Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/457EBF0E7AA111EC8BC06638C4F9AE02.roa
File:                     457EBF0E7AA111EC8BC06638C4F9AE02.roa (raw, json)
Hash identifier:          YIeV6+P+i4uTmX6jeByWVxYtVs/375YcIsT6j1jEVuE=
Subject key identifier:   08:0E:DB:96:B0:CB:29:E3:FA:C7:EC:C0:DD:CC:B4:78:63:01:5F:71
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       02
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/457EBF0E7AA111EC8BC06638C4F9AE02.roa
Signing time:             Fri 21 Jan 2022 10:02:42 +0000
ROA not before:           Fri 21 Jan 2022 10:02:42 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     138997
IP address blocks:        103.180.28.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: Jan 21 10:02:42 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=61ea84c1-2b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:3d:98:6c:d9:30:7c:97:a8:e3:78:ae:b6:
                    82:67:1d:ad:b2:8a:ee:9e:66:83:79:65:27:4c:c9:
                    77:88:83:6d:89:3b:0f:85:2d:50:5f:80:05:73:39:
                    7e:24:cd:54:33:0a:fd:fc:a8:d0:34:fc:ae:4a:62:
                    12:fd:22:9e:4e:02:7b:cc:2e:40:a6:c2:fb:b1:03:
                    31:46:12:7a:d1:2b:3f:5b:12:69:bd:37:e1:48:19:
                    b7:be:f7:64:e0:f5:e7:3d:e9:fa:61:16:b4:48:3a:
                    83:36:97:69:65:9c:b4:14:0c:53:32:a7:46:ae:81:
                    e9:8e:14:fa:86:16:c0:b1:45:02:9a:2b:d9:d9:7c:
                    98:fa:1d:70:61:11:d3:68:48:3e:54:af:28:a8:b6:
                    38:c5:d8:46:6c:5c:47:a6:64:ef:98:ae:05:a2:fb:
                    f4:00:19:cf:23:f7:8b:91:80:42:b1:41:86:f2:8a:
                    a8:33:70:fe:f7:57:f6:94:db:09:68:83:2a:45:70:
                    97:1e:c0:67:aa:a3:29:21:e1:b5:c4:fc:ef:dd:52:
                    d4:98:b7:7d:a4:b5:d1:99:10:0a:20:4c:0e:ba:58:
                    c8:36:a1:44:76:b5:14:7d:92:50:80:e1:6c:eb:8b:
                    40:da:9a:69:e7:1d:81:3d:18:f9:34:70:56:b2:13:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:DB:96:B0:CB:29:E3:FA:C7:EC:C0:DD:CC:B4:78:63:01:5F:71
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/457EBF0E7AA111EC8BC06638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:0c:98:ce:8d:7c:00:67:91:5b:de:43:10:25:43:80:29:
         f9:34:89:08:a3:4a:bb:e7:59:7e:0b:66:00:7a:f5:44:d5:f6:
         e8:40:7d:20:a4:5c:a4:b5:ba:21:ea:0b:36:f0:78:48:b5:07:
         21:31:15:14:cf:2f:d4:45:33:83:64:06:57:41:0b:80:2e:dd:
         8d:74:73:33:4e:31:6a:7a:8b:13:80:ad:4a:67:90:21:e9:dd:
         0d:9b:0c:38:f9:f9:f4:c1:0f:5e:4d:e2:32:0d:75:5e:be:35:
         89:05:8d:69:1e:a8:aa:e8:62:26:9a:79:43:3c:8f:30:ac:f4:
         b0:1c:d6:23:1c:bd:c5:4c:4c:e2:c6:6a:17:5c:4a:0e:d2:89:
         66:0a:92:52:65:21:37:7c:42:59:f7:43:cf:31:85:e9:29:17:
         37:f2:55:9f:2b:ac:f0:bb:f5:2a:5c:39:d4:9c:3e:29:bd:4b:
         4f:4b:e7:ed:21:b1:30:cb:3f:fc:64:7d:3a:48:93:05:45:13:
         d5:1f:e4:34:01:32:72:54:5b:bb:37:6d:8d:a0:20:c9:d3:2b:
         7f:e3:a4:c0:96:e5:63:66:1b:3d:d6:88:10:20:9c:63:70:f6:
         db:9a:20:81:49:de:f1:aa:4e:52:68:72:ac:fe:a9:e4:67:37:
         07:07:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----