Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/67906E74B01D11ECB51CB25CC4F9AE02.roa
File:                     67906E74B01D11ECB51CB25CC4F9AE02.roa (raw, json)
Hash identifier:          Og7FM6cSCQHAAQqfLM2vN2NZJwsRi/KSYAUqh0XBLBs=
Subject key identifier:   F3:E8:49:A7:38:C5:1F:DB:30:6C:A7:69:B5:9E:26:64:01:0C:F6:CA
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       79
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/67906E74B01D11ECB51CB25CC4F9AE02.roa
Signing time:             Wed 30 Mar 2022 11:34:48 +0000
ROA not before:           Wed 30 Mar 2022 11:34:48 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     141181
IP address blocks:        103.155.184.0/23 maxlen: 23
                          103.155.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Mar 30 11:34:48 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62444058-9e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:12:f8:14:a0:76:7b:d0:35:ee:14:be:e2:
                    02:41:b5:89:52:f7:28:cb:76:78:3a:fc:e7:0e:46:
                    b9:87:1c:2f:b0:a0:98:32:08:2e:b9:95:2a:b4:62:
                    01:33:15:d7:f9:1a:80:6e:7e:12:7a:90:03:29:fe:
                    b5:bb:e6:55:d8:49:73:3f:75:c1:0b:a9:08:09:d3:
                    df:a9:ec:2c:76:12:f1:c8:5a:6f:ae:38:30:a2:20:
                    b9:f6:88:ca:a9:24:c3:ac:db:04:7c:52:56:0d:23:
                    f6:d3:5f:98:9a:7c:7c:2d:17:16:d4:39:ae:a5:3c:
                    04:8b:4d:97:a9:60:74:17:74:64:1f:25:0f:cc:a2:
                    4e:a7:0e:16:fe:88:db:f8:c0:a2:94:8f:6e:e9:b2:
                    de:0c:3a:18:f4:0b:09:e4:d7:68:da:df:ee:46:32:
                    cc:89:5f:30:b7:27:3f:64:60:5b:09:74:5c:08:b7:
                    78:c1:04:28:d0:da:bd:cc:84:42:8f:77:f4:1e:37:
                    fa:f1:72:9f:fa:83:c3:bb:27:d4:1a:80:f8:af:51:
                    2e:6f:22:2e:36:ec:9e:b1:58:08:49:14:92:7f:18:
                    33:dc:59:40:cb:c8:17:ea:61:27:37:b5:76:71:8c:
                    12:91:13:f5:b3:00:01:56:3a:bd:5c:47:76:95:8d:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:49:A7:38:C5:1F:DB:30:6C:A7:69:B5:9E:26:64:01:0C:F6:CA
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/67906E74B01D11ECB51CB25CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:51:ec:7b:ea:d3:53:af:99:41:f7:c2:36:50:b3:b8:32:
         4b:60:ba:26:e0:6b:db:a0:2d:ea:f8:c3:fb:2e:80:17:6f:bc:
         7d:3b:81:8c:9e:75:d8:93:16:8f:5e:9e:de:bd:80:22:d5:25:
         96:75:2a:14:50:75:32:d7:0e:50:0e:23:e9:87:52:fa:e6:9a:
         8d:d8:4d:0c:98:57:2e:8f:b2:ee:a0:bd:28:ba:19:14:e0:83:
         84:6f:4d:34:b7:d2:eb:3f:b2:b8:b2:6d:15:50:99:e2:7a:aa:
         fd:a8:70:2d:d5:ab:07:1d:70:db:97:1b:d1:29:1f:cc:bd:a3:
         2c:9c:37:25:7c:cf:b1:1d:dd:59:ba:1d:7a:0c:b6:6f:0f:42:
         e9:ff:de:ef:cf:8e:b2:c3:22:c5:8a:15:55:da:5c:8b:cb:d5:
         cd:9d:3b:94:46:94:f6:68:11:7b:fb:cd:74:13:2a:d7:80:f5:
         b1:ff:00:47:c9:6b:e2:2a:7f:35:80:48:07:46:e4:db:9f:ca:
         fa:00:07:17:6e:31:dd:46:59:38:ed:25:cd:3e:04:ca:ce:1f:
         f4:85:1f:0f:c9:55:9d:5c:15:3d:90:6a:fe:57:89:f0:9a:ab:
         8b:e6:15:d6:33:a6:f6:b0:ca:62:6b:b4:86:e3:c4:26:25:7f:
         7a:07:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----