Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
File:                     C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa (raw, json)
Hash identifier:          /S9dLJ2pfR0M21vf+cU0/TLybLAV5VDMIwqvLQCjpKg=
Subject key identifier:   17:A0:F2:00:B6:0C:C7:F0:4B:DE:8A:92:B1:38:36:AF:6D:CD:05:CA
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       0D5A
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
Signing time:             Sat 15 Jan 2022 06:34:31 +0000
ROA not before:           Sat 15 Jan 2022 06:34:31 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     138466
IP address blocks:        103.126.52.0/22 maxlen: 24
                          2404:5c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3418 (0xd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: Jan 15 06:34:31 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61e26af7-c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:61:19:9a:c5:37:64:b0:3d:93:46:82:24:
                    d6:63:dc:43:59:4a:be:fb:32:a3:41:9a:0c:3a:e0:
                    8f:52:d6:d6:c6:1a:81:ae:9d:09:8e:81:21:1d:f6:
                    19:5d:7e:7b:17:a6:11:60:cc:f5:30:f0:30:2e:80:
                    80:83:13:3a:c6:46:13:7e:cf:09:13:98:e2:84:6e:
                    35:02:9e:d9:49:87:13:03:24:26:89:0a:df:17:d5:
                    5b:76:8b:05:70:42:24:6f:04:16:e2:3e:a4:91:9f:
                    4b:0a:ff:75:a7:b9:ec:10:ee:9c:71:50:25:ca:d2:
                    ba:6d:d1:57:f1:5d:ef:ac:98:4e:1c:15:ed:3e:6d:
                    a5:66:2b:fb:ab:7f:c9:66:e5:60:17:10:16:47:cf:
                    85:86:77:0b:c1:f0:17:52:bf:16:ce:0f:cb:34:31:
                    c2:88:26:42:39:5a:ef:2e:71:9f:64:d5:5b:87:e8:
                    6b:39:b5:05:15:5e:58:d9:45:97:49:19:6a:08:5f:
                    59:d6:79:d9:23:34:d5:dd:1a:fb:8d:83:f4:8b:f3:
                    3f:7b:36:ff:32:1c:07:54:2c:61:bf:9a:eb:c9:27:
                    da:46:7d:9a:79:0a:b2:83:b8:16:30:7d:17:f9:af:
                    73:8f:1a:05:f3:e2:39:e3:d6:6a:ae:19:3a:31:6e:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:F2:00:B6:0C:C7:F0:4B:DE:8A:92:B1:38:36:AF:6D:CD:05:CA
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/C9DFA9DCA2DD11E9AC31B32DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.52.0/22
                IPv6:
                  2404:5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:d7:99:38:59:e1:16:53:3d:9a:2b:62:61:98:5f:79:0a:
         03:f2:47:92:64:82:51:83:8d:d9:ef:b9:8b:5b:29:a7:ac:cc:
         89:e0:c7:ed:a5:43:56:b6:4a:e9:f5:b4:8e:6b:23:8e:d0:5f:
         a1:80:4a:64:a2:e9:6a:46:b0:34:d3:be:74:f7:12:f1:88:a2:
         6c:c1:92:18:7c:84:5d:9d:7e:01:32:84:c6:3c:1f:a4:fc:95:
         e4:d1:4a:e0:80:47:7d:78:b9:7a:a1:2b:f9:8a:90:ac:4e:bd:
         19:62:22:42:c6:54:67:ff:2b:14:ab:98:ae:9b:bd:1b:66:5b:
         8f:fc:a1:47:21:51:75:f6:a4:d1:c0:7c:b6:9b:5b:c7:b6:37:
         e8:0b:5e:cf:9d:97:03:05:8a:37:f6:f6:c0:36:8e:e9:52:b8:
         0b:43:07:3f:1d:3e:b5:65:8c:51:12:9f:7c:51:cf:3c:0a:49:
         eb:56:dd:b6:34:76:a8:3a:55:da:12:91:59:cc:97:e1:e2:a3:
         e3:5e:b0:f0:72:f2:04:ac:1e:50:d7:20:13:f9:8a:43:67:26:
         95:4a:23:15:b4:a9:71:9f:42:66:66:3b:95:81:bb:b7:a4:f1:
         d9:46:1e:67:1b:bb:7a:67:04:bb:1a:f0:66:04:cf:00:36:63:
         5b:b4:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----