Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
File:                     44796932859211EC8464F25DC4F9AE02.roa (raw, json)
Hash identifier:          vXZlu68xo0TUTCgaWf6mMUAQjm9CuTNiFtO+YzPV1xo=
Subject key identifier:   25:D4:46:B6:84:CB:5C:B1:78:F6:6B:AF:E6:3D:7D:04:A4:9B:C3:CF
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       02
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
Signing time:             Fri 04 Feb 2022 08:13:01 +0000
ROA not before:           Fri 04 Feb 2022 08:13:01 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     149496
IP address blocks:        103.180.244.0/23 maxlen: 24
                          2001:df0:6340::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Feb  4 08:13:01 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61fce00c-749e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:71:73:d6:66:91:44:0f:e2:60:49:e1:0e:
                    1f:02:bd:1d:d2:db:ac:d5:f1:e5:6f:78:86:be:56:
                    eb:b0:4f:52:f4:c5:60:63:8a:2f:56:cd:2e:5c:88:
                    a1:55:e8:88:e6:b8:b4:78:02:6e:6d:f3:37:cf:38:
                    4b:c2:b6:30:a5:16:48:97:cc:88:cd:8b:5a:73:15:
                    39:62:48:4b:4f:a7:86:0b:a0:a2:75:88:f5:0a:a9:
                    d9:40:06:24:22:56:4f:9a:6b:1e:b7:cb:59:3b:14:
                    b5:c8:6e:ad:59:96:96:86:b3:fc:e3:f4:f5:6a:64:
                    d9:2a:ca:e4:c5:74:be:ae:c0:7c:f5:bb:c8:94:5f:
                    e7:10:88:22:8c:f2:a2:5d:78:5e:94:f6:f2:12:b8:
                    c4:05:f8:f0:88:2a:80:26:ea:d5:3f:af:82:bc:97:
                    b1:29:ef:c4:e7:c8:82:f1:15:82:2c:d5:19:92:68:
                    63:e5:f9:80:9a:bf:15:7e:69:f4:62:08:74:64:8d:
                    1b:f3:a8:55:69:13:3e:c6:f8:5b:13:0b:3c:6d:ea:
                    49:4c:39:6c:d7:cf:2f:31:5b:3e:5a:41:5f:67:5d:
                    3a:bc:97:c8:39:2e:a9:13:e8:42:58:67:05:0e:38:
                    e0:42:fc:7d:ec:45:40:d2:37:0d:d2:77:ac:a0:4a:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:46:B6:84:CB:5C:B1:78:F6:6B:AF:E6:3D:7D:04:A4:9B:C3:CF
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/44796932859211EC8464F25DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.244.0/23
                IPv6:
                  2001:df0:6340::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:e7:4d:dd:5e:50:83:f5:0e:9a:29:3c:02:14:63:01:a3:
         02:b6:4d:4a:6c:b9:e1:89:d1:dc:a5:fb:49:c0:0e:ba:47:df:
         31:6c:7c:cb:d0:bf:66:f7:79:75:3c:4c:cc:13:6d:57:cb:74:
         c8:e7:2c:99:c6:95:a1:7c:fb:c1:50:c0:8f:84:72:52:38:8f:
         92:9c:81:2d:dd:fd:70:23:43:22:19:53:06:27:56:ca:dc:fc:
         69:4e:c6:04:13:77:72:70:be:34:31:05:c2:34:3a:3a:80:d8:
         92:8f:57:48:27:9b:d7:80:af:13:fd:64:11:21:3a:b8:db:49:
         f5:67:cf:91:0d:ed:69:22:8c:8b:de:4e:18:0c:fd:b6:41:31:
         6c:b1:de:5b:c4:31:47:44:8d:8a:d7:34:99:04:2f:2d:18:4a:
         79:80:80:13:2e:86:30:0c:15:8b:27:5a:88:5a:dc:f1:f7:e8:
         06:25:c8:8f:0b:1a:80:eb:a7:2a:d2:2a:46:7b:6c:5b:3a:bb:
         1e:55:2b:2b:7d:21:cf:cf:eb:8a:02:b2:c9:09:db:f0:54:bd:
         b0:89:bb:a0:72:a6:24:e1:24:f9:da:70:ad:5f:36:fd:c1:a3:
         ad:d0:79:db:93:74:49:ce:e3:d7:2d:81:6f:2d:5f:06:10:0e:
         9f:af:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----