Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/BD6FD432554D11EBA9D33130C4F9AE02.roa
File:                     BD6FD432554D11EBA9D33130C4F9AE02.roa (raw, json)
Hash identifier:          Nnu3k/I6ipZNxj3blLqajoWKVsRx5WHzatzTytTyht4=
Subject key identifier:   5D:D2:90:89:D1:33:FB:3E:82:CC:B7:80:7D:84:F4:D3:CD:F7:60:23
Certificate issuer:       /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
Certificate serial:       0255
Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/BD6FD432554D11EBA9D33130C4F9AE02.roa
Signing time:             Tue 09 Nov 2021 13:29:49 +0000
ROA not before:           Tue 09 Nov 2021 13:29:49 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     9381
IP address blocks:        103.30.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
        Validity
            Not Before: Nov  9 13:29:49 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=618a77cc-9939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:ef:24:d7:ed:e4:a1:df:86:e2:c5:52:5e:
                    6a:e7:98:0e:ac:a9:1f:2c:c6:55:4b:54:f0:e7:91:
                    82:fe:4b:f9:7d:f3:51:90:9a:35:1f:a9:01:70:e8:
                    ef:21:e5:b1:e9:80:84:0c:df:5d:8b:39:41:26:30:
                    06:ec:e8:a3:94:96:3b:aa:7d:7d:d0:74:2f:3c:06:
                    46:57:ee:64:ba:97:20:78:71:36:d5:e9:fe:a1:31:
                    c4:fc:56:89:67:54:22:d0:3e:d6:ca:6f:d5:b8:da:
                    e6:98:ba:80:d9:51:94:78:16:ed:03:29:c3:ae:65:
                    6b:66:1b:d0:09:22:30:87:33:73:93:93:d2:81:3c:
                    a3:4e:43:d5:ce:b5:34:ad:b4:ef:bc:78:db:a7:08:
                    5f:a4:d5:f3:8d:e6:bc:81:ce:2a:f8:f7:95:86:33:
                    79:4b:ee:c7:5c:0a:63:2a:75:3a:57:f0:5d:a6:bd:
                    33:b1:a5:18:3f:6a:3a:f0:f2:46:d1:d0:50:b9:be:
                    bc:75:3d:0e:17:28:34:cd:38:b9:0d:02:72:b3:50:
                    8f:5b:1b:16:31:17:8c:2b:3c:1a:0e:86:5b:f2:16:
                    6b:21:cf:35:62:bb:ae:15:06:99:ee:d9:7d:b9:e8:
                    c5:47:4f:06:af:fb:42:b8:77:c8:ae:b4:bb:72:e5:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:90:89:D1:33:FB:3E:82:CC:B7:80:7D:84:F4:D3:CD:F7:60:23
            X509v3 Authority Key Identifier:
                keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/BD6FD432554D11EBA9D33130C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:5d:44:37:db:c3:ac:ed:18:12:0f:ed:d2:45:90:56:51:
         6e:58:b8:cd:2f:9e:d0:e5:a4:63:18:60:ef:1d:d6:72:c4:1b:
         70:25:c4:1f:59:31:d3:28:26:57:6a:26:ad:6d:8e:56:09:3e:
         09:fc:d5:e4:f6:10:d1:7e:d0:8d:68:4e:88:c7:d3:55:47:4b:
         a0:a9:08:07:8c:11:ff:b4:ce:95:45:97:3f:38:3e:8e:d3:b2:
         f9:91:e6:b1:53:20:1a:83:ab:d9:53:c5:61:63:23:62:db:a7:
         46:67:c7:62:2c:31:d9:bb:16:49:58:43:09:d0:59:6d:c3:64:
         dd:2c:74:c6:11:32:9a:59:d5:98:51:a2:3e:74:52:d1:4b:ca:
         85:aa:d4:7f:28:a6:4d:67:7e:d3:0b:74:a1:18:31:09:73:0d:
         ef:ea:66:ac:7d:bd:f9:96:99:2f:80:33:4e:ce:39:a3:dc:9f:
         56:18:78:05:f7:f6:b6:e3:f9:48:64:f2:71:8d:d3:f3:bc:10:
         4a:64:15:16:16:bf:e1:7b:f1:fd:86:62:c6:c1:00:1e:2f:ae:
         1e:4a:b1:34:9d:11:98:5e:de:90:84:1d:7c:5d:a5:9d:cc:46:
         f2:fd:3c:b2:d6:04:2b:c8:69:7d:42:46:12:dc:1e:f7:d3:e4:
         60:be:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----