Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/4AD7A4D2406011EC8ED1021EC4F9AE02.roa
File:                     4AD7A4D2406011EC8ED1021EC4F9AE02.roa (raw, json)
Hash identifier:          Dj8VOc4OyfL/z7sZbP71MynpOlWT+1RAvFvjlb172A0=
Subject key identifier:   05:30:0C:FF:E9:8B:DD:AC:B5:60:94:17:C7:A1:F5:F7:C8:68:3B:19
Certificate issuer:       /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial:       02
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/4AD7A4D2406011EC8ED1021EC4F9AE02.roa
Signing time:             Mon 08 Nov 2021 06:51:26 +0000
ROA not before:           Mon 08 Nov 2021 06:51:26 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     148999
IP address blocks:        103.175.242.0/23 maxlen: 23
                          103.175.242.0/24 maxlen: 24
                          103.175.243.0/24 maxlen: 24
                          2001:df0:4c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
        Validity
            Not Before: Nov  8 06:51:26 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6188c8ee-0038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f9:06:ad:5a:94:28:ad:f7:a7:d0:02:51:ef:
                    28:1e:05:4c:47:4c:5f:c1:2d:74:93:1a:6d:c2:6c:
                    79:17:fd:63:e9:e6:df:cc:c3:9e:10:da:20:4b:4c:
                    c8:3e:99:5e:c3:31:8d:da:7a:f3:e6:dd:be:70:11:
                    1c:83:94:31:b6:d9:ba:bd:65:04:2e:a0:77:d0:1d:
                    af:73:43:de:45:d6:e2:e1:14:5d:3b:25:35:3e:fe:
                    21:b6:82:38:6c:7b:c2:29:03:34:b9:56:c4:d6:d8:
                    0c:42:af:ff:ca:a5:98:cc:6d:a1:b7:fb:77:f2:72:
                    8d:84:7c:9b:3e:82:0c:ce:a3:a9:73:dd:01:8f:b1:
                    8c:af:a3:56:9f:d5:28:c6:2c:47:fe:58:da:33:90:
                    38:c3:f3:fd:a8:b6:82:da:4d:0a:cc:1b:b9:28:0e:
                    e3:27:c8:d5:4b:78:8d:44:48:97:38:1d:4c:03:ec:
                    8e:63:41:66:66:6a:18:5f:98:78:99:24:6c:5c:c5:
                    3a:dc:ca:2a:2a:fc:ae:c6:6b:20:6c:3f:b9:71:ff:
                    18:f6:fe:5b:2c:4a:4b:e5:ab:dc:a8:a4:4d:0d:ef:
                    74:e2:42:0c:39:eb:b1:c6:5b:a6:9c:78:4c:de:e5:
                    23:fd:3a:70:33:e3:6a:fe:0e:8e:19:a4:59:4f:61:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:30:0C:FF:E9:8B:DD:AC:B5:60:94:17:C7:A1:F5:F7:C8:68:3B:19
            X509v3 Authority Key Identifier:
                keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/4AD7A4D2406011EC8ED1021EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.242.0/23
                IPv6:
                  2001:df0:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:27:b0:a3:47:7d:28:de:97:87:89:b9:ac:d9:2c:3a:23:5a:
         ba:f6:28:1f:a2:dd:74:bc:06:29:0e:27:cd:5e:68:55:57:67:
         17:0d:4b:07:5c:0b:6f:fb:0b:8b:d1:88:f9:3c:37:aa:b8:f1:
         56:82:59:30:86:22:99:99:bc:f4:a6:bb:1f:42:dc:7d:1d:db:
         92:13:b0:40:08:16:7b:28:a1:13:8a:18:91:2e:7f:0a:4a:47:
         98:46:95:d9:d9:a7:e9:0b:be:98:3f:2c:7d:b6:5b:ad:55:5e:
         36:40:46:58:ef:d4:10:58:86:15:21:10:98:9f:d3:1e:8a:84:
         6a:47:00:79:b2:3b:56:73:50:1a:a5:b0:45:23:d7:e5:12:4e:
         e6:5f:56:1e:9e:e6:ac:58:5d:4c:a4:34:57:aa:1b:a6:28:60:
         c5:13:86:db:1e:af:1d:cd:ca:d5:79:af:32:a5:fe:88:80:f5:
         7b:25:17:37:39:cc:09:6f:ae:75:b8:6e:ac:03:0e:c4:b0:4b:
         f1:57:35:73:63:5f:d8:68:bd:49:72:2e:19:38:be:96:1a:85:
         29:2e:02:33:55:b8:23:1b:8d:d0:bc:07:4f:58:62:05:91:36:
         0a:b2:5a:1b:52:35:94:97:ec:6f:82:24:7f:83:92:73:ff:f9:
         18:4b:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----