Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2F040CE0A2311EC9EE8A579C4F9AE02.roa
File:                     B2F040CE0A2311EC9EE8A579C4F9AE02.roa (raw, json)
Hash identifier:          lRtdfU+qOAYtOle3kL4P5SfKvgAyHD9DOOVdJBsjN5w=
Subject key identifier:   94:FE:F5:21:BD:BE:66:84:80:7B:D8:C3:D7:EB:A0:AD:B5:8E:C1:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       3BF3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2F040CE0A2311EC9EE8A579C4F9AE02.roa
Signing time:             Tue 31 Aug 2021 06:21:38 +0000
ROA not before:           Tue 31 Aug 2021 06:21:38 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     133715
IP address blocks:        103.47.72.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15347 (0x3bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 31 06:21:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=612dca72-c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:03:5f:bc:2c:0b:ad:6b:85:11:8c:c7:1c:
                    32:d2:52:0f:2c:79:85:48:0b:a4:dc:ed:22:fe:81:
                    75:61:bd:8c:a4:0b:bc:a0:a8:6d:cc:73:36:8a:4b:
                    7d:90:7c:4f:e9:11:ab:34:5f:ef:ca:cd:df:95:56:
                    cc:4a:84:34:73:76:56:d1:ba:94:2e:de:84:a2:50:
                    28:8f:70:cc:a8:26:e1:23:c9:e8:26:c9:dc:fb:a1:
                    19:a0:24:75:d7:fb:c8:00:02:95:9b:16:a4:53:a8:
                    07:97:3f:42:80:ee:e1:f7:41:91:0b:b5:e4:ca:27:
                    90:36:c5:02:d6:7c:18:44:70:24:f9:44:a8:86:15:
                    1c:72:01:ca:2e:3f:67:12:0a:58:93:7a:07:a0:18:
                    8d:b5:2a:e6:55:7a:32:18:47:47:83:e8:43:1d:01:
                    6c:b8:15:cd:d3:49:08:60:9d:6b:ee:36:20:ed:93:
                    14:ad:b5:fd:6f:89:d6:47:9c:66:f0:4d:9a:d3:b7:
                    cc:71:1f:c2:fa:dc:20:2d:41:fa:cc:ac:22:bc:a9:
                    52:9d:8c:5b:6d:5d:57:a9:dd:c8:bb:25:79:f7:05:
                    a9:ce:36:f0:79:5d:92:50:0a:a3:b8:32:69:c2:24:
                    13:fc:6e:3a:6b:4b:88:02:e7:3e:52:4d:1b:fc:78:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:F5:21:BD:BE:66:84:80:7B:D8:C3:D7:EB:A0:AD:B5:8E:C1:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2F040CE0A2311EC9EE8A579C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:8f:d8:41:56:08:0c:65:da:e8:1b:96:ce:e3:e9:06:3c:
         90:60:a6:66:fa:7a:13:fc:60:33:ca:26:95:ed:67:d7:b0:5a:
         c4:fb:c1:ec:35:b3:dd:f3:24:73:68:37:ee:88:cc:0c:4b:2e:
         3f:0c:7c:3c:8f:e1:e0:2c:7c:84:60:c9:8a:64:a7:06:8c:7f:
         9c:ba:f8:8b:3b:d8:62:0f:aa:d6:cb:89:69:66:16:f0:61:ee:
         78:55:df:9a:77:52:d2:64:bc:c5:ab:da:77:37:8c:22:f1:65:
         b7:cf:61:f4:31:6c:e5:19:fc:9f:47:bc:ce:d6:ac:89:f7:55:
         64:29:ca:dd:13:2e:a9:9b:fd:7f:bb:ee:2b:67:08:b0:ba:3d:
         16:2e:4a:60:57:d9:78:bf:b1:17:c6:27:54:2f:98:ba:34:fa:
         35:39:d0:50:e9:ff:c3:df:10:5a:63:49:88:3c:a6:d9:68:a9:
         f2:28:1e:9d:f6:6d:14:bc:d4:c5:c7:1c:0c:e9:aa:69:bb:16:
         2d:04:f8:06:c0:d2:89:62:09:25:11:23:32:59:82:4f:cc:8a:
         36:e6:bb:02:55:9a:84:f7:a9:14:c4:2a:f0:c9:23:7b:ae:0c:
         09:30:cd:72:89:9d:04:b6:9d:8b:0f:fc:fd:fd:e0:ef:69:d6:
         ee:b0:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----