Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
File:                     64E925C6EC8611ECB73DFC2AC4F9AE02.roa (raw, json)
Hash identifier:          mCZ7Aabwaf7VxxvDbwwRkFSQ8jzxaXV7B08ziol5f8M=
Subject key identifier:   37:FF:ED:50:9F:F2:01:A0:8B:D3:1B:08:DE:99:5E:93:52:90:3D:53
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       04DE
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
Signing time:             Wed 15 Jun 2022 08:37:30 +0000
ROA not before:           Wed 15 Jun 2022 08:37:30 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     59316
IP address blocks:        103.243.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Jun 15 08:37:30 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62a99a4a-4ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:9d:75:3c:07:05:ea:ca:46:23:87:51:e9:
                    97:b3:c6:01:5f:fa:86:1e:97:b6:70:48:4a:d3:c3:
                    05:ca:06:99:42:3b:ee:79:38:dc:72:5c:6c:60:ce:
                    0f:c1:78:06:b1:2d:75:b0:58:18:52:ca:d0:81:67:
                    8a:b0:0a:42:ef:03:d1:b8:c9:79:2c:40:90:49:7d:
                    a2:cc:85:ea:f7:0f:da:50:00:ad:fb:d3:38:3b:1f:
                    84:78:30:94:e6:2e:3d:5c:4c:4c:8e:51:1a:b6:8f:
                    e8:94:b0:cb:fb:be:c3:ea:01:e6:b3:74:8f:86:2a:
                    e5:a9:18:48:9e:e2:ec:35:01:0f:4a:71:e4:5a:0e:
                    0a:31:bd:5d:1a:cc:0d:98:e2:00:84:b1:2d:33:a0:
                    f9:0e:ac:7b:4b:09:45:ae:15:db:2a:1d:14:69:40:
                    6b:03:93:b3:f1:74:d9:e7:65:68:b5:b5:12:46:69:
                    f5:22:9e:3b:c0:bd:49:3f:30:2a:c3:91:d7:f9:27:
                    3f:ce:23:62:69:20:12:96:9a:b7:b4:98:45:54:e2:
                    a9:b6:5e:93:8e:5b:68:59:a9:43:3c:12:3d:c8:46:
                    13:ee:21:2d:fb:3f:57:54:9d:f8:be:43:16:39:81:
                    37:d4:b6:d8:d3:32:ab:19:c3:fb:b4:8c:77:43:7a:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:ED:50:9F:F2:01:A0:8B:D3:1B:08:DE:99:5E:93:52:90:3D:53
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:99:e3:62:43:29:4c:42:0e:11:00:2b:f4:20:24:79:79:
         5a:07:83:9b:d1:60:51:86:98:46:40:bd:85:5d:66:60:d1:1b:
         ae:51:e3:46:01:86:ef:93:89:f5:33:d5:cf:c5:30:73:3b:bc:
         60:cb:4d:9e:23:ea:cd:79:3d:2b:76:be:15:1f:3c:03:41:db:
         59:3f:1c:85:06:30:be:e6:2e:64:79:ce:07:00:55:08:bb:27:
         62:1d:15:a6:3c:02:b5:98:b8:db:2d:8c:69:e5:2e:7b:b3:cb:
         b5:df:67:9f:a0:1c:a9:c9:5a:0f:a2:ea:2f:ed:4c:20:26:c2:
         66:e6:e1:e8:ba:53:42:a8:c5:ec:47:e4:b8:64:3d:0e:61:2f:
         5d:4f:38:b4:33:66:da:d4:99:31:be:c4:15:54:2c:05:64:d3:
         a1:54:6d:a2:6b:c5:c8:0a:f9:ac:06:a0:1b:66:5f:7e:6c:f2:
         4a:d6:d6:67:12:72:fb:d2:c2:c7:bc:06:fe:fb:aa:da:ad:cb:
         ae:fc:e4:6d:d5:40:7c:db:0b:2e:a3:3d:c6:25:05:e2:70:a7:
         fb:a9:73:ee:33:09:78:3d:21:a9:11:75:e8:cc:d1:5f:3b:dc:
         b3:ab:1a:e0:70:21:bf:ee:13:2c:c0:d5:13:c8:f2:f0:c0:17:
         86:c2:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----