Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/A713DB5AB19211EC9EAAD44EC4F9AE02.roa
File:                     A713DB5AB19211EC9EAAD44EC4F9AE02.roa (raw, json)
Hash identifier:          MvuEEXTAtQQlm4RWnEfABQdA3Fl7Kyxq+bVDboENRBo=
Subject key identifier:   48:77:D9:72:20:D8:58:AA:98:DC:B2:44:29:6D:F8:DE:ED:C1:E5:A2
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       098A
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/A713DB5AB19211EC9EAAD44EC4F9AE02.roa
Signing time:             Thu 14 Apr 2022 07:46:09 +0000
ROA not before:           Thu 14 Apr 2022 07:46:09 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     135341
IP address blocks:        103.109.94.0/24 maxlen: 24
                          103.214.200.0/24 maxlen: 24
                          144.48.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Apr 14 07:46:09 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=6257d141-8a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:9c:7e:4e:bc:d6:42:f8:e1:c9:57:2a:5c:
                    12:9a:7c:07:0c:e4:13:8e:05:f8:0e:59:1c:ac:d7:
                    13:f0:95:4c:42:27:f4:fc:5b:3b:77:ec:b2:f3:71:
                    6a:21:03:ba:c2:57:fe:5c:bc:04:c1:fe:d5:50:be:
                    cb:1a:0a:d4:6c:53:46:38:cd:e9:c6:19:8c:34:59:
                    6a:a2:2a:1b:e8:6b:dd:c3:c8:cc:c8:f5:28:0b:50:
                    1d:6b:1f:e3:af:db:98:3b:93:01:0d:b7:60:7d:5b:
                    7d:7a:b8:fd:00:35:0f:18:c9:b3:07:a9:ce:9d:39:
                    d3:c2:e6:3e:5e:0d:1e:81:e2:e1:5f:82:e7:98:f6:
                    af:47:9f:7a:7c:6d:34:d6:a7:09:0c:96:d0:6d:a6:
                    41:37:1f:8b:24:4a:9f:08:74:ba:f1:40:65:07:ff:
                    df:e5:06:7a:bd:28:cf:93:ce:a7:86:3b:cd:e7:7e:
                    19:fa:d5:a2:aa:53:eb:51:d8:1e:ce:ae:41:f0:85:
                    6b:97:3f:b2:a4:fc:be:6c:d4:29:ca:5c:ce:a7:43:
                    f3:ff:59:6c:1b:08:0c:6f:44:f9:64:9b:41:30:12:
                    3f:9f:86:c4:72:cd:1c:76:88:b8:53:c9:17:be:7f:
                    50:7d:e6:67:7a:a7:50:60:66:ac:c1:49:d7:56:9f:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:77:D9:72:20:D8:58:AA:98:DC:B2:44:29:6D:F8:DE:ED:C1:E5:A2
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/A713DB5AB19211EC9EAAD44EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.94.0/24
                  103.214.200.0/24
                  144.48.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:75:ba:1a:d8:01:e9:4d:ac:c3:93:b8:36:43:a0:3f:e7:
         81:da:38:fb:e3:7c:4a:3e:0c:ea:27:45:75:e1:7f:8d:db:8c:
         7c:2b:a5:05:7b:3f:d1:9d:6b:b5:57:44:49:89:36:37:5b:1f:
         57:14:32:4e:98:9d:94:51:54:aa:1e:69:50:1b:51:e0:9b:bb:
         34:ea:86:31:55:58:22:3c:0f:f2:ae:e9:ce:16:47:6c:04:dc:
         d0:a3:18:6c:12:51:13:cd:d2:e6:21:25:2d:84:49:11:de:0b:
         c1:08:ca:15:76:ee:49:60:c7:20:bf:23:3c:91:a0:78:3e:45:
         88:a2:37:75:f0:f4:f4:52:1f:4c:90:f3:2f:78:8d:aa:3f:d1:
         5a:bb:5f:5a:b6:f4:21:41:94:c7:16:c9:ad:a6:5d:e8:b6:62:
         b4:87:1c:9b:e1:b8:80:b5:03:78:37:c4:de:f3:1d:2b:70:51:
         29:0c:b9:b6:2b:20:a7:87:8a:79:53:88:c2:4b:fd:99:ff:ba:
         83:30:03:76:6e:3c:0d:12:8d:1b:d2:2f:fc:f6:47:55:bb:2d:
         4b:e9:cd:74:31:5b:f2:e5:c7:04:bc:b9:0f:f9:c0:86:2a:73:
         7d:5a:4e:0d:d3:6d:a8:3c:b1:cc:84:46:f4:57:56:4d:30:a5:
         81:cf:0f:67
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE
MDc1REQxOUIwHhcNMjIwNDE0MDc0NjA5WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjU3ZDE0MS04YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Vicfk681kL44clXKlwSmnwHDOQTjgX4DlkcrNcT8JVMQif0/Fs7d+yy83Fq
IQO6wlf+XLwEwf7VUL7LGgrUbFNGOM3pxhmMNFlqoiob6Gvdw8jMyPUoC1Adax/j
r9uYO5MBDbdgfVt9erj9ADUPGMmzB6nOnTnTwuY+Xg0egeLhX4LnmPavR596fG00
1qcJDJbQbaZBNx+LJEqfCHS68UBlB//f5QZ6vSjPk86nhjvN534Z+tWiqlPrUdge
zq5B8IVrlz+ypPy+bNQpylzOp0Pz/1lsGwgMb0T5ZJtBMBI/n4bEcs0cdoi4U8kX
vn9QfeZneqdQYGaswUnXVp8XewIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEh32XIg
2FiqmNyyRClt+N7tweWiMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2
NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhGNkQvOUE1QjFBOUVGNjZBMTFFOUJGNTA2OTdBQzRGOUFFMDIvQTcxM0RCNUFC
MTkyMTFFQzlFQUFENDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnbV4DBABn1sgDBACQMJYwDQYJKoZIhvcNAQELBQADggEB
AD1Hdboa2AHpTazDk7g2Q6A/54HaOPvjfEo+DOonRXXhf43bjHwrpQV7P9Gda7VX
REmJNjdbH1cUMk6YnZRRVKoeaVAbUeCbuzTqhjFVWCI8D/Ku6c4WR2wE3NCjGGwS
URPN0uYhJS2ESRHeC8EIyhV27klgxyC/IzyRoHg+RYiiN3Xw9PRSH0yQ8y94jao/
0Vq7X1q29CFBlMcWya2mXei2YrSHHJvhuIC1A3g3xN7zHStwUSkMubYrIKeHinlT
iMJL/Zn/uoMwA3ZuPA0SjRvSL/z2R1W7LUvpzXQxW/LlxwS8uQ/5wIYqc31aTg3T
bag8scyERvRXVk0wpYHPD2c=
-----END CERTIFICATE-----