Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/EF1EC34606F411EB950E0358C4F9AE02.roa
File:                     EF1EC34606F411EB950E0358C4F9AE02.roa (raw, json)
Hash identifier:          4/Cr7/PTaHWLvKsTYxtK7LG8TXsEuIfh1oQVhiToyW8=
Subject key identifier:   E3:D8:63:FC:67:73:E2:3F:87:56:1D:D1:24:9D:31:D6:55:EA:A2:DF
Certificate issuer:       /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
Certificate serial:       049F
Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/EF1EC34606F411EB950E0358C4F9AE02.roa
Signing time:             Thu 26 Aug 2021 22:37:44 +0000
ROA not before:           Thu 26 Aug 2021 22:37:44 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     60945
IP address blocks:        103.141.24.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
        Validity
            Not Before: Aug 26 22:37:44 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=612817b7-a13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:6f:a9:e0:53:c2:43:69:61:52:c6:7a:04:
                    16:f8:f7:63:be:65:ec:15:54:ed:5d:9a:00:ac:f5:
                    9c:a9:81:f7:02:61:7a:6e:b6:25:ff:62:46:42:81:
                    84:c5:39:ee:08:90:c1:46:39:63:95:a8:7f:ad:c1:
                    75:33:ac:f6:8a:45:b0:d0:b2:af:df:38:c2:dc:22:
                    27:d3:a8:18:45:cf:b2:00:69:e4:ed:f7:28:63:8a:
                    e1:f5:14:78:04:d2:c9:6a:35:1b:a6:f1:0e:c2:b0:
                    9a:ea:20:f3:a9:3d:80:d9:b7:0d:d5:82:c9:84:cc:
                    eb:75:3f:1f:78:39:09:1b:20:09:76:cf:90:6c:32:
                    6d:58:2d:02:79:10:1c:68:ac:c3:48:6e:ef:c4:23:
                    f4:b3:f6:92:b6:88:e9:d3:37:6d:2d:50:4c:32:68:
                    9a:86:87:de:68:f9:8d:2b:07:56:a1:02:e2:da:89:
                    c9:d9:db:9f:04:42:98:5e:37:90:3c:8e:cc:68:bc:
                    b4:40:47:87:5c:bc:c3:64:9d:12:de:d5:48:8f:a3:
                    22:91:da:d1:d3:44:90:69:7d:5a:07:98:8c:10:a5:
                    06:89:70:9e:ad:e8:73:bc:6b:9d:61:13:03:ae:2d:
                    fa:d4:85:1a:f2:d1:0c:f9:0e:5a:4f:90:ca:f0:04:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:63:FC:67:73:E2:3F:87:56:1D:D1:24:9D:31:D6:55:EA:A2:DF
            X509v3 Authority Key Identifier:
                keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/EF1EC34606F411EB950E0358C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:d0:1a:55:00:1e:e7:48:65:fb:75:f9:80:07:7f:93:3a:
         db:ea:df:1d:8f:bd:80:7a:80:10:60:4e:65:cf:26:a0:a3:01:
         47:30:46:d4:ac:47:87:c7:1c:6d:f9:c6:e8:94:16:87:83:68:
         ab:a0:40:8c:79:b9:5e:97:b3:31:76:27:bc:53:eb:1d:77:12:
         9c:07:be:2d:59:2c:23:cb:26:77:39:af:d4:03:06:8f:f8:2e:
         e2:93:1f:dd:d4:0a:8f:b3:6b:b9:2f:8c:89:9e:44:85:22:eb:
         18:71:2a:7b:8c:d5:f7:67:80:cc:05:79:ff:78:57:db:e0:0f:
         46:99:d5:fb:79:04:83:97:c3:aa:ca:8b:d4:87:26:73:01:c3:
         41:bc:a4:24:0e:28:2b:32:2d:59:6a:2b:54:2e:2d:9c:6d:9d:
         4e:36:a1:9e:4d:85:8b:25:43:0f:a2:15:69:d5:63:d8:76:91:
         e4:92:f8:4a:37:ab:bc:b5:f8:58:6f:46:df:fc:4f:21:a1:95:
         03:45:b6:e5:26:0a:47:33:09:04:8a:a4:3b:c1:86:82:3e:0c:
         bc:b2:08:c2:a7:93:03:02:c5:93:a7:aa:5e:fe:b5:e3:13:ff:
         e9:98:09:b3:a0:7e:4a:92:e9:b3:db:e6:a3:34:5a:d1:81:e7:
         b3:a8:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----