Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/031745129E3211E9A49BE310C4F9AE02.roa
File:                     031745129E3211E9A49BE310C4F9AE02.roa (raw, json)
Hash identifier:          lszEUZ+z9lBmnfWgNxjAlYcOczmz2AOrKj1B/gHNulE=
Subject key identifier:   48:26:C1:05:EB:77:2E:DB:5B:DB:B0:52:18:1A:4F:A4:CB:F9:14:16
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0BF4
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/031745129E3211E9A49BE310C4F9AE02.roa
Signing time:             Mon 01 Aug 2022 10:05:52 +0000
ROA not before:           Mon 01 Aug 2022 10:05:52 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     134809
IP address blocks:        43.230.96.0/22 maxlen: 22
                          103.7.68.0/22 maxlen: 22
                          103.7.68.0/24 maxlen: 24
                          103.13.74.0/24 maxlen: 24
                          2001:df7:6400::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060 (0xbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Aug  1 10:05:52 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=62e7a580-4e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:2d:8f:1a:c0:63:dd:c4:46:d7:c7:ad:7c:
                    e0:f4:98:6b:34:4b:c1:5e:8b:91:8e:53:6a:45:28:
                    69:8e:e0:e2:11:2b:c3:08:ba:36:92:ef:ff:db:d2:
                    25:e7:75:48:e3:86:1f:fc:5b:37:29:d2:f8:86:fb:
                    31:19:ba:fd:73:46:cb:73:c8:26:2e:0e:94:0f:7b:
                    20:e4:fd:75:75:7a:f9:4e:bc:c9:22:cd:9e:2f:b1:
                    6f:28:53:e5:95:49:02:4f:60:96:8b:26:d8:32:d2:
                    89:3f:31:c2:e9:2f:e7:95:49:ab:dc:1b:5d:b4:5d:
                    d8:68:d8:a2:52:84:1a:ff:48:92:d4:9f:70:72:f2:
                    d5:bb:e8:20:ee:58:aa:bb:3d:41:41:d8:19:75:78:
                    b8:e7:cb:97:37:3e:52:0a:bb:db:f7:d8:bb:de:08:
                    97:42:40:26:7f:54:0b:0a:27:42:3e:24:c1:b5:3b:
                    71:f5:45:aa:07:5a:60:d6:eb:55:a2:9c:30:b7:7b:
                    1e:5b:9f:02:a2:fb:04:f8:89:7c:4e:72:0f:35:54:
                    29:ba:5e:b5:f7:b8:97:e0:ce:a6:55:9f:19:76:c8:
                    3e:8d:6e:97:14:ca:32:53:b8:77:1b:c4:96:db:19:
                    9f:d4:74:94:a8:4b:4c:ea:cd:27:68:56:93:95:85:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:C1:05:EB:77:2E:DB:5B:DB:B0:52:18:1A:4F:A4:CB:F9:14:16
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/031745129E3211E9A49BE310C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.96.0/22
                  103.7.68.0/22
                  103.13.74.0/24
                IPv6:
                  2001:df7:6400::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:76:82:2f:ec:af:89:82:d4:39:21:df:44:63:9b:c2:37:
         8d:db:42:a5:3d:f6:ed:17:d2:16:01:63:f7:30:c3:cd:1a:0b:
         6c:50:48:c0:6e:58:e5:a2:8b:61:88:6b:4e:26:ea:92:69:1b:
         90:bc:14:41:a1:ed:c0:d1:32:16:05:e5:77:14:ed:70:5c:04:
         fb:61:cd:eb:6c:68:6d:bb:4e:c6:d4:62:22:4c:d7:30:4d:d6:
         7a:0d:25:57:82:95:cc:9f:49:90:b2:33:c6:dc:ce:56:d6:97:
         b0:31:f2:49:40:ec:af:91:fe:c1:c6:70:9b:28:a9:f9:56:5d:
         89:b9:3d:71:4f:7c:8a:e3:51:0f:5a:0b:6d:57:60:26:93:fa:
         d5:bd:2d:73:4b:30:8c:b3:59:c3:fe:e4:02:8c:93:7c:1e:8b:
         49:f4:44:26:30:8d:9e:19:72:53:ad:d1:29:02:8a:f8:26:56:
         2a:a8:0c:3a:41:d9:40:95:cc:db:c6:1d:8d:20:d0:31:b4:9d:
         62:2c:27:d2:95:38:64:c7:95:3d:6b:af:30:1a:b8:cb:8a:9a:
         05:b6:04:01:0c:6d:d6:52:bd:64:fe:84:34:8c:31:99:2a:d1:
         b1:d1:6d:41:14:81:79:54:28:7f:7d:4a:54:ac:3d:e9:b7:23:
         1d:7a:43:44
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5
NTVFRDg5RTAwHhcNMjIwODAxMTAwNTUyWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU3YTU4MC00ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcctjxrAY93ERtfHrXzg9JhrNEvBXouRjlNqRShpjuDiESvDCLo2ku//29Il
53VI44Yf/Fs3KdL4hvsxGbr9c0bLc8gmLg6UD3sg5P11dXr5TrzJIs2eL7FvKFPl
lUkCT2CWiybYMtKJPzHC6S/nlUmr3BtdtF3YaNiiUoQa/0iS1J9wcvLVu+gg7liq
uz1BQdgZdXi458uXNz5SCrvb99i73giXQkAmf1QLCidCPiTBtTtx9UWqB1pg1utV
opwwt3seW58CovsE+Il8TnIPNVQpul6197iX4M6mVZ8Zdsg+jW6XFMoyU7h3G8SW
2xmf1HSUqEtM6s0naFaTlYWv6wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEgmwQXr
dy7bW9uwUhgaT6TL+RQWMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF
MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvMDMxNzQ1MTI5
RTMyMTFFOUE0OUJFMzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBgEAgABMBIDBAIr5mADBAJnB0QDBABnDUowDwQCAAIwCQMHACABDfdkADAN
BgkqhkiG9w0BAQsFAAOCAQEAfqJ2gi/sr4mC1Dkh30Rjm8I3jdtCpT327RfSFgFj
9zDDzRoLbFBIwG5Y5aKLYYhrTibqkmkbkLwUQaHtwNEyFgXldxTtcFwE+2HN62xo
bbtOxtRiIkzXME3Weg0lV4KVzJ9JkLIzxtzOVtaXsDHySUDsr5H+wcZwmyip+VZd
ibk9cU98iuNRD1oLbVdgJpP61b0tc0swjLNZw/7kAoyTfB6LSfREJjCNnhlyU63R
KQKK+CZWKqgMOkHZQJXM28YdjSDQMbSdYiwn0pU4ZMeVPWuvMBq4y4qaBbYEAQxt
1lK9ZP6ENIwxmSrRsdFtQRSBeVQof31KVKw96bcjHXpDRA==
-----END CERTIFICATE-----