Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/29F086EE859E11EB9F647646C4F9AE02.roa
File:                     29F086EE859E11EB9F647646C4F9AE02.roa (raw, json)
Hash identifier:          SflNvDC5mNXYuHkKlgPj0V7KSDGnuvoLi53jcnEDQ1U=
Subject key identifier:   CD:E4:BF:40:67:99:46:05:28:5E:1E:86:A7:90:9A:89:12:BE:70:A2
Certificate issuer:       /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Certificate serial:       05EC
Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/29F086EE859E11EB9F647646C4F9AE02.roa
Signing time:             Sun 30 Oct 2022 19:04:29 +0000
ROA not before:           Sun 30 Oct 2022 19:04:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137578
IP address blocks:        103.114.10.0/23 maxlen: 23
                          103.114.10.0/24 maxlen: 24
                          103.114.11.0/24 maxlen: 24
                          2405:4440::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
        Validity
            Not Before: Oct 30 19:04:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=635ecabc-42b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:e5:d6:c4:48:c2:de:f9:73:c4:74:ca:e8:
                    06:0f:37:db:01:9a:6d:32:d7:37:94:2e:76:b2:f5:
                    9d:c4:b5:b2:88:44:f9:20:3e:a0:38:a1:59:40:17:
                    36:5a:a3:0f:9b:25:be:2a:e2:25:61:6b:a3:bb:74:
                    13:94:80:74:66:8d:ff:be:7d:bc:70:f9:17:e0:d8:
                    ef:a1:11:02:06:d0:b8:64:26:76:66:7d:09:67:4f:
                    bb:78:60:8d:aa:0e:5f:2a:3c:f1:fa:b1:f8:c8:9b:
                    73:47:84:42:b0:2c:93:9a:1a:da:84:d3:2d:48:53:
                    0c:a5:7e:1a:65:7e:57:9f:36:e1:6f:0e:06:c7:55:
                    3a:3b:b9:b5:ab:57:85:7e:a6:71:a6:4e:4a:19:d2:
                    5b:81:e6:8d:32:3f:a2:f8:70:38:26:7e:20:76:ad:
                    8a:a0:90:74:26:d9:bb:df:74:cb:5f:2f:a9:3e:b5:
                    df:3d:60:48:ed:f9:61:51:b0:b7:76:76:62:1a:0a:
                    01:8a:2e:c1:f5:21:02:b4:55:d4:a8:ee:2c:ee:f9:
                    cd:45:b7:68:76:79:03:00:be:df:60:a6:50:4e:88:
                    ef:f9:23:31:16:fc:71:89:ec:7a:ef:2e:28:e1:51:
                    7b:ce:ac:84:56:01:8e:81:06:d1:77:51:99:fa:1f:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:BF:40:67:99:46:05:28:5E:1E:86:A7:90:9A:89:12:BE:70:A2
            X509v3 Authority Key Identifier:
                keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/29F086EE859E11EB9F647646C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.10.0/23
                IPv6:
                  2405:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:29:d9:74:51:92:c1:38:8e:ed:df:65:f4:85:1f:e1:3d:
         56:3e:88:ad:ea:37:fa:04:4b:37:61:99:ef:c0:a6:30:4f:9e:
         86:69:5a:ec:3c:4c:dc:99:53:c5:02:ac:bc:70:1d:27:8d:99:
         03:96:98:b8:7a:fd:2c:f7:bf:84:27:33:24:bb:6c:d0:5c:be:
         4f:dd:70:f4:b9:1b:32:8e:d5:ac:3f:b9:10:0a:7e:0f:c4:ec:
         d4:97:ff:46:fa:cb:90:6c:c3:c4:40:06:2a:82:6a:f2:58:2a:
         48:59:3f:3a:67:eb:6b:ed:f7:7b:a3:74:de:68:77:14:50:8b:
         ae:43:79:b6:89:7e:e7:fe:71:d9:45:77:70:e1:9d:9f:80:c7:
         36:9b:91:f0:d4:a0:db:8c:49:d9:71:5a:b9:78:33:31:10:28:
         4a:0c:5e:aa:64:35:b7:a0:f8:44:f5:1f:be:99:d7:29:35:30:
         e5:41:6a:75:cf:d4:44:8f:6e:ea:70:1e:29:73:93:93:66:74:
         28:7a:85:6a:65:1e:ca:52:53:59:99:0e:6c:b2:e3:90:e4:2c:
         9f:e9:2d:20:98:bd:36:1e:da:36:49:c0:7d:d9:00:7e:54:98:
         84:55:07:ac:8f:fa:5b:23:d1:b1:8a:53:58:fb:64:e6:bd:b4:
         e9:c7:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----