Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/F4038E7E243811EDAF60355EC4F9AE02.roa
File:                     F4038E7E243811EDAF60355EC4F9AE02.roa (raw, json)
Hash identifier:          Nvjfw9IpgiG7x3e4naa0eOONZO2Hbo0+RKTwIzrbW5A=
Subject key identifier:   05:68:40:0F:97:55:F8:55:7C:03:5C:4C:5D:86:0A:93:7A:18:61:7C
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       17
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/F4038E7E243811EDAF60355EC4F9AE02.roa
Signing time:             Thu 25 Aug 2022 05:44:15 +0000
ROA not before:           Thu 25 Aug 2022 05:44:15 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     150156
IP address blocks:        103.112.62.0/23 maxlen: 24
                          2001:df1:1940::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Aug 25 05:44:15 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63070c2f-3aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b1:a6:59:28:39:92:ec:47:73:0a:6f:53:d4:
                    6b:95:f5:fc:5d:d8:04:50:91:7b:d8:82:95:e8:2a:
                    59:3b:3e:f3:b7:94:61:fa:5f:c3:fe:bc:23:16:e9:
                    c7:e6:78:19:83:45:86:c2:72:37:4d:f1:81:9e:15:
                    d2:fc:0c:b0:62:67:4e:ab:c0:e4:b3:ec:ff:4b:d2:
                    e9:b2:bc:59:11:26:b4:bb:aa:3f:d8:4d:74:01:af:
                    d3:a0:c4:d0:d0:26:a9:3d:7c:8f:50:33:66:17:55:
                    92:3b:50:9c:d7:0b:57:0b:08:92:ec:bd:6f:ea:80:
                    c1:03:3c:d1:02:ae:c6:9b:8e:c8:0b:8f:ad:70:ab:
                    a1:f3:47:2d:d7:46:62:b8:2d:fa:76:12:d8:1d:8e:
                    11:90:45:34:dc:87:1e:a3:5b:dc:d4:5a:27:ab:12:
                    42:69:0a:1c:8e:ae:d8:5f:17:49:75:c0:f7:8e:9f:
                    da:4d:51:49:be:7a:77:ca:66:95:db:ee:94:d2:43:
                    12:fb:e0:b0:bb:3a:56:0b:90:d0:54:3f:1a:8d:5c:
                    98:37:6e:ea:5c:42:84:f8:d6:02:03:06:b9:3b:94:
                    d1:62:7a:ba:0d:3f:20:c7:b3:93:b5:7b:7b:df:0c:
                    80:86:56:eb:3f:92:19:31:c9:f7:53:d0:d8:70:00:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:40:0F:97:55:F8:55:7C:03:5C:4C:5D:86:0A:93:7A:18:61:7C
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/F4038E7E243811EDAF60355EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.62.0/23
                IPv6:
                  2001:df1:1940::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:c6:3c:53:02:e5:03:78:e8:3b:93:53:65:87:66:b4:70:
         68:6a:f3:77:91:6e:01:64:78:8b:b8:60:6a:80:08:fe:05:1d:
         97:17:4f:76:1e:1c:4d:e7:13:c3:24:ea:e6:e7:74:1a:a2:32:
         81:44:dd:5f:d7:48:e9:f4:76:2f:08:47:23:9c:ff:64:7f:a1:
         d6:99:02:38:ba:04:f9:3d:be:62:59:24:07:3e:bf:8a:cb:8a:
         51:44:1a:2c:da:31:e3:0f:11:b7:0b:e9:62:cb:3d:ae:10:b9:
         ce:40:8d:4d:4c:63:1b:c6:00:82:65:65:7b:ce:1e:f5:68:5c:
         80:4b:72:bc:fe:f9:3b:b9:f4:92:c2:a2:36:d9:82:73:55:f3:
         71:2c:e1:8d:53:91:bc:fc:27:3a:b6:52:75:70:5e:85:6b:c1:
         cd:f0:7d:54:88:7a:26:11:8f:69:b3:5a:0a:6a:29:cc:2f:77:
         8f:74:a1:84:a4:5b:b3:09:c7:0d:49:ee:0f:2a:54:3c:4b:a0:
         34:78:55:1f:70:fd:72:9d:35:69:28:93:fe:7b:40:44:ff:02:
         6a:65:96:28:d1:0f:a9:74:41:d4:e7:c4:5e:e5:b3:81:c6:92:
         59:b6:77:56:c8:21:b8:8d:5e:e4:b5:ad:9b:70:4b:3c:76:e8:
         a0:fd:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----