Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
File:                     D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa (raw, json)
Hash identifier:          ToC94IZFl3fjlk1BN9ccO82BHzizw5cNvnPwCFezm9E=
Subject key identifier:   C1:2D:46:4B:7F:85:E0:6F:47:5F:B3:4C:24:8C:04:54:60:CE:B7:E0
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0951
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
Signing time:             Wed 23 Jun 2021 06:48:13 +0000
ROA not before:           Wed 23 Jun 2021 06:48:13 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     141765
IP address blocks:        103.232.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2385 (0x951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun 23 06:48:13 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=60d2d92c-2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:81:30:7c:02:c0:0f:a7:6f:ee:70:38:93:
                    74:ea:06:0d:ff:5f:06:8a:66:48:9e:14:1e:17:71:
                    95:ba:35:17:44:f9:7b:41:39:01:34:dd:a9:c1:fd:
                    ee:76:c2:db:0f:f5:d2:ea:af:3b:87:e4:0e:3b:79:
                    8e:de:25:2d:46:84:ae:b4:7d:ef:32:70:eb:7a:de:
                    62:1a:c5:e9:a5:51:84:4b:10:7c:4b:5a:dc:fb:f1:
                    00:ed:d7:4b:13:04:b9:95:fd:30:45:d4:08:68:d7:
                    23:bf:d6:36:f6:59:26:ad:dd:4a:9d:79:cd:bb:5d:
                    05:b2:ac:87:8f:3c:54:fb:ff:57:58:fe:63:9e:1c:
                    95:f9:b9:c9:42:60:d8:70:db:07:9d:9e:02:17:f7:
                    c4:75:0d:dc:23:ad:a4:c4:c3:44:7c:ee:52:f0:3d:
                    d7:ae:62:da:ea:35:71:4c:39:a3:07:6b:33:77:54:
                    05:79:40:0a:52:7e:80:04:be:a1:0d:d2:5a:8f:a0:
                    39:1b:a5:be:96:69:a8:7a:82:8f:49:b1:43:52:7c:
                    d0:2d:4b:c2:f1:46:33:24:c6:ba:70:40:b1:94:28:
                    95:f0:24:fb:fd:06:e3:29:af:8a:b1:8b:e1:9f:19:
                    57:a0:c5:11:55:4d:2d:f2:f8:30:73:1a:c4:56:0c:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:46:4B:7F:85:E0:6F:47:5F:B3:4C:24:8C:04:54:60:CE:B7:E0
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/D47DCFCA7B2D11EBBF8CC22DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:49:8f:fe:b1:10:cf:02:9c:af:0e:8c:48:66:77:ae:3a:
         8f:5c:5a:83:b8:e3:a3:20:fc:06:42:65:d4:54:a8:50:e6:aa:
         28:3d:b6:1a:da:ab:e4:f0:3a:dc:11:a8:e3:54:65:80:60:09:
         8e:b7:56:61:bf:18:12:89:aa:f5:de:65:21:85:74:d6:91:08:
         ef:ff:f7:11:63:fa:7c:a6:88:5f:d5:15:1a:d2:f5:ca:ee:6d:
         e8:c4:35:b6:f0:31:af:3b:d2:48:ec:eb:22:27:7a:2a:ce:fa:
         77:dd:ef:65:21:54:67:20:a3:4b:57:52:8b:de:18:73:9d:f9:
         5e:2d:eb:19:15:fe:3c:be:75:86:1c:98:a2:4a:0e:fa:e6:63:
         17:b1:c5:60:1c:8f:b1:bc:80:a0:96:88:20:f4:03:84:b6:3c:
         b0:1b:1e:a5:23:39:e0:f2:e2:7d:ae:98:e7:12:2a:b8:70:9f:
         00:5a:99:67:f6:98:9b:78:cc:44:a5:5d:04:d9:40:6d:75:ff:
         fc:e9:84:aa:44:ae:e3:09:da:f4:d2:18:2a:04:e9:2d:49:6d:
         38:81:8f:bd:1f:59:41:c6:ac:fe:f8:c4:63:30:22:e7:ca:bb:
         5c:27:2a:79:b3:77:75:66:ca:21:98:1e:58:44:ad:1c:a9:56:
         be:6d:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----