Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/CE860354748C11ECA9BF0D3CC4F9AE02.roa
File:                     CE860354748C11ECA9BF0D3CC4F9AE02.roa (raw, json)
Hash identifier:          oHkqhhrB3dEum3a2h/izpv9ObTqJK+Cz8iBYXoWoQlc=
Subject key identifier:   6F:55:D6:27:43:6E:B6:2C:39:B0:CE:9C:5C:31:25:32:D2:3B:CC:D8
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       0213
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/CE860354748C11ECA9BF0D3CC4F9AE02.roa
Signing time:             Thu 13 Jan 2022 16:21:05 +0000
ROA not before:           Thu 13 Jan 2022 16:21:05 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        103.159.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: Jan 13 16:21:05 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=61e05171-944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:ea:11:ea:39:68:47:1e:f1:f7:2b:dc:89:
                    1e:f8:a5:dc:4f:9f:58:5a:0a:77:09:b6:6b:9c:9b:
                    a2:89:7c:67:3a:f3:30:ee:96:17:67:5d:ff:78:fa:
                    1d:51:4a:51:3f:c5:ea:ea:8d:28:40:4b:3c:a2:8e:
                    98:d3:46:69:56:0a:4a:c3:ff:3f:b5:6a:d6:22:bb:
                    05:c7:46:5e:c0:4b:38:d4:43:a7:3d:bb:54:4b:78:
                    86:9a:e3:b6:0e:3f:ea:e8:c7:81:ca:e7:f7:b8:fc:
                    7c:0e:8a:3c:cf:30:d8:df:d6:05:45:64:e6:84:7c:
                    5c:81:a8:b9:3a:a8:44:ef:6d:0f:7b:5e:da:4a:9e:
                    7c:aa:d7:e6:72:df:18:14:db:3c:80:3f:b9:da:e5:
                    4f:c7:92:30:44:a5:b1:af:31:eb:fe:30:fc:e0:b6:
                    ed:37:45:ba:59:05:f5:f2:e5:ba:bf:47:e5:3a:6f:
                    a4:8f:7c:ef:c9:0a:da:5d:d8:55:44:d0:ab:ca:4f:
                    3c:24:c7:52:b8:fb:f9:cc:60:dd:78:9a:aa:56:52:
                    fc:cd:5e:fd:14:cd:d2:f2:e9:60:26:c7:ca:ad:f7:
                    e3:a2:c1:cf:eb:f0:fc:92:9c:bb:ac:0c:d6:19:4c:
                    5f:77:e0:11:d1:d7:0b:3e:83:58:17:31:e6:0c:d2:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:55:D6:27:43:6E:B6:2C:39:B0:CE:9C:5C:31:25:32:D2:3B:CC:D8
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/CE860354748C11ECA9BF0D3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:f4:bb:69:66:49:92:be:ab:2f:b0:58:34:ae:88:e4:a5:
         c6:75:67:69:c2:eb:54:57:09:c3:e0:e2:bf:76:be:19:48:54:
         00:6a:99:72:2b:fb:34:1c:bd:00:a9:0c:c2:fd:76:80:be:b8:
         c2:b0:b6:91:ed:e1:1e:50:d4:9b:53:49:b5:b2:c9:86:f3:99:
         0e:4a:b5:01:e8:a4:71:f0:d7:ef:f7:00:5e:ea:21:82:c8:b0:
         2e:b3:98:0a:fa:46:64:29:86:c9:73:6e:f5:c1:0b:ec:53:2e:
         b8:e5:b8:0c:bf:6c:6e:e3:8b:a8:31:5b:9f:7b:4d:ea:19:c7:
         81:11:94:34:fe:e3:c8:9d:c5:b3:ce:8f:c5:ed:99:7b:ac:88:
         e1:2e:31:a0:f5:4a:ef:3a:cc:4c:c6:e2:fb:29:08:92:62:ba:
         ef:99:28:4a:13:77:ef:68:fe:3c:c1:6b:f7:22:55:f6:d2:d9:
         9c:7b:f2:cf:1e:5c:4f:4e:87:4b:49:a3:29:d2:dc:52:a5:42:
         68:55:3b:fa:c7:45:4f:e0:1a:3d:df:5d:14:26:08:2c:7b:3e:
         60:78:d0:ff:8b:a4:72:f8:4b:7a:5f:fd:61:2a:5b:78:28:68:
         4f:22:11:f5:ab:96:aa:d5:31:d2:4d:cb:81:66:91:a4:d8:5a:
         25:18:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----