Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/3A1FEBC4960D11ECAAC81D60C4F9AE02.roa
File:                     3A1FEBC4960D11ECAAC81D60C4F9AE02.roa (raw, json)
Hash identifier:          WTZ+Ybpr6Yq2Xi/mlAw7Hu5dkE0uEcoIKH8wCykZjqU=
Subject key identifier:   18:34:27:DB:09:3F:75:87:81:78:F6:BD:44:2B:D2:4D:85:7B:30:CB
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       03
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/3A1FEBC4960D11ECAAC81D60C4F9AE02.roa
Signing time:             Fri 25 Feb 2022 07:33:30 +0000
ROA not before:           Fri 25 Feb 2022 07:33:30 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     40065
IP address blocks:        103.59.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Feb 25 07:33:30 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62188649-2221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:e9:d5:a2:2f:e9:05:10:fa:52:d3:09:81:
                    f1:3b:29:fa:b8:5c:d3:a8:15:a2:09:f3:dc:cc:09:
                    23:5b:14:e2:68:49:90:b4:c8:68:ec:2f:e6:e6:08:
                    3d:3b:42:b8:46:92:88:81:0b:4d:08:db:0a:15:e3:
                    2c:5a:96:cc:b8:cc:6f:16:4d:d6:e3:a9:eb:67:69:
                    69:e9:3f:4f:b3:41:fe:2d:8b:86:81:f7:51:39:b1:
                    e3:c3:30:db:d2:af:36:7b:19:a0:12:78:e8:08:0a:
                    84:23:34:b8:0c:99:82:24:64:fa:92:f4:47:c3:ba:
                    10:19:24:7a:45:79:5e:08:6e:64:25:a4:49:c8:cc:
                    0a:08:cf:84:fa:dd:23:a5:6a:54:36:18:17:25:b8:
                    3f:cc:d3:54:3e:9b:62:d8:49:3e:48:2f:49:c2:65:
                    70:c0:33:7e:e0:2c:c8:ba:3e:6d:f3:89:a2:96:60:
                    a6:a5:75:e3:9b:96:7f:08:7c:8c:d0:ef:99:be:2f:
                    45:ce:15:64:f6:86:99:85:c0:80:da:c8:1a:e2:dd:
                    52:65:f4:ea:4d:d0:34:55:7d:16:c8:56:90:94:b1:
                    65:de:b3:bc:21:72:9c:5b:dd:e5:d9:93:3b:ea:df:
                    5f:4b:2e:02:f8:0d:2e:3a:cb:50:7f:7d:cf:65:2e:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:27:DB:09:3F:75:87:81:78:F6:BD:44:2B:D2:4D:85:7B:30:CB
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/3A1FEBC4960D11ECAAC81D60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:fd:18:2e:f9:06:39:f8:ec:88:06:8b:ec:f0:e6:ae:50:
         5a:f1:8a:31:8d:c2:0c:7e:42:14:33:12:a2:01:11:f1:37:03:
         fc:5c:1b:c6:9c:c8:d7:1c:0c:43:03:8a:17:1a:aa:5d:35:18:
         2f:d3:0d:10:d4:1c:00:da:0d:07:6d:8d:17:47:12:fc:e8:71:
         81:cc:e5:37:82:14:23:fd:14:2b:71:cf:63:76:5c:63:0d:7a:
         25:1f:65:be:14:67:7e:f5:08:4d:af:f5:c7:44:38:2e:11:17:
         e6:bd:bf:da:d1:9b:42:8f:78:84:57:96:d3:81:ec:18:d6:94:
         bf:99:74:34:dd:8e:0c:b7:75:f3:cf:66:33:3e:21:aa:b0:f8:
         b4:bc:5b:bd:2a:17:a2:3f:b5:61:f7:15:5e:40:6c:d9:19:a3:
         02:d0:0c:34:51:d4:e5:2c:3c:15:d9:db:4f:1c:e9:ba:6e:30:
         50:52:c1:29:64:8e:1b:10:fe:e0:c0:21:4c:64:2c:a1:0c:28:
         e9:19:cc:79:b2:de:fb:3d:66:ed:03:70:4e:b7:bb:7b:0a:ca:
         50:46:8a:e2:fb:0f:48:3d:ee:a4:e4:14:f5:fd:03:83:91:71:
         e9:5e:69:89:c5:d0:c0:4c:c9:95:c1:74:b5:d7:77:e6:1c:39:
         b9:d8:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----