Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
File:                     835982F681CB11ECA9597151C4F9AE02.roa (raw, json)
Hash identifier:          DO0DslgF3dD7aFB/SHNsUyteS0FO66Qv+NAR+r1hPEk=
Subject key identifier:   9A:31:BE:EF:7B:AB:0E:10:6D:08:C2:33:E9:CD:91:D8:04:DD:DB:FC
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       02
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
Signing time:             Sun 30 Jan 2022 12:52:42 +0000
ROA not before:           Sun 30 Jan 2022 12:52:42 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     141181
IP address blocks:        103.155.184.0/23 maxlen: 23
                          103.155.184.0/24 maxlen: 24
                          103.155.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Jan 30 12:52:42 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=61f68a1a-b2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:51:f7:3e:8a:94:7d:cc:86:5e:29:ba:09:
                    fb:f8:ef:d9:1c:5b:8c:81:35:3e:3e:7a:f9:48:95:
                    bc:aa:74:c9:89:a4:46:c3:c5:06:aa:96:be:1e:c0:
                    2d:0e:d2:87:0c:03:0b:2b:45:b6:fd:69:9a:cf:f7:
                    73:c8:a7:d6:7d:90:6c:5d:c5:f3:ed:1e:0a:72:27:
                    b5:81:bb:29:74:8a:e5:bd:25:be:70:dd:05:1c:11:
                    13:a6:4e:58:bb:60:d2:fd:9c:24:5b:01:0b:64:60:
                    fe:0f:5e:f2:db:32:e9:1c:a3:b9:cb:6e:bb:8d:e4:
                    41:26:09:75:e4:14:c9:3e:de:59:25:fb:3b:8a:82:
                    c4:62:7e:91:b3:13:9d:43:16:0d:ab:1e:54:2a:b0:
                    a2:01:c1:b4:1f:b5:88:e1:c3:06:a3:1b:1d:6a:4d:
                    6d:b3:4c:dd:20:a2:7e:11:95:34:d1:55:11:53:4a:
                    04:f0:29:e5:3e:c1:65:ed:1e:ea:c2:4b:61:a3:c0:
                    2b:10:db:06:d9:aa:58:29:5a:96:2e:79:f9:c2:69:
                    88:c5:2b:c7:f3:d4:13:39:29:5c:90:a9:3d:93:85:
                    e8:5c:e1:8d:2e:a6:61:97:de:f6:0a:e4:54:f5:ce:
                    94:04:0f:5f:a4:7e:4f:ad:b2:ca:8c:68:52:a3:d4:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:BE:EF:7B:AB:0E:10:6D:08:C2:33:E9:CD:91:D8:04:DD:DB:FC
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/835982F681CB11ECA9597151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:c5:77:91:bc:6b:56:f6:3a:a0:13:49:55:ab:db:c2:66:
         df:1a:3c:67:4e:e4:74:50:0e:b9:67:03:33:cb:dd:01:61:95:
         d1:6c:3d:5d:5b:41:c1:76:22:0d:0d:14:f9:49:d8:bd:30:9d:
         67:d7:e4:23:2e:c8:8a:fd:7a:dd:fc:f9:73:fb:08:09:b3:f8:
         30:ff:d7:98:c7:de:68:99:ab:2e:9d:04:12:9e:b4:d3:3a:dd:
         8e:e3:fa:95:3e:61:61:06:4e:90:64:a1:40:24:cb:f3:8c:8b:
         3b:a2:bc:d3:98:8b:2b:e8:6b:7c:34:94:f3:fa:72:c8:06:6d:
         45:ea:f1:56:52:8b:79:12:ff:71:24:8b:bc:11:1b:d4:11:17:
         84:c7:fd:e2:99:d2:8d:1a:f1:65:9c:4b:8b:27:9a:8a:de:81:
         12:dd:c6:40:98:a9:5d:7a:19:94:c6:ea:a4:81:ff:f8:47:f1:
         fa:d2:36:31:7d:8d:fe:cb:c8:58:43:f6:99:c9:de:33:3c:c2:
         61:55:9e:b1:68:b2:a9:29:89:c5:c6:34:3e:70:d8:6f:af:d4:
         b0:d1:87:24:f7:2f:30:d1:b7:7d:70:25:15:9a:2d:f5:85:71:
         5d:a1:47:e9:d3:fe:37:00:05:e1:73:c7:35:09:02:97:dd:65:
         72:f4:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----