10:e2:
                    46:e3:df:89:dd:d6:9a:57:40:4a:5d:0b:1e:22:69:
                    d2:b4:cd:4f:3d:2a:8c:91:b6:7f:3a:ad:99:f1:8e:
                    68:f3:dd:d8:98:96:5a:8a:c5:49:5b:9a:85:30:b8:
                    1c:ca:ed:75:f0:2d:15:e4:e2:52:89:c0:8f:14:cb:
                    48:e3:b4:83:7f:9d:94:bb:c1:84:0b:71:d7:25:6c:
                    a3:6b:83:bb:f6:dd:5d:a8:e4:ed:2f:5b:71:06:10:
                    3a:18:a7:14:84:fb:50:4b:e6:f9:01:14:a0:a3:c9:
                    74:7f:b3:65:e1:8a:d3:fc:3a:6c:88:c7:a3:b0:bc:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9A:5D:75:75:6F:B3:5C:62:6E:AF:31:72:B7:B6:27:86:BD:A0:6F
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/6656F764FEB611E99758773FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:82:d1:ee:b3:dd:64:28:77:3e:6f:53:13:0e:42:2f:cc:ec:
         70:c1:6f:62:71:c8:70:22:33:f8:51:a6:15:19:c8:55:76:5d:
         ee:07:d2:21:5f:c0:8b:72:8f:1b:74:2d:02:ac:e0:59:65:39:
         d5:dc:b9:c6:be:cc:93:ac:81:30:e8:fb:b4:5b:7e:1d:d6:52:
         23:32:6c:f8:5c:ef:7a:39:f6:c1:34:89:20:aa:7e:53:95:60:
         fa:90:dc:1a:30:71:61:5a:71:c4:14:8d:3a:3f:b9:6c:a7:c8:
         28:a4:61:f5:63:9f:0e:b6:15:52:40:6f:1c:ed:cd:3d:a5:bf:
         39:1c:31:d1:c5:45:83:c2:fd:67:59:70:83:3a:6d:eb:a9:05:
         05:93:22:df:55:16:23:8a:6e:3c:0a:ba:96:a3:71:a7:28:45:
         eb:11:4a:d9:a6:b3:0c:76:74:79:d1:fe:1d:cd:b7:90:e8:5d:
         93:90:e3:41:81:4f:38:c5:dd:2d:0b:ee:29:6a:9d:8f:58:f5:
         e9:78:67:c1:46:47:3a:5b:63:d0:45:90:47:ef:d5:eb:a2:77:
         35:2f:c0:34:d4:be:8a:83:26:6a:3c:56:2f:d6:47:aa:49:7b:
         bc:23:b8:30:75:44:09:e8:b7:c4:d1:01:e2:3e:25:77:6e:f1:
         79:24:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----