Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/EE4F5002DF3711ED99AC7D58C4F9AE02.roa
File:                     EE4F5002DF3711ED99AC7D58C4F9AE02.roa (raw, json)
Hash identifier:          ZrH803B942D5gIZn1UnOK69robBXJP+PjInw7ufSvCs=
Subject key identifier:   29:0B:CB:B5:F5:53:D4:B0:97:C3:AF:F0:52:50:5B:7D:DA:69:30:EF
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0D77
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/EE4F5002DF3711ED99AC7D58C4F9AE02.roa
Signing time:             Thu 20 Apr 2023 04:58:04 +0000
ROA not before:           Thu 20 Apr 2023 04:58:04 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     9833
IP address blocks:        103.232.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Apr 20 04:58:04 2023 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=6440c65b-c1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:7a:09:bd:0f:8b:0b:4d:31:a5:79:8b:70:
                    f8:81:5f:50:fe:89:1e:b5:ed:c5:e7:74:de:e9:62:
                    17:1d:10:b4:87:04:07:c6:9a:13:7d:e6:53:4e:74:
                    09:95:93:f6:a6:9d:54:c3:7f:d1:d0:bb:07:69:e8:
                    09:5b:35:48:7b:28:09:1e:43:51:fb:1e:06:f8:51:
                    fb:35:67:41:db:37:4e:05:c7:3a:f3:49:57:6d:8f:
                    ba:89:99:c7:b4:9e:e1:71:3d:f3:3e:7e:44:92:b1:
                    95:26:6c:12:3f:fa:c8:d5:1e:72:bd:91:5d:06:d9:
                    4d:3b:72:8d:ce:62:04:c2:dc:c0:5f:1f:20:ce:47:
                    55:95:91:48:f7:5d:38:b6:22:f9:18:c4:e7:40:12:
                    5b:41:f2:f1:b0:4a:95:ca:c7:b6:9a:ed:4b:cb:e0:
                    aa:df:9d:ff:23:25:3b:ab:1c:a9:c2:b5:ab:7c:88:
                    6f:a5:ac:e0:89:4e:ff:47:57:f5:9a:1c:12:e4:48:
                    c9:47:46:8b:7d:f0:6d:72:51:8a:f5:b3:b9:ef:50:
                    a7:43:32:84:af:5d:8e:db:0c:28:e6:8c:21:1a:8c:
                    98:76:72:ef:48:6c:01:9c:08:cb:4e:b9:2c:5d:38:
                    c3:16:23:ba:a3:26:a0:c0:d3:2c:0b:f8:71:ab:4e:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:CB:B5:F5:53:D4:B0:97:C3:AF:F0:52:50:5B:7D:DA:69:30:EF
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/EE4F5002DF3711ED99AC7D58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:f8:99:d6:1f:3d:df:cf:9f:49:17:86:96:8c:59:75:74:
         8f:1d:cd:c1:65:92:24:b8:96:5e:1e:c5:fb:5f:1a:fe:1c:37:
         94:9c:e8:a3:d9:7a:fb:9e:76:6d:4f:de:c8:6b:85:6e:89:82:
         3b:b8:9a:b0:fe:fc:f5:58:4d:89:92:ea:4d:27:70:ef:bc:bb:
         40:a5:e0:a2:dd:ef:ff:a2:c9:9d:20:38:36:32:8d:d2:6c:0f:
         42:2c:fd:15:25:d7:ed:d2:60:83:2b:1a:b4:5d:6c:09:ad:45:
         12:fa:2a:fb:8a:a6:53:5c:0c:0f:8e:81:b2:cd:80:77:5d:af:
         66:1f:0d:69:1b:a5:2e:ca:3f:62:e2:a9:b1:d4:89:5f:15:62:
         00:7d:39:82:56:a4:e9:52:01:62:d7:6d:31:d1:fe:79:52:1b:
         da:db:5e:76:bc:8e:91:9d:28:84:48:01:e2:bb:2f:42:47:8d:
         3a:ab:ef:9a:0a:64:9d:0b:3d:e2:7e:26:6d:9f:0d:a6:27:e5:
         82:86:a9:ea:c4:10:2c:4d:be:5d:57:6a:e0:1c:94:56:28:5e:
         fd:91:f6:64:b0:bd:79:e5:2a:16:d3:bf:c0:f0:2a:97:f0:59:
         09:ab:45:07:3f:f7:da:39:1b:c5:47:15:1b:5c:27:2e:c7:6b:
         23:a8:b0:89
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC
NTI3NzZGNzIwHhcNMjMwNDIwMDQ1ODA0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQwYzY1Yi1jMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVt6Cb0PiwtNMaV5i3D4gV9Q/okete3F53Te6WIXHRC0hwQHxpoTfeZTTnQJ
lZP2pp1Uw3/R0LsHaegJWzVIeygJHkNR+x4G+FH7NWdB2zdOBcc680lXbY+6iZnH
tJ7hcT3zPn5EkrGVJmwSP/rI1R5yvZFdBtlNO3KNzmIEwtzAXx8gzkdVlZFI9104
tiL5GMTnQBJbQfLxsEqVyse2mu1Ly+Cq353/IyU7qxypwrWrfIhvpazgiU7/R1f1
mhwS5EjJR0aLffBtclGK9bO571CnQzKEr12O2wwo5owhGoyYdnLvSGwBnAjLTrks
XTjDFiO6oyagwNMsC/hxq06VVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCkLy7X1
U9Swl8Ov8FJQW33aaTDvMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz
RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvRUU0RjUwMDJE
RjM3MTFFRDk5QUM3RDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn6NUwDQYJKoZIhvcNAQELBQADggEBABwS+JnWHz3fz59J
F4aWjFl1dI8dzcFlkiS4ll4exftfGv4cN5Sc6KPZevuedm1P3shrhW6Jgju4mrD+
/PVYTYmS6k0ncO+8u0Cl4KLd7/+iyZ0gODYyjdJsD0Is/RUl1+3SYIMrGrRdbAmt
RRL6KvuKplNcDA+OgbLNgHddr2YfDWkbpS7KP2LiqbHUiV8VYgB9OYJWpOlSAWLX
bTHR/nlSG9rbXna8jpGdKIRIAeK7L0JHjTqr75oKZJ0LPeJ+Jm2fDaYn5YKGqerE
ECxNvl1XauAclFYoXv2R9mSwvXnlKhbTv8DwKpfwWQmrRQc/99o5G8VHFRtcJy7H
ayOosIk=
-----END CERTIFICATE-----