Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/C0FCC29E97B511ECACF76A32C4F9AE02.roa
File:                     C0FCC29E97B511ECACF76A32C4F9AE02.roa (raw, json)
Hash identifier:          sEPERwDCXj2lR2QMw6xAWq4d7vIbTA/8jwPIpdSFJ/Q=
Subject key identifier:   65:FA:62:C5:5C:A5:3F:CE:C5:08:66:54:2E:BC:04:D5:51:C4:C4:A9
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       01BD
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/C0FCC29E97B511ECACF76A32C4F9AE02.roa
Signing time:             Sun 27 Feb 2022 10:12:23 +0000
ROA not before:           Sun 27 Feb 2022 10:12:23 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     137703
IP address blocks:        103.146.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: Feb 27 10:12:23 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=621b4e86-58ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:23:67:9c:9a:d8:98:2f:7b:f9:d3:cb:8f:
                    d8:76:f8:55:66:90:55:d1:b1:82:24:11:b0:c9:5c:
                    c1:ab:25:b4:79:04:8d:2a:9a:ac:a6:c6:f5:6f:51:
                    4d:2f:75:66:16:49:e5:19:c6:dc:60:05:88:a7:03:
                    a0:c5:20:18:d6:2d:32:7e:a2:6d:fc:9f:03:f5:1f:
                    9f:56:43:67:fe:1b:8e:50:a1:ca:47:aa:46:5d:6e:
                    02:6f:70:92:de:ed:cd:62:fa:c2:db:07:ad:9d:d5:
                    f7:f2:70:59:46:b7:ba:1e:2b:f9:80:66:f7:ba:e3:
                    06:d9:cd:47:4d:6f:91:a2:76:fe:db:f1:20:15:1e:
                    12:ce:b8:45:41:de:6b:3a:b4:c0:f9:0a:85:2d:72:
                    e1:d8:37:36:f1:0a:77:be:01:fc:7f:91:24:b3:59:
                    af:28:29:58:78:02:3f:cc:0a:5d:3d:e4:cc:56:f6:
                    65:36:e5:73:17:ac:a7:23:2b:2e:5f:c5:25:57:ae:
                    ed:27:95:97:d8:19:2e:da:7d:da:8e:7d:70:0f:d3:
                    84:90:e7:36:2a:4f:2c:da:fb:82:68:13:c0:a4:bc:
                    bf:6c:83:48:98:15:d2:82:8e:63:60:bf:a6:51:10:
                    06:64:d2:57:67:2f:6c:5d:ae:9c:33:e4:74:75:77:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FA:62:C5:5C:A5:3F:CE:C5:08:66:54:2E:BC:04:D5:51:C4:C4:A9
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/C0FCC29E97B511ECACF76A32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:01:03:5a:f7:ec:4d:91:f9:e2:f4:07:0a:e9:91:a7:d2:f0:
         ff:6a:6e:25:63:40:95:70:c9:55:9a:59:46:2c:02:9f:a6:ab:
         bc:64:d9:1c:48:0a:52:9d:32:c1:0d:7e:24:b8:7b:9a:52:95:
         f7:24:e1:c8:55:d7:02:5d:fe:df:3a:e8:76:4e:bf:bf:fc:ce:
         06:e0:75:59:84:68:2e:f0:a0:a0:90:4f:ff:c3:64:0a:be:de:
         4a:7e:50:91:0d:b3:b8:20:a8:ed:75:68:68:14:0c:b9:b6:b1:
         96:df:71:ab:3d:e1:5e:f7:0d:16:c7:d4:9c:1c:5a:bf:45:24:
         40:43:c3:36:6c:b0:72:d6:ec:0a:8d:36:70:b6:ae:eb:90:63:
         17:e3:64:a9:34:a2:5d:9a:f6:ed:10:31:50:e9:b9:c4:bf:f5:
         68:36:32:68:d6:59:34:0e:03:ff:9e:9c:6f:80:57:95:b6:cc:
         2b:c6:6b:c6:da:84:bb:28:2a:67:b7:b8:0b:42:29:14:e1:d3:
         71:8e:36:14:1f:c0:0d:78:fa:0d:86:ce:01:0d:70:07:71:aa:
         3b:98:ca:5a:9c:dc:d5:b6:22:6c:f0:c3:eb:9a:3f:3a:a6:b7:
         b0:b5:bf:a8:9d:e7:74:8e:01:d0:60:35:11:bc:ba:cb:d7:66:
         81:e5:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----