Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/516D09E6E19511EC8AD57C6CC4F9AE02.roa
File:                     516D09E6E19511EC8AD57C6CC4F9AE02.roa (raw, json)
Hash identifier:          yYUw4gl+Xqrk8WfiIw8cqiTIX2/0fuOHBWgEz103m0A=
Subject key identifier:   DA:F9:3E:D5:C6:FA:56:57:00:94:BE:59:88:85:E7:B0:54:43:07:A5
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       07D0
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/516D09E6E19511EC8AD57C6CC4F9AE02.roa
Signing time:             Tue 30 Aug 2022 09:59:06 +0000
ROA not before:           Tue 30 Aug 2022 09:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138974
IP address blocks:        103.150.68.0/23 maxlen: 24
                          2001:df3:5d80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Aug 30 09:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=630ddf69-3233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:6f:d3:02:94:39:58:34:2a:94:3e:55:70:
                    82:9a:57:df:60:1c:06:e6:46:9e:33:09:13:2b:5a:
                    f7:e9:10:86:de:95:9c:f3:d5:74:95:65:9d:ee:5d:
                    b6:5a:c1:68:f0:be:45:a0:e8:ea:a3:86:d7:55:cf:
                    f1:96:ac:17:1f:e4:90:36:cb:0a:92:c0:62:29:bb:
                    ad:37:e1:28:04:3b:87:1c:2f:ba:ba:98:64:cb:ca:
                    1b:9c:37:9a:04:97:1e:72:45:24:37:fc:0b:c7:11:
                    e6:a0:bc:d7:f7:ba:d3:31:30:52:e7:3e:2c:b9:cc:
                    00:ec:0a:85:f5:fc:a9:bd:99:54:85:b9:53:22:6a:
                    d3:de:24:9a:3c:39:d6:40:59:db:47:a8:d5:87:f8:
                    c3:a0:0f:29:48:ae:99:82:63:4f:19:a5:2e:9b:61:
                    02:04:4f:2e:cb:1e:e8:85:18:1a:fa:5b:ff:2d:ea:
                    b3:ad:3b:cc:c7:06:1d:49:b4:e1:19:fd:46:50:13:
                    fe:2a:44:49:84:42:12:1f:b2:66:00:0b:28:c0:d3:
                    43:77:fb:ff:dc:c9:99:1e:ed:e7:e9:0d:41:2b:69:
                    3c:19:0a:b0:89:b0:e6:75:64:00:60:d3:cc:d5:8a:
                    32:be:d3:df:02:56:2e:11:c7:bc:e3:63:89:26:91:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:3E:D5:C6:FA:56:57:00:94:BE:59:88:85:E7:B0:54:43:07:A5
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/516D09E6E19511EC8AD57C6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.68.0/23
                IPv6:
                  2001:df3:5d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:b5:68:ee:d7:e3:61:89:9a:5a:17:5a:15:ce:ca:ee:cb:
         5f:8a:7b:77:6a:f3:d6:a5:72:e6:d3:66:d4:28:6e:8e:7d:1d:
         52:b7:3a:53:5d:7d:25:ca:3d:5d:04:be:75:a6:fc:45:5c:ec:
         d8:eb:76:c6:cd:8b:7e:c6:81:fe:00:20:ab:60:0a:1d:36:0a:
         de:a4:58:5e:9b:4b:11:b2:3d:eb:85:04:80:41:51:20:70:a8:
         54:00:76:58:8e:9e:3f:c2:ec:56:46:36:26:63:41:fd:6b:17:
         24:0d:aa:5d:92:b9:f8:da:71:60:99:d9:b2:fe:9f:ca:08:5c:
         11:84:47:77:12:5c:84:60:76:0c:51:fa:b6:85:cd:cd:80:33:
         7c:32:7d:2d:ba:df:03:e1:cf:9b:71:e9:4a:a6:ec:8a:4d:ec:
         63:5d:d7:af:55:09:10:33:29:15:71:c9:82:55:ec:59:7e:f9:
         0c:c9:d7:db:a2:e5:6a:cd:d7:4b:e4:2e:c5:2b:d5:50:74:83:
         12:18:67:15:94:3e:16:a6:1d:d4:ee:2d:ec:4c:3e:d0:80:99:
         cb:89:3c:ba:97:f1:91:bb:33:c7:61:08:0e:74:aa:ab:85:dc:
         80:a5:4d:64:78:2c:3a:89:15:8b:5a:ba:45:57:5e:63:15:c4:
         6e:78:7c:7d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0
MEI0NTk1RDcwHhcNMjIwODMwMDk1OTA1WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzBkZGY2OS0zMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFFv0wKUOVg0KpQ+VXCCmlffYBwG5kaeMwkTK1r36RCG3pWc89V0lWWd7l22
WsFo8L5FoOjqo4bXVc/xlqwXH+SQNssKksBiKbutN+EoBDuHHC+6uphky8obnDea
BJceckUkN/wLxxHmoLzX97rTMTBS5z4sucwA7AqF9fypvZlUhblTImrT3iSaPDnW
QFnbR6jVh/jDoA8pSK6ZgmNPGaUum2ECBE8uyx7ohRga+lv/LeqzrTvMxwYdSbTh
Gf1GUBP+KkRJhEISH7JmAAsowNNDd/v/3MmZHu3n6Q1BK2k8GQqwibDmdWQAYNPM
1YoyvtPfAlYuEce842OJJpFr5QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNr5PtXG
+lZXAJS+WYiF57BUQwelMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC
MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc3QTIvOEJDMTVDNDA3QjA0MTFFQTlEQUFENDMyQzRGOUFFMDIvNTE2RDA5RTZF
MTk1MTFFQzhBRDU3QzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnlkQwDwQCAAIwCQMHACABDfNdgDANBgkqhkiG9w0BAQsF
AAOCAQEAvAS1aO7X42GJmloXWhXOyu7LX4p7d2rz1qVy5tNm1Chujn0dUrc6U119
Jco9XQS+dab8RVzs2Ot2xs2LfsaB/gAgq2AKHTYK3qRYXptLEbI964UEgEFRIHCo
VAB2WI6eP8LsVkY2JmNB/WsXJA2qXZK5+NpxYJnZsv6fyghcEYRHdxJchGB2DFH6
toXNzYAzfDJ9LbrfA+HPm3HpSqbsik3sY13Xr1UJEDMpFXHJglXsWX75DMnX26Ll
as3XS+QuxSvVUHSDEhhnFZQ+FqYd1O4t7Ew+0ICZy4k8upfxkbszx2EIDnSqq4Xc
gKVNZHgsOokVi1q6RVdeYxXEbnh8fQ==
-----END CERTIFICATE-----