Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B8609F2E201F11ECA75B4935C4F9AE02.roa
File:                     B8609F2E201F11ECA75B4935C4F9AE02.roa (raw, json)
Hash identifier:          32VPe7ZOWlpzUMr69qGtN8GvijLq1KbHmXxSC2bwSWE=
Subject key identifier:   14:E2:DC:F5:87:BE:AB:F2:25:C5:D8:53:73:EE:08:DD:42:8F:17:9C
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       0558
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B8609F2E201F11ECA75B4935C4F9AE02.roa
Signing time:             Mon 13 Dec 2021 10:18:37 +0000
ROA not before:           Mon 13 Dec 2021 10:18:37 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     138523
IP address blocks:        103.127.180.0/24 maxlen: 24
                          103.127.181.0/24 maxlen: 24
                          103.127.182.0/24 maxlen: 24
                          103.127.183.0/24 maxlen: 24
                          2404:2640:4000::/34 maxlen: 34
                          2404:2640:8000::/36 maxlen: 36
                          2404:2640:9000::/36 maxlen: 36
                          2404:2640:a000::/36 maxlen: 36
                          2404:2640:b000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Dec 13 10:18:37 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61b71dfd-a44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:2b:bc:b4:52:6d:c5:7d:fb:9f:c2:8e:3f:
                    a2:4c:bc:d0:e6:cd:4a:ef:0c:97:73:6e:8b:dd:80:
                    43:ba:1d:65:29:f4:65:a7:b6:ef:4d:b0:85:7a:01:
                    d9:19:81:95:0e:b5:d2:b3:83:8e:6f:6c:21:6c:a8:
                    98:95:4d:53:86:e1:9c:9c:49:30:e8:29:db:02:0e:
                    0d:aa:4e:50:a2:3d:e7:c9:ba:da:0f:72:ab:dc:4d:
                    88:92:4e:3d:3e:0d:4f:7a:5a:a1:6a:e8:a2:b2:83:
                    49:b2:a9:e5:9e:f9:30:5c:9f:31:6c:73:1e:bb:a3:
                    7f:0a:40:66:26:62:16:33:9e:13:80:82:a2:95:b0:
                    e7:d1:61:0b:50:84:43:e9:dc:c3:2b:6e:55:4f:f0:
                    03:fc:38:24:34:7c:11:ea:86:7b:2e:c6:0a:c9:61:
                    90:ce:07:bc:5c:7c:b5:4e:94:41:5a:91:e3:b7:3c:
                    df:3b:89:33:19:f0:04:78:d7:ab:44:4a:e8:2c:ac:
                    d0:30:31:44:0b:57:e4:50:66:87:dc:5b:b0:c2:e6:
                    d6:49:11:82:92:63:69:fe:e1:38:be:d1:97:59:22:
                    9e:f4:59:9d:77:28:d1:d7:d5:b8:dd:69:5c:82:a0:
                    77:a5:35:3b:61:70:b1:68:8d:b4:48:1d:86:80:06:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:DC:F5:87:BE:AB:F2:25:C5:D8:53:73:EE:08:DD:42:8F:17:9C
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B8609F2E201F11ECA75B4935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.180.0/22
                IPv6:
                  2404:2640:4000::-2404:2640:bfff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:60:fd:87:d5:af:e6:f0:7c:f8:28:33:11:39:38:40:ed:
         7c:21:1a:e4:7b:d0:d4:c3:c8:ca:37:fa:a7:bc:3b:56:54:33:
         02:d4:52:bc:d7:5e:5b:1b:ff:36:d1:77:3c:67:28:b1:9f:19:
         4f:9e:b2:bc:3f:8e:93:91:28:ab:66:bb:80:73:a6:0c:c7:18:
         58:e2:2e:60:56:88:12:8d:a0:33:2f:b3:a6:ae:cb:17:cc:6b:
         2e:70:34:1c:ff:23:47:51:d1:e7:13:7b:31:d5:b3:ad:43:1b:
         c6:72:29:5d:fc:4f:d3:c8:d5:14:6f:ab:9e:1f:83:3d:6d:c5:
         34:bc:bd:12:0d:75:61:b6:3f:1a:7f:4e:cd:c6:ae:b3:d0:e6:
         b5:0f:04:88:58:fc:b9:e6:78:9f:cd:fb:a1:0c:29:83:70:70:
         43:bb:91:5c:0d:09:f2:5f:02:9b:a3:64:22:57:21:e6:c3:ce:
         93:ec:0a:38:ae:ad:cf:13:38:22:88:db:eb:fc:32:1b:f3:54:
         2a:fb:80:63:ad:e2:63:32:52:92:9c:f4:0c:ca:08:17:73:0a:
         4a:d4:9c:91:c9:7f:1c:f5:dc:2f:5f:c9:4d:dc:f4:6c:b9:60:
         bf:3a:75:5c:e6:82:09:5f:50:9f:35:c9:23:75:ee:e5:68:35:
         ee:d9:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----