Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/88E4FEAC7DCB11EC99806E25C4F9AE02.roa
File:                     88E4FEAC7DCB11EC99806E25C4F9AE02.roa (raw, json)
Hash identifier:          4Z1wJKtnCaNlZmQhKCc0+KKjtfo9iy7GAz4DMFMLt3k=
Subject key identifier:   6F:F9:9D:BA:DF:F7:D5:C3:21:3D:02:9A:66:06:C3:CE:9A:1F:8B:FB
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       0B
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/88E4FEAC7DCB11EC99806E25C4F9AE02.roa
Signing time:             Sat 29 Jan 2022 05:42:46 +0000
ROA not before:           Sat 29 Jan 2022 05:42:46 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     149474
IP address blocks:        103.180.112.0/23 maxlen: 24
                          2400:52a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: Jan 29 05:42:46 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=61f4d3d6-ce27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:e5:66:84:6f:68:78:d7:7b:e6:b8:af:2a:
                    76:b6:04:23:4d:66:a8:24:04:48:c3:79:21:55:13:
                    f9:4c:2a:59:dd:47:42:cd:bd:d7:f3:24:dc:6d:6f:
                    14:01:d7:ed:34:96:c7:12:f8:77:f2:1a:49:7c:49:
                    77:e3:df:46:ca:eb:54:ca:75:90:42:77:98:23:e1:
                    66:ce:28:e2:3b:55:ce:b4:75:d4:cc:42:9e:9f:37:
                    2c:d3:a4:5e:75:48:c6:92:73:51:a0:84:fc:e1:a5:
                    27:7b:6b:7e:c7:bf:c3:c3:58:8b:66:c1:c9:f3:6e:
                    43:eb:1d:60:02:ea:f1:a8:85:ec:b2:44:95:9f:0c:
                    d0:82:d5:50:6a:a0:e5:b4:62:a9:ac:13:71:93:db:
                    ab:54:e3:19:81:7b:a2:b7:a3:1e:ef:4f:df:b3:34:
                    43:ba:78:de:8a:cf:f4:a5:a5:b4:31:39:db:0c:48:
                    02:8c:a4:51:56:ad:d2:c2:c4:7c:be:06:de:c5:25:
                    7b:03:ef:3b:f1:e4:c3:2c:cc:6e:2a:f1:18:f5:5d:
                    da:c7:1f:24:5c:b6:ef:ab:db:85:f9:08:67:80:c0:
                    fb:fe:1d:d7:04:d1:b2:40:6e:8f:66:fc:5c:4c:89:
                    9e:62:1d:1b:e5:f1:fd:d3:4d:5f:71:66:a8:22:7b:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:9D:BA:DF:F7:D5:C3:21:3D:02:9A:66:06:C3:CE:9A:1F:8B:FB
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/88E4FEAC7DCB11EC99806E25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.112.0/23
                IPv6:
                  2400:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:22:01:09:c4:34:1b:99:c0:48:99:23:15:50:dd:41:c7:
         7e:05:91:9c:d9:e8:7e:56:e1:27:ec:64:82:68:58:b6:d4:ed:
         7b:6d:6e:a2:d4:77:3c:de:c0:7c:ae:c8:3c:64:94:a8:d9:9c:
         31:55:98:a3:6c:aa:c0:06:eb:c6:87:65:71:f0:be:9b:41:ae:
         b0:41:bb:6b:4f:89:31:c0:6b:78:b8:9a:a5:07:56:3a:e0:17:
         70:db:9f:df:5f:64:74:52:83:1d:dc:c1:5f:16:84:6c:7e:58:
         34:53:e1:7b:2d:23:8d:df:1f:9c:06:08:ac:b9:d1:9b:2b:c7:
         b3:ff:86:04:2f:79:b3:ef:c9:68:00:31:ae:cf:61:f7:5c:44:
         6a:dc:e4:b3:d5:5b:cb:a5:2e:94:c9:12:f0:fd:d3:d5:f6:2c:
         db:0b:c9:20:16:c6:3b:7a:2d:f7:d7:2a:62:c5:fe:5f:26:b2:
         cb:be:ac:5a:f0:e5:d0:1b:f2:00:43:c9:91:2e:82:60:bf:bb:
         18:9c:45:3b:20:76:f0:7f:c0:40:22:74:8e:9a:43:06:a8:91:
         14:f6:4e:2d:16:dd:0b:ea:56:16:35:12:c1:a7:44:48:03:ab:
         63:15:8a:78:a7:3c:5e:84:06:c1:89:95:d5:1b:3f:ef:fc:4d:
         d9:18:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----