Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/F769F4ECC08511ED86BEFA59C4F9AE02.roa
File:                     F769F4ECC08511ED86BEFA59C4F9AE02.roa (raw, json)
Hash identifier:          cX6bsMay3Wo9UEqG2kGezWArqHK+w+c60vh7v5yhT2g=
Subject key identifier:   24:A1:3E:98:86:66:49:04:1B:65:C8:7C:95:2D:30:DF:E6:95:EB:D5
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       07CB
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/F769F4ECC08511ED86BEFA59C4F9AE02.roa
Signing time:             Sun 12 Mar 2023 03:28:33 +0000
ROA not before:           Sun 12 Mar 2023 03:28:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140624
IP address blocks:        103.151.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: Mar 12 03:28:33 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=640d46e1-af1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:61:0b:5b:69:65:eb:69:c6:a3:6d:42:fa:
                    82:c5:16:92:58:a4:38:40:4f:88:03:08:f6:cf:05:
                    43:92:ac:56:18:94:9f:f2:80:81:6f:7e:51:41:ad:
                    dd:95:16:3b:e8:b3:57:06:12:53:2d:68:2d:20:db:
                    33:be:f2:76:d6:2f:21:70:83:13:34:73:81:06:ba:
                    92:18:6a:de:a1:89:58:a6:7e:db:c1:83:7c:6a:84:
                    3e:69:ed:92:84:89:0c:85:50:40:ab:7e:6e:7f:49:
                    e0:80:72:59:07:b1:14:ef:33:6f:9d:a7:3e:70:d8:
                    b2:76:7f:8b:69:ef:f7:9a:51:2e:30:6c:9f:88:14:
                    a6:91:aa:cf:34:e4:2f:a0:6f:88:1b:e7:99:47:f2:
                    32:e9:ad:6f:a5:6f:c0:7f:21:c0:4c:a9:85:08:8e:
                    54:43:b8:90:5a:8e:9b:2d:4e:8e:52:a5:02:ce:8e:
                    69:be:05:44:ba:34:58:7c:2c:e9:d1:d6:1c:b6:96:
                    28:58:4d:d7:23:3c:72:cb:06:90:41:80:0a:66:12:
                    90:d5:d3:7d:32:f3:48:e2:53:c0:18:c9:14:79:e1:
                    7f:74:5e:7f:c6:65:e4:44:7c:85:c1:0b:6c:22:62:
                    f6:42:51:f8:45:47:9d:29:75:ed:71:bc:0b:1f:a1:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:3E:98:86:66:49:04:1B:65:C8:7C:95:2D:30:DF:E6:95:EB:D5
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/F769F4ECC08511ED86BEFA59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:57:87:39:26:68:e5:35:27:2a:82:50:a1:f6:59:62:72:8f:
         b0:ee:e9:3c:14:8b:f3:0c:43:b9:1d:75:ff:b0:44:e9:07:d4:
         74:88:48:b0:94:fa:94:5e:01:cc:53:a3:60:4a:5f:93:73:82:
         d8:23:21:43:8f:b4:17:38:16:4a:bc:54:c5:5c:b3:bc:13:3a:
         6f:f2:c3:b3:ab:54:23:c5:28:ed:0e:da:33:30:94:04:52:09:
         0d:bd:bf:04:37:90:8d:20:06:72:b2:de:c7:d8:c0:29:5c:06:
         2c:bb:40:4a:ad:21:b6:96:9d:51:9b:83:cc:ee:4b:20:26:a4:
         1d:2a:f4:f8:9d:40:0b:e5:49:7c:93:c4:6d:29:c3:9c:37:bf:
         56:e3:24:ee:5f:60:7a:9e:6b:42:27:e5:ab:3c:6f:fe:2e:34:
         48:a8:13:c4:5a:6e:e2:6b:81:4e:86:a9:09:18:25:e4:3c:f8:
         ac:cd:d3:71:76:1b:a1:8c:5e:cb:24:93:fc:fa:6f:e3:6b:9f:
         fc:4c:1c:27:9d:40:53:cd:8e:c3:ec:77:5a:62:d2:5f:f3:52:
         5b:12:27:5b:84:7d:a1:1c:37:8c:07:bf:57:99:67:98:80:68:
         2c:f6:9a:48:e1:0a:69:0c:da:f5:f0:4c:00:28:65:c8:52:f6:
         aa:9c:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----