Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/488A458A23AA11ED95ECB53FC4F9AE02.roa
File:                     488A458A23AA11ED95ECB53FC4F9AE02.roa (raw, json)
Hash identifier:          5v1L+fk5V+UZDNBZx6hvfRRCAAeqO5IIY1tnEBZ1juU=
Subject key identifier:   FB:8B:83:CA:5D:AD:EE:E2:FB:0B:A8:4C:76:D6:80:F0:BA:EE:52:B3
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       02C5
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/488A458A23AA11ED95ECB53FC4F9AE02.roa
Signing time:             Wed 24 Aug 2022 12:42:59 +0000
ROA not before:           Wed 24 Aug 2022 12:42:59 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     132489
IP address blocks:        103.172.142.0/23 maxlen: 23
                          2001:df0:6a40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Aug 24 12:42:59 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=63061cd3-adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:14:1c:19:2a:ae:65:7d:b2:fc:dd:0f:14:
                    d2:24:fc:67:a6:9c:eb:dd:77:4b:a9:2b:26:0b:ed:
                    bd:c8:f6:c0:97:82:40:61:b9:16:4b:11:13:80:1e:
                    c4:ba:a9:70:c4:a4:f7:02:10:a6:32:15:99:69:b1:
                    c2:67:98:74:c2:0f:59:92:e0:51:3b:c6:28:97:aa:
                    9e:a9:74:bc:43:9e:90:37:fb:4e:d0:1b:40:dc:da:
                    1c:7c:86:fe:75:b6:ef:09:29:fc:7e:9d:26:10:0a:
                    44:2f:17:69:c1:61:35:2d:81:b4:db:8c:f4:04:4c:
                    2a:07:e5:63:fc:57:52:45:c0:2f:6b:00:c5:8a:48:
                    3b:27:d0:37:3b:b5:71:b5:3f:bd:e2:ff:ea:9a:a3:
                    aa:73:6e:1d:d9:03:36:7a:60:7a:ab:96:46:d7:cc:
                    53:92:e6:fb:7a:34:54:d2:3c:8d:e1:64:c9:c3:9f:
                    38:c6:2d:ac:0f:a9:b6:07:83:f1:da:32:6a:c2:85:
                    da:cb:96:37:2c:5d:50:6e:b7:64:4f:59:04:2e:a3:
                    fa:5d:c7:a7:a2:4c:0d:11:66:20:aa:ad:b9:45:e5:
                    92:e2:ff:cd:ae:c0:e5:81:8c:31:7f:d5:d7:c6:32:
                    6c:49:05:4a:1f:63:64:85:e1:0c:2e:4a:3e:c2:ec:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:83:CA:5D:AD:EE:E2:FB:0B:A8:4C:76:D6:80:F0:BA:EE:52:B3
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/488A458A23AA11ED95ECB53FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.142.0/23
                IPv6:
                  2001:df0:6a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:0f:ec:96:bb:db:63:a0:0b:45:15:e6:a6:99:1c:cf:95:
         fb:01:1b:99:52:f7:50:9d:b9:20:44:88:0a:07:21:81:71:ef:
         60:3b:02:ec:01:b3:c5:01:7f:b5:f3:29:36:ff:b8:37:b1:f2:
         7f:1f:05:bd:79:23:b0:89:31:b8:21:31:67:4b:2d:42:ef:cd:
         bc:c5:fe:e1:88:74:c1:d4:58:ce:e8:f2:ca:61:de:c0:61:d3:
         72:95:96:44:d6:ac:bd:e9:76:76:fb:33:33:d6:93:cc:d9:f7:
         36:83:93:e9:e2:a0:e1:d0:16:40:c3:dd:cd:17:e4:85:77:8c:
         96:a5:8c:64:21:b8:3e:68:76:09:f5:2f:28:bd:00:f1:3a:71:
         e3:b5:aa:50:25:e2:db:ff:7e:e8:11:8e:03:7e:70:03:07:3b:
         bf:b2:5e:99:1a:97:74:ae:bb:bb:c9:a2:47:b2:05:80:7c:74:
         f6:e8:30:f0:9c:8b:1c:25:9c:ed:a4:82:32:cc:fe:07:a2:d0:
         2e:2c:3f:4c:84:91:bb:53:48:b1:d1:61:b9:a7:f3:62:25:21:
         e7:f5:a9:95:cc:ab:ff:61:d9:c1:4f:85:2b:59:f6:58:9d:31:
         01:20:11:36:72:b2:a7:c7:32:a4:0f:ae:45:92:e5:f9:39:b7:
         a8:45:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----