Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
File:                     AB3AB116E09711EC88BEF370C4F9AE02.roa (raw, json)
Hash identifier:          58iMZsdge+zwFjKruPQPngMNCiHUouOKZO5HOoDiPzA=
Subject key identifier:   B1:D3:64:EB:54:1C:71:71:53:35:32:08:AE:9E:35:2D:7E:6D:47:EA
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       319C
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
Signing time:             Tue 31 May 2022 04:10:56 +0000
ROA not before:           Tue 31 May 2022 04:10:56 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     49901
IP address blocks:        103.21.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12700 (0x319c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: May 31 04:10:56 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62959550-858f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:91:af:0c:39:6b:83:d2:fd:c5:85:41:48:
                    17:3c:c2:4a:3b:0e:9e:9b:1f:a3:9a:13:30:9e:c0:
                    a3:4a:a1:09:0a:b6:16:bb:5f:c2:e8:75:d7:8f:df:
                    c1:35:bc:c6:dc:d6:41:00:01:00:f3:d8:7f:08:7b:
                    4b:26:b7:86:95:89:00:43:4c:88:fa:da:51:e0:46:
                    67:9c:70:a3:b7:95:4f:26:76:44:e1:02:7e:bd:d9:
                    b8:8a:53:51:4a:de:dc:3b:be:cb:e1:90:dd:4d:64:
                    db:06:08:b4:cc:ff:ed:23:be:44:58:5e:9f:62:71:
                    78:ef:a7:be:2b:c7:6b:c2:06:48:2c:b9:08:9d:d5:
                    04:64:d5:89:bc:54:13:e8:6e:23:52:06:3d:1e:6c:
                    4d:ae:17:be:cb:c5:15:b3:a3:ec:56:80:35:db:4a:
                    31:ee:d0:58:22:43:40:81:74:8a:67:07:94:a2:db:
                    26:e8:a3:37:a8:07:f3:de:88:f0:dc:d3:e6:fc:5a:
                    ed:07:2b:26:4b:e1:21:9e:17:10:bf:78:7b:ef:6d:
                    1f:c1:a4:6b:dc:37:ca:b7:c0:15:40:c9:e0:e8:82:
                    da:91:b9:3d:bc:5e:c6:45:32:86:44:db:47:36:5a:
                    f1:ad:66:25:1f:af:f1:75:49:2e:08:f2:d4:21:25:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:64:EB:54:1C:71:71:53:35:32:08:AE:9E:35:2D:7E:6D:47:EA
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/AB3AB116E09711EC88BEF370C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:55:6c:cf:dd:a3:1d:6b:17:54:a5:16:78:4d:03:58:3e:0b:
         80:0b:01:24:bb:e7:b5:95:18:00:e8:1b:c1:28:bb:e4:9e:7b:
         85:15:cc:b5:19:40:60:e8:3d:b2:c3:21:6d:64:06:74:21:bf:
         5a:af:87:8f:56:64:a9:f7:6c:f5:e4:b3:3c:c3:83:45:46:b8:
         87:33:16:77:e5:12:9d:09:14:99:81:20:57:77:d4:0e:44:aa:
         f6:f7:86:80:18:63:07:9d:91:3e:85:49:f2:23:9c:80:c1:73:
         2e:b4:a8:62:be:bd:30:97:f3:80:de:95:57:a6:24:11:bc:6b:
         89:b3:68:e7:cd:86:7b:0b:0a:ee:04:1a:9f:7d:eb:68:d9:0f:
         d5:a9:52:3a:13:b6:b2:77:5f:ea:3a:85:32:48:62:c9:27:3d:
         c4:4c:d0:fb:7b:24:bc:c4:af:47:9b:ac:61:bb:a9:91:87:fd:
         e2:af:3f:16:9c:ab:ef:93:0b:7a:67:f8:76:2e:cc:7a:3e:3d:
         bb:df:63:73:03:46:96:05:e3:bb:1f:b7:56:b5:d9:6b:a4:e8:
         5d:42:fe:b3:d5:ec:f6:23:02:6e:73:bb:d2:f4:39:98:46:65:
         9f:37:32:76:b0:a5:51:3b:60:ad:ae:f1:a8:ba:5d:35:3a:fd:
         c4:d8:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----