Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/FF960B12B0DE11E8A64DFE12C4F9AE02.roa
File:                     FF960B12B0DE11E8A64DFE12C4F9AE02.roa (raw, json)
Hash identifier:          qeYYmyTv8oRVw43Am7F6aBmrtmJ35CwJHlg/uStuQ94=
Subject key identifier:   0C:75:64:4B:27:2B:3F:11:90:D0:23:A4:CF:CD:E2:E9:D9:29:97:64
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       26D1
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/FF960B12B0DE11E8A64DFE12C4F9AE02.roa
Signing time:             Wed 25 Aug 2021 13:11:48 +0000
ROA not before:           Wed 25 Aug 2021 13:11:48 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     133456
IP address blocks:        103.230.50.0/23 maxlen: 24
                          103.233.240.0/24 maxlen: 24
                          103.233.241.0/24 maxlen: 24
                          2400:ec80::/32 maxlen: 32
                          2400:ec80:110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9937 (0x26d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Aug 25 13:11:48 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=61264194-336d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:7e:7e:9d:43:f0:78:34:48:80:a0:3f:a0:
                    91:9c:65:53:83:73:45:af:80:60:ea:b7:38:de:3c:
                    4b:94:99:1b:8f:a7:7f:ce:7f:77:aa:38:18:aa:2c:
                    e7:18:80:fb:13:e0:84:de:a0:50:11:ae:5a:1b:e6:
                    cd:5d:67:48:39:8e:18:f7:25:48:77:d4:56:f6:26:
                    fb:ea:6e:03:3e:d8:f4:75:2d:78:c7:e3:79:0c:9e:
                    58:9d:f1:8f:39:ff:e5:68:95:6a:a1:81:bc:b2:6e:
                    a0:73:86:70:75:7c:eb:96:9a:58:f5:7a:96:02:32:
                    04:66:d3:17:61:51:c4:7e:99:71:64:8b:39:39:c6:
                    4f:a7:4f:60:4f:6e:28:9a:0f:0c:5d:f9:c2:e5:21:
                    f1:a8:37:9c:2c:f4:c5:ef:66:9e:94:49:d9:1b:b5:
                    01:3a:63:ce:86:ea:d2:75:8d:9d:7a:26:42:fa:a6:
                    b1:ae:e7:a8:40:ab:e0:56:9e:98:37:c2:2d:6e:0f:
                    88:45:c5:80:8e:e2:ea:5c:de:e4:5c:b7:f2:2d:8d:
                    e2:c5:ec:7d:ed:11:71:80:a2:93:f2:f9:ca:ca:1b:
                    d0:d5:ac:7c:c9:1a:5c:03:ad:c7:fb:b3:11:d0:d8:
                    e0:c0:d9:62:15:9c:f8:bf:59:24:d6:a4:a2:db:bd:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:64:4B:27:2B:3F:11:90:D0:23:A4:CF:CD:E2:E9:D9:29:97:64
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/FF960B12B0DE11E8A64DFE12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.50.0/23
                  103.233.240.0/23
                IPv6:
                  2400:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:28:7c:0c:f5:53:f9:36:bf:f3:25:6a:e6:85:d2:e3:9f:90:
         53:d0:53:5a:31:b1:9f:00:14:46:33:92:d2:fc:09:65:41:5c:
         0f:62:19:cc:82:a8:04:8f:ee:e2:0d:9b:d6:50:e7:72:33:26:
         e9:9e:5a:1f:bd:09:3a:fa:38:a4:ad:fe:f6:d2:47:0e:f5:1f:
         52:4a:dd:bc:85:73:ca:11:ea:7d:04:26:dc:5d:c5:2b:ad:4d:
         77:2f:a4:48:72:44:9b:fe:c4:d5:bf:83:9b:ff:2d:72:27:1e:
         d1:d2:02:10:73:06:a1:c2:17:9e:2f:1d:ac:c8:36:a3:bb:51:
         19:81:9d:94:53:8c:83:3f:50:16:cd:97:eb:fa:f0:53:24:3e:
         73:84:a2:18:36:dc:cc:db:a6:ca:72:97:dc:b2:ac:cf:56:da:
         5a:31:16:42:b3:c6:9e:cf:6e:ea:80:c0:53:f3:53:4b:06:ff:
         84:37:a6:bc:31:33:ca:fa:a5:ec:df:fb:3f:06:c0:57:c4:1f:
         c0:af:94:d3:68:01:80:53:88:0a:89:d4:88:cf:a3:9f:31:42:
         c5:51:80:14:04:ec:f9:1f:ee:75:a9:f5:ba:59:a9:74:55:e6:
         a7:8d:aa:4b:02:1c:47:81:a1:1f:87:58:22:e9:80:77:ca:ed:
         27:ca:fa:47
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICJtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1OUUxMTAvBgNVBAUTKDNFM0RDNjJBRDM2OTQxMjcwNzlBOTg3MTc2QzIxOEMw
OUIzRUM5RkQwHhcNMjEwODI1MTMxMTQ4WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTI2NDE5NC0zMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YJ+fp1D8Hg0SICgP6CRnGVTg3NFr4Bg6rc43jxLlJkbj6d/zn93qjgYqizn
GID7E+CE3qBQEa5aG+bNXWdIOY4Y9yVId9RW9ib76m4DPtj0dS14x+N5DJ5YnfGP
Of/laJVqoYG8sm6gc4ZwdXzrlppY9XqWAjIEZtMXYVHEfplxZIs5OcZPp09gT24o
mg8MXfnC5SHxqDecLPTF72aelEnZG7UBOmPOhurSdY2deiZC+qaxrueoQKvgVp6Y
N8Itbg+IRcWAjuLqXN7kXLfyLY3ixex97RFxgKKT8vnKyhvQ1ax8yRpcA63H+7MR
0NjgwNliFZz4v1kk1qSi270FEwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAx1ZEsn
Kz8RkNAjpM/N4unZKZdkMB8GA1UdIwQYMBaAFD49xirTaUEnB5qYcXbCGMCbPsn9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU5RS9ENDdGRUZDRUQ0
MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFTY0htcGh4ZHNJWXdKcy15
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BqM0dLdE5wUVNjSG1waHhkc0lZd0pzLXlmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1OUUvRDQ3RkVGQ0VENDBCMTFFMzg1RDQ4QTcwNTkxMUVBMzIvRkY5NjBCMTJC
MERFMTFFOEE2NERGRTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFn5jIDBAFn6fAwDQQCAAIwBwMFACQA7IAwDQYJKoZIhvcN
AQELBQADggEBADMofAz1U/k2v/MlauaF0uOfkFPQU1oxsZ8AFEYzktL8CWVBXA9i
GcyCqASP7uINm9ZQ53IzJumeWh+9CTr6OKSt/vbSRw71H1JK3byFc8oR6n0EJtxd
xSutTXcvpEhyRJv+xNW/g5v/LXInHtHSAhBzBqHCF54vHazINqO7URmBnZRTjIM/
UBbNl+v68FMkPnOEohg23Mzbpspyl9yyrM9W2loxFkKzxp7PbuqAwFPzU0sG/4Q3
prwxM8r6pezf+z8GwFfEH8CvlNNoAYBTiAqJ1IjPo58xQsVRgBQE7Pkf7nWp9bpZ
qXRV5qeNqksCHEeBoR+HWCLpgHfK7SfK+kc=
-----END CERTIFICATE-----