Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
File:                     DA58144A813111EC988D1151C4F9AE02.roa (raw, json)
Hash identifier:          O0X3Zb9vQRO7wrnhCl5v4hwW7a4AIcKxUgjJtwbZNco=
Subject key identifier:   7D:63:F8:3E:80:20:0F:80:D5:49:89:25:D4:A8:CF:7E:94:FC:D7:DA
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       0D
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
Signing time:             Sat 29 Jan 2022 18:32:46 +0000
ROA not before:           Sat 29 Jan 2022 18:32:46 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     149419
IP address blocks:        103.178.216.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Jan 29 18:32:46 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61f5884e-6dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:e5:f2:74:31:0f:26:2f:59:28:bc:92:f2:
                    11:80:5d:56:26:c1:c3:57:18:d5:6e:30:da:02:19:
                    23:41:0a:34:27:40:4c:41:cd:16:53:c1:cb:f2:86:
                    fc:1c:78:d5:3c:f3:66:a4:79:ce:83:74:4b:d7:b6:
                    18:57:13:bc:e7:53:6a:4f:e4:1f:59:73:bb:99:bc:
                    27:f5:93:da:f0:1a:b1:d4:7b:f1:e6:ac:8d:b2:4d:
                    e0:6a:ef:17:ca:01:74:c4:97:48:56:87:9f:9e:c8:
                    66:35:46:a9:69:78:32:7d:52:28:33:96:68:e3:8a:
                    80:29:70:c6:9f:c5:55:a0:c1:2b:8c:63:90:70:15:
                    76:84:bf:76:f6:99:44:6c:e8:96:bc:f8:34:f0:d2:
                    62:0d:05:42:c9:dd:af:8a:e6:60:d8:e6:ea:03:1a:
                    f7:6d:e8:ea:f0:b2:7b:76:6a:93:c6:2b:ed:5d:07:
                    f1:26:ec:07:a4:74:1d:08:ca:60:6e:29:d2:18:7f:
                    d7:4e:0d:54:cb:2f:f7:4c:3d:cb:cd:19:e0:e8:d4:
                    ad:74:8a:b6:4b:4e:b3:28:83:10:bf:6e:88:73:29:
                    01:d4:a0:19:01:4a:6e:0c:ec:c1:d6:1d:11:82:17:
                    54:11:1f:e8:83:11:12:49:ef:96:48:46:90:c5:f7:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:F8:3E:80:20:0F:80:D5:49:89:25:D4:A8:CF:7E:94:FC:D7:DA
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:64:a2:9d:d4:20:a0:96:9c:48:0f:21:cc:01:35:6b:10:
         85:eb:c1:c6:b3:61:30:07:19:fe:bc:4d:fe:df:c5:58:59:75:
         a1:36:76:8d:76:c5:48:a1:91:ac:b1:21:f8:85:f2:5b:c8:7f:
         a2:1a:2e:66:3a:82:b9:e0:51:47:26:d5:b8:dd:2d:0f:0b:46:
         38:dc:0b:8e:fa:20:25:ab:33:0e:88:7f:ea:9d:6e:05:54:01:
         c6:1c:60:b5:14:0f:75:6c:84:da:46:a6:71:cf:4f:45:7e:5c:
         65:05:15:fe:36:a0:06:35:26:9f:5e:d7:e6:21:d8:a2:a2:d2:
         bf:b7:69:6b:7b:22:a2:e0:41:4e:dc:ce:b7:ba:cf:55:53:5d:
         7c:67:df:e2:d6:36:7b:96:90:2d:67:2f:07:2b:bb:e3:60:a8:
         3b:16:82:95:d4:47:3c:a1:1a:6a:25:27:9b:1f:25:57:fe:1c:
         65:87:74:43:7f:f8:1a:78:f4:7b:40:e6:4a:a7:42:eb:03:06:
         a8:66:6a:7b:2f:e7:1d:c2:34:52:53:61:45:93:c4:58:2f:64:
         42:90:29:30:57:85:a2:43:57:b1:9e:d4:5c:6e:94:f8:51:b7:
         b7:14:ed:31:fa:f6:91:e6:c8:4d:51:8b:e6:c2:ea:51:d7:f4:
         86:67:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----