Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/65E15C8C415511ECA2FD715CC4F9AE02.roa
File:                     65E15C8C415511ECA2FD715CC4F9AE02.roa (raw, json)
Hash identifier:          79D2Xb8tqbeObax8xfS1NRkjIs8Lg2Ir3NHcs4OyGCQ=
Subject key identifier:   16:5E:76:1F:29:16:D1:6B:17:62:E8:5A:50:DC:C4:05:EE:8B:49:F0
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       07C6
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/65E15C8C415511ECA2FD715CC4F9AE02.roa
Signing time:             Tue 09 Nov 2021 12:05:58 +0000
ROA not before:           Tue 09 Nov 2021 12:05:58 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     10075
IP address blocks:        103.113.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: Nov  9 12:05:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=618a6426-a2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:80:5c:f9:ac:60:c6:ec:e2:0e:b5:f6:56:
                    a7:37:13:f1:38:c9:ee:90:a8:f5:43:65:94:a7:ea:
                    b5:99:12:35:b6:63:14:67:5b:87:a2:36:69:a9:f5:
                    3f:5b:ce:a1:71:a5:43:77:f3:a6:54:ae:3f:06:e1:
                    ea:c1:94:0a:64:84:21:b8:b6:11:d4:27:ee:dc:54:
                    91:29:fb:83:9c:ce:7a:95:c3:18:ae:46:b8:95:89:
                    f3:b2:9a:df:63:c6:af:62:6b:8a:70:38:11:7b:2d:
                    69:31:ff:ec:1d:b4:c3:65:a7:5c:d2:27:7a:dc:91:
                    c4:c7:42:17:25:93:89:25:f9:ff:85:37:18:b2:6d:
                    e6:68:59:15:d8:57:86:11:13:6e:d7:bf:fb:eb:26:
                    15:ae:c4:5b:4d:b4:9c:78:9d:ea:6f:4a:2f:2d:d4:
                    55:b7:c6:e6:a5:c6:ab:6a:cf:7b:d3:83:b7:6f:b7:
                    c6:b4:ef:6a:7c:56:4e:6f:df:28:28:c2:b6:6a:25:
                    89:6a:80:54:3d:2c:7b:06:b7:ad:72:6c:fe:ea:3c:
                    68:67:74:64:90:fe:1b:36:34:62:f5:d4:12:bd:6f:
                    b7:ef:98:2a:b1:61:05:bd:e3:5e:61:c8:2b:99:72:
                    4d:a0:da:ae:c7:05:0a:a8:12:2d:8e:b4:cb:4e:6f:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:76:1F:29:16:D1:6B:17:62:E8:5A:50:DC:C4:05:EE:8B:49:F0
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/65E15C8C415511ECA2FD715CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:c5:b4:15:8a:c3:43:19:67:3d:ef:22:26:ec:a3:09:31:
         ab:57:9a:00:ff:47:fc:22:2c:3f:d2:b1:1a:96:99:62:8f:f2:
         34:13:33:80:46:44:c7:1a:3c:da:e8:83:12:dc:f2:02:b3:8a:
         05:e1:75:d9:cf:80:be:d2:ca:35:b7:48:73:25:61:47:ef:15:
         4b:7e:3d:90:6e:b0:e5:ae:a3:13:01:16:ee:ed:a6:c7:d9:60:
         e3:30:ab:18:70:e2:19:51:a3:1b:ec:05:0e:48:b4:90:9e:84:
         a5:b1:86:b6:68:c6:7b:36:36:b8:9e:30:83:65:73:80:73:16:
         fe:c3:7f:33:e0:f2:1a:8b:71:ec:44:ca:40:50:9b:15:92:85:
         e9:c4:aa:ce:7b:46:dc:a0:ec:a3:de:75:ba:40:d3:73:39:71:
         28:d2:dd:ae:f1:43:f7:1c:c4:bf:c8:19:bd:b0:30:81:fb:9a:
         bf:ce:2d:85:ca:7b:db:40:86:6f:03:2e:20:64:1e:1b:db:0b:
         b1:13:5a:ca:ce:e9:7a:53:4f:83:44:16:41:68:8c:97:b3:3b:
         29:9b:cd:e0:fe:a5:db:c6:7a:76:0d:e6:ee:59:b0:d9:3e:8b:
         23:94:49:f1:59:ef:07:13:13:1d:40:19:21:9d:d0:a1:97:7e:
         0f:2c:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----