Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
File:                     097F4E68C4FE11ECBD72527AC4F9AE02.roa (raw, json)
Hash identifier:          7yqTxdK5H5jV+TO9RqDD2eO/w4aPN/QGHnvPpjdJvKU=
Subject key identifier:   C5:EC:C1:33:46:0A:19:7E:0D:41:B1:D7:38:49:1C:85:6E:3E:41:D0
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       01F1
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
Signing time:             Tue 26 Apr 2022 01:13:10 +0000
ROA not before:           Tue 26 Apr 2022 01:13:10 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     38710
IP address blocks:        103.123.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Apr 26 01:13:10 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62674726-e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bf:ef:9c:05:63:0f:d5:4a:83:62:44:6a:df:
                    d9:85:93:61:77:45:bb:9c:70:c8:30:96:b6:26:9f:
                    ae:b7:7a:a2:d9:97:d7:16:3c:96:cd:fa:a2:f9:52:
                    33:e4:ef:20:c6:3f:32:54:cd:91:65:6c:d8:6e:27:
                    32:02:ae:76:81:78:32:3c:14:03:1c:90:3a:2c:e6:
                    80:be:74:fc:90:c8:03:b2:70:3a:df:d6:25:07:48:
                    72:1a:a3:f0:24:92:24:30:0a:aa:6b:bc:4a:86:e4:
                    a0:6b:d0:13:56:e4:f2:3e:c9:96:29:c2:31:ce:1d:
                    ce:68:68:85:a6:24:82:3d:64:6c:1e:ae:95:1b:6b:
                    0e:01:b0:9c:23:3a:1c:6f:e4:76:6b:5e:88:93:81:
                    81:8e:b1:26:3c:af:fc:d5:7f:28:60:fc:e4:ff:b2:
                    46:00:6a:64:04:09:af:80:cf:22:37:e2:1c:9a:37:
                    51:0a:45:e6:a6:02:c4:38:38:2c:ab:d4:29:6c:8d:
                    59:b5:af:6d:13:ad:95:3d:0b:85:69:f4:52:bb:f4:
                    ee:93:30:7f:18:54:1a:25:83:4f:14:25:1f:5a:6b:
                    1f:bf:a0:36:c8:ff:11:bc:58:69:10:16:82:ce:7a:
                    bc:aa:ce:d3:ff:3f:e4:22:bf:da:15:c9:4c:06:2f:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:C1:33:46:0A:19:7E:0D:41:B1:D7:38:49:1C:85:6E:3E:41:D0
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/097F4E68C4FE11ECBD72527AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:5d:86:51:ba:dc:52:ff:c9:63:6b:c4:17:c6:06:f5:a8:
         01:f5:a0:c7:02:9e:00:df:7c:45:9b:26:65:93:df:22:08:45:
         50:17:6f:1e:44:e5:5d:96:f2:5f:89:d5:3a:93:9f:98:18:23:
         d4:44:2a:37:2b:b9:8b:ca:8d:08:99:23:df:a4:c5:fe:e3:ba:
         b0:32:5d:eb:ae:1c:30:53:96:e6:ba:6e:89:e0:db:ed:4e:dd:
         2b:d7:38:c5:b1:87:7e:ff:dd:1f:e0:e2:84:ed:9f:67:0a:51:
         d4:48:df:b0:78:ff:75:00:73:09:ef:d6:00:6e:18:ad:d6:46:
         92:56:1e:ee:fe:13:68:3f:f0:b0:24:b4:c0:dc:f0:e8:01:db:
         b3:45:12:f7:fb:26:73:e9:06:71:b4:ce:74:b5:16:ab:3e:2c:
         cf:c1:c6:1d:c3:b7:91:e6:20:00:3b:8c:b9:ce:cf:9f:b2:52:
         8a:28:b3:a9:46:99:9b:7f:b5:28:0d:75:72:6f:4e:8b:60:07:
         3f:7c:66:47:f1:71:26:bc:10:12:a0:42:09:ca:9c:4b:9f:aa:
         37:43:30:ea:03:2a:f5:a2:b4:b9:12:01:30:ac:34:1e:37:15:
         ec:e2:0f:89:10:1b:ec:28:ae:15:ec:b2:e3:1b:9e:9d:21:ac:
         9d:5e:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----