Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/F9530E685C7011EBBFCA0157C4F9AE02.roa
File:                     F9530E685C7011EBBFCA0157C4F9AE02.roa (raw, json)
Hash identifier:          gS99A+5ahlEA+bw56XPqhRekK86qPJ7UyFiX4rhfREg=
Subject key identifier:   3A:1B:03:8D:57:C0:9A:26:87:7D:E9:A8:41:A4:4A:BA:5E:AD:77:01
Certificate issuer:       /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
Certificate serial:       036E
Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/F9530E685C7011EBBFCA0157C4F9AE02.roa
Signing time:             Wed 06 Apr 2022 13:11:03 +0000
ROA not before:           Wed 06 Apr 2022 13:11:03 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     141680
IP address blocks:        103.161.248.0/23 maxlen: 24
                          2001:df5:d880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
        Validity
            Not Before: Apr  6 13:11:03 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=624d9167-f09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:d9:57:f2:26:0e:a3:1d:78:7a:68:6d:97:
                    47:bf:a6:ef:63:e2:72:96:8c:1f:07:08:44:d9:62:
                    5a:29:26:00:bb:13:b3:ed:ff:1b:fa:9f:12:6b:69:
                    38:88:4f:f5:11:b5:f9:46:85:c1:c7:b3:a6:83:2e:
                    0c:d6:97:4e:07:f3:6c:3f:53:9b:cc:2d:66:94:a5:
                    ea:2a:55:1d:cd:ac:86:3c:4f:bb:3a:d1:17:07:68:
                    2d:db:71:e7:4b:3e:19:c9:65:34:d3:d0:12:07:e9:
                    a2:61:4d:0f:32:c0:f3:d8:02:fc:28:24:60:02:9b:
                    ee:91:17:84:e4:e4:d0:3b:6b:b4:5e:b7:17:b0:5b:
                    56:f1:e5:7a:f4:1c:23:58:52:b2:34:0a:b6:9e:c9:
                    61:61:06:22:c3:02:d3:7b:48:21:2a:ee:d4:96:e5:
                    63:2c:df:a8:b2:1c:f5:e4:a5:98:e8:2f:c2:6d:40:
                    c1:44:eb:75:f3:2b:40:7e:3b:34:75:9b:84:c4:66:
                    a2:89:d9:c4:f7:e7:76:31:ee:72:11:6b:ac:97:d7:
                    6e:d4:8d:5e:52:07:a0:35:ac:74:5f:2b:d1:b0:ca:
                    b5:55:50:bc:fb:13:40:e9:0d:e7:21:14:03:12:e6:
                    4e:cd:79:01:99:53:5a:bc:a0:bc:84:03:d6:90:0b:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:03:8D:57:C0:9A:26:87:7D:E9:A8:41:A4:4A:BA:5E:AD:77:01
            X509v3 Authority Key Identifier:
                keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/F9530E685C7011EBBFCA0157C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.248.0/23
                IPv6:
                  2001:df5:d880::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:fb:80:2f:15:da:1c:8e:cd:dc:5d:06:b9:c9:b6:d5:1f:
         b2:38:f3:ae:92:ee:de:1c:52:d8:8b:3c:69:32:f2:1f:fa:ba:
         97:99:c6:2a:f0:a9:f7:98:82:b7:cd:18:e1:58:9c:07:a9:15:
         f9:72:6d:88:2d:3d:e4:95:6e:93:ba:fb:9f:75:6c:fd:71:b9:
         11:d7:59:7b:b6:57:aa:d9:7c:69:cd:d6:25:b6:7d:66:3f:5d:
         65:78:c9:4b:77:c4:27:e1:8a:d6:96:b3:7d:fb:32:e8:4e:0f:
         ca:20:95:60:f6:45:33:e4:a5:44:22:6e:41:9a:82:1d:bb:25:
         4d:26:c7:66:7c:1e:8b:51:33:a3:7a:a7:8d:52:52:ff:b5:bc:
         28:8e:d1:bd:66:d7:fd:72:78:f3:28:64:72:a4:0d:2c:0b:a2:
         26:c2:c9:a2:5c:78:62:1e:34:f0:46:17:c9:40:91:d9:bc:16:
         2f:db:87:bb:86:75:33:a5:69:35:6b:96:c6:63:bc:1d:ba:16:
         41:84:31:d8:26:45:66:35:eb:b8:b8:ff:36:9f:43:59:96:d5:
         ad:9f:fa:32:74:6d:46:81:c8:d3:ca:cc:42:a0:f8:32:24:fe:
         d4:c0:69:76:02:21:91:f5:ee:c2:a7:20:63:50:47:d3:10:f1:
         dd:7e:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----