Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/4A77BBB2B59611EB9B8C530AC4F9AE02.roa
File:                     4A77BBB2B59611EB9B8C530AC4F9AE02.roa (raw, json)
Hash identifier:          xXk59IIluqurr0dRgBJr1zGD25pxyraV4CZHVpIXX6Q=
Subject key identifier:   6A:16:3D:43:FE:85:C2:AA:C1:85:F4:2C:10:5D:8A:3F:71:AD:2F:AA
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       02EB
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/4A77BBB2B59611EB9B8C530AC4F9AE02.roa
Signing time:             Mon 04 Apr 2022 01:51:32 +0000
ROA not before:           Mon 04 Apr 2022 01:51:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38215
IP address blocks:        103.164.236.0/24 maxlen: 24
                          103.164.237.0/24 maxlen: 24
                          2001:df6:5180::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Apr  4 01:51:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=624a4f24-bc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:a1:86:16:c9:cf:bd:b9:25:6f:7f:73:2e:
                    e4:05:ac:e8:4b:1a:2b:c3:7d:83:25:d0:06:35:5f:
                    f2:cb:29:b2:8f:db:0a:53:5f:7a:35:e4:10:3d:c0:
                    58:86:49:67:5f:6b:23:c6:6e:4d:af:98:09:80:13:
                    a1:09:bb:ef:29:0a:59:e5:b9:ed:30:e0:f0:9a:d3:
                    67:9c:9f:d0:94:6d:89:d1:7e:f2:95:e6:ff:75:1e:
                    5c:b9:69:ac:d4:12:91:8e:3f:90:68:ed:6c:01:fc:
                    88:42:0a:44:fb:b6:62:e1:82:61:6d:6c:6c:13:c8:
                    9e:67:fa:27:27:c1:27:66:b9:7f:a6:f5:1c:5d:e3:
                    a9:17:e2:65:17:46:e4:03:a4:79:d1:d5:72:e6:0a:
                    6f:5d:9c:41:0a:21:3f:03:2b:f1:ae:2e:c6:d1:95:
                    f6:be:b5:cf:01:b0:0f:6b:af:88:81:32:b7:75:16:
                    45:1e:b5:b5:07:94:c8:ca:59:d7:4a:cc:da:33:ed:
                    67:37:4e:6e:6c:73:c6:49:8f:af:20:f7:dd:96:2a:
                    28:32:24:cc:b2:18:b6:0c:01:9f:7b:36:ad:12:2b:
                    42:5c:aa:ac:50:9d:94:4f:da:9a:fa:3f:e8:4d:a2:
                    f1:61:98:85:d0:30:6f:a8:9d:c5:71:2d:cb:50:33:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:3D:43:FE:85:C2:AA:C1:85:F4:2C:10:5D:8A:3F:71:AD:2F:AA
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/4A77BBB2B59611EB9B8C530AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.236.0/23
                IPv6:
                  2001:df6:5180::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:d4:7c:d9:3b:49:ec:d2:c5:9f:ac:88:2e:58:06:3a:d4:
         a8:10:45:84:c3:1b:be:28:f3:cd:1e:d6:c2:97:4f:eb:dc:c9:
         ed:e1:c2:f7:f5:92:15:57:da:7d:6e:16:82:11:c9:89:08:51:
         0e:2c:e9:45:9a:01:2e:17:d3:7e:3b:b2:2b:77:c5:8d:2e:4c:
         4e:ff:1b:6d:f1:b1:06:6c:dc:68:94:0d:0d:08:2d:53:ea:2c:
         cb:cf:2c:4b:85:b1:89:19:84:47:db:04:3a:f1:b9:8c:7c:d9:
         94:9b:fb:f9:e3:56:ee:48:90:25:68:e6:44:ab:49:cc:d2:c5:
         a6:fc:69:4c:c3:0f:cc:ec:c4:54:15:5f:27:75:d6:5a:c8:99:
         c1:72:e7:5f:cd:33:fe:d6:0e:63:41:03:9d:11:f5:79:31:9a:
         92:7d:12:5a:b7:41:a4:ad:a9:a2:41:d4:61:1a:71:dc:4f:85:
         77:b6:18:03:3d:1c:17:31:17:1d:80:ae:4f:33:2a:36:3c:e0:
         55:75:b6:34:59:e4:15:be:28:93:0b:6b:af:c7:7a:dd:ef:4f:
         37:df:de:8d:d9:c2:0f:31:22:43:e8:6e:d2:18:8e:39:db:64:
         36:a8:c2:7b:d8:53:72:9e:f8:ed:52:2c:3c:80:b2:2f:37:fa:
         3c:84:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----