Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/97BF527AE06C11ECA8E9E51DC4F9AE02.roa
File:                     97BF527AE06C11ECA8E9E51DC4F9AE02.roa (raw, json)
Hash identifier:          AwkYcMxUzBNtdE6MQ23kxKqMtZ8TDo63SQxa04YzGIw=
Subject key identifier:   9C:27:39:07:3C:93:89:21:79:99:79:CF:FB:98:A3:1B:D8:14:CD:53
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       02
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/97BF527AE06C11ECA8E9E51DC4F9AE02.roa
Signing time:             Mon 30 May 2022 23:02:35 +0000
ROA not before:           Mon 30 May 2022 23:02:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134121
IP address blocks:        103.24.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May 30 23:02:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62954d0b-a244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:5f:ea:a0:85:de:15:c1:22:a0:d0:73:5c:
                    c4:e2:89:9a:fb:ea:b0:2a:fe:2e:b5:8c:8f:18:9d:
                    e2:e7:f6:5e:3a:7f:3f:43:73:4a:21:5c:dc:ea:b3:
                    42:c4:70:3f:5a:05:af:3d:79:36:de:3b:11:90:ca:
                    63:9e:ef:8d:28:ea:f8:5c:17:2f:cf:0e:42:fb:5f:
                    6b:9f:2a:92:bd:26:d0:83:d7:30:d0:4f:a8:62:b0:
                    29:49:83:e7:3a:e9:34:bb:4d:20:41:3e:c6:b7:97:
                    a5:99:a9:6d:16:2c:29:97:45:55:81:f5:1e:b2:e8:
                    af:8f:3e:47:c9:e6:31:45:a7:1c:36:51:20:d4:e8:
                    ba:0b:41:89:92:1d:3b:4f:de:9c:d8:4d:ef:35:cc:
                    97:4c:eb:62:00:f9:7b:e4:76:b3:fd:b0:9b:df:44:
                    9c:eb:9c:ba:91:1f:35:7f:f5:e3:66:64:3f:e2:1d:
                    29:6f:19:42:41:dc:60:29:b0:76:24:1f:a4:62:09:
                    fd:16:10:1b:97:1a:33:f9:4a:6f:ea:7f:73:e7:98:
                    77:c1:2c:c9:0b:ce:4d:4c:1b:79:8a:8d:3c:54:60:
                    e9:ef:9d:47:e8:bb:13:53:f8:23:dd:e4:69:ae:4f:
                    b4:77:a2:fe:e0:dc:da:e1:28:af:a1:ae:8a:bf:1d:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:39:07:3C:93:89:21:79:99:79:CF:FB:98:A3:1B:D8:14:CD:53
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/97BF527AE06C11ECA8E9E51DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:64:93:28:ee:22:ff:e2:66:73:bd:13:33:9d:2b:89:12:
         56:80:e1:b3:05:91:b2:af:c6:38:a8:92:12:fc:97:c9:e1:e4:
         d1:d2:8b:cb:ac:ec:28:b6:5c:03:d8:c6:df:a3:a1:71:f2:48:
         4b:7b:5d:60:c0:9b:48:c2:dc:df:90:fa:a8:33:21:bf:85:8b:
         45:ac:7f:40:cb:d1:ec:d2:41:68:35:dd:d9:81:1f:8f:72:e7:
         89:6d:6f:81:72:ea:ea:5f:a8:9c:17:a5:d6:9b:4b:e4:33:ca:
         f6:6f:d8:01:a5:82:9b:aa:92:f3:7d:3a:19:60:42:ca:b8:40:
         ba:ce:04:cf:d6:74:63:f3:eb:ee:7c:2c:84:c4:d4:c5:f2:51:
         7d:0e:a1:d8:f7:5f:d2:f2:86:55:9a:32:c1:b5:ed:60:d9:2b:
         a4:b0:75:07:d7:01:d6:f8:8a:6a:11:30:cf:be:0a:81:af:87:
         6e:78:50:ae:af:db:0f:1e:50:18:85:10:b3:36:a2:a2:7e:3d:
         6f:3f:4a:3c:6f:c6:46:b0:62:33:5b:b4:73:13:30:7d:e9:f6:
         6b:ca:1e:e0:43:45:db:e1:d3:06:a2:52:f7:7b:11:6e:67:a0:
         ef:22:10:49:0e:20:3b:ef:9d:24:1f:53:ae:9c:2f:7b:c3:8e:
         63:03:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----