Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/358EA89C952811EC8933735DC4F9AE02.roa
File:                     358EA89C952811EC8933735DC4F9AE02.roa (raw, json)
Hash identifier:          fNOx9+72pNwO5/5ouNvOkXpHBEPLAqz+iR3aP3V4Ahs=
Subject key identifier:   5D:36:97:48:A2:E9:38:24:A7:2F:2C:05:4E:06:94:F3:0B:5B:55:A7
Certificate issuer:       /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial:       04
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/358EA89C952811EC8933735DC4F9AE02.roa
Signing time:             Thu 24 Feb 2022 04:14:08 +0000
ROA not before:           Thu 24 Feb 2022 04:14:08 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     64615
IP address blocks:        103.146.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
        Validity
            Not Before: Feb 24 04:14:08 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=6217060f-2d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:f4:4d:94:ea:80:fb:75:c6:4a:4d:8c:62:
                    d7:d6:45:cb:ee:8e:eb:14:eb:d4:40:cd:b6:6b:87:
                    fd:42:13:6d:2d:92:1a:81:c7:ef:e3:4a:d5:c3:64:
                    8b:57:87:0e:54:03:0a:bb:fb:8b:86:19:29:e6:12:
                    2b:11:cf:50:4c:30:39:18:cb:5b:31:d5:a4:27:3b:
                    05:d2:72:46:09:1c:a4:65:f6:6d:11:9b:d4:a8:97:
                    7c:0c:4f:27:f1:56:d6:03:d0:76:0d:c7:cf:77:9c:
                    25:ef:66:8e:72:71:29:1c:74:db:90:f3:cb:79:84:
                    33:7a:84:a4:f4:f7:6b:73:f7:cc:f2:d9:6f:44:e4:
                    41:ef:ec:c3:41:f3:04:7c:e7:28:a6:52:09:f0:55:
                    79:31:f1:02:27:2a:62:20:71:6b:46:a1:db:f3:38:
                    49:15:24:d7:e5:30:bd:bd:fa:7a:db:67:6f:bc:cc:
                    86:7e:39:fd:a6:08:ef:0b:8d:a0:32:b6:95:69:6e:
                    16:81:4a:3d:f7:08:eb:a4:8c:9d:74:f7:ce:e4:7a:
                    f7:5d:44:f3:fb:27:81:dd:f1:66:79:7b:94:14:e3:
                    11:0e:9c:55:81:c2:ad:67:8d:ea:56:2a:87:e6:89:
                    98:b9:9f:ae:62:1f:e1:63:a0:3f:81:77:d0:44:56:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:36:97:48:A2:E9:38:24:A7:2F:2C:05:4E:06:94:F3:0B:5B:55:A7
            X509v3 Authority Key Identifier:
                keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/358EA89C952811EC8933735DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:36:65:1b:e8:ea:57:e5:2c:cd:4f:7e:60:f0:a1:09:45:85:
         3f:5b:c9:e7:28:ea:9c:6b:82:54:86:ef:91:45:42:e1:53:65:
         c6:cd:87:f5:30:29:95:e1:49:b3:0a:88:45:94:98:ba:fa:fd:
         a0:7b:b3:38:29:06:5d:d5:c6:4f:78:f8:dc:1e:86:76:ac:b7:
         3e:33:85:f5:4d:1d:b1:36:67:b7:85:f6:ee:e0:37:d2:a8:49:
         45:7c:ba:83:1e:16:d0:d7:fb:9c:b1:48:d7:ca:5f:81:a0:5b:
         e9:43:7b:60:03:7d:3c:44:c7:a3:1a:c3:c5:69:57:4f:80:4a:
         d5:fd:f9:52:36:6b:7a:2f:ad:06:b8:82:da:a3:92:bc:3f:2f:
         ec:81:23:d4:14:34:ef:50:15:d3:13:25:55:77:e4:82:97:ec:
         0e:ca:ae:0f:7c:ef:82:69:30:ce:36:e8:74:d8:27:df:fb:14:
         b1:18:bd:a2:02:17:44:59:0d:d4:ae:d6:e9:21:b4:34:0b:1e:
         45:43:eb:d3:e5:5f:4b:28:19:b4:29:6c:86:e8:f0:e8:2f:ad:
         f0:9f:51:f2:19:1e:80:ee:da:bc:cc:9c:25:7d:3a:99:e7:f5:
         31:8d:46:c5:89:99:08:01:7b:46:95:34:c1:c2:81:9a:54:d4:
         fa:70:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----