Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
File:                     5B068E72B0DB11EC87206C69C4F9AE02.roa (raw, json)
Hash identifier:          ZvyqDoRFQ+N4q4G9YnSRUb3rBQwub4Hfc+8gyHS+rDA=
Subject key identifier:   1B:05:0D:C9:EF:8C:D2:AF:C8:C3:C5:63:AD:3A:CC:97:F2:2A:B0:6D
Certificate issuer:       /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial:       37
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
Signing time:             Thu 31 Mar 2022 10:14:32 +0000
ROA not before:           Thu 31 Mar 2022 10:14:32 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     136461
IP address blocks:        103.183.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
        Validity
            Not Before: Mar 31 10:14:32 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62457f07-f5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:11:11:7d:4b:6d:2e:d6:4a:3a:1d:21:54:
                    7a:36:c0:5a:c0:3e:d3:a2:33:b9:9e:b1:78:07:77:
                    4d:63:94:cc:e7:2a:a7:db:21:ef:cc:d3:9b:60:42:
                    fc:f7:55:07:97:b6:f8:f4:e3:80:08:ba:a3:49:90:
                    ae:d1:8a:e0:db:2f:b5:07:1a:c7:b5:ad:34:88:5b:
                    1b:c5:a4:2d:08:d7:ee:88:62:77:27:e2:17:7b:07:
                    e1:1a:fe:27:d9:57:c5:a4:69:d8:38:b5:f7:68:cf:
                    eb:94:5d:f8:ed:cf:3b:af:1c:f9:2c:70:70:74:c5:
                    1c:d9:b7:57:e7:bf:c1:0c:39:6e:0f:8b:ee:e4:f6:
                    66:b9:14:07:68:6a:56:92:59:15:90:eb:2d:09:5d:
                    7a:fb:94:a7:ca:1a:87:1a:85:59:81:14:36:b6:f8:
                    22:b2:61:e4:66:4c:a7:1f:a1:7d:60:53:b0:05:46:
                    57:22:18:52:ab:d5:3b:f7:59:4f:07:d7:b3:e9:60:
                    7c:6a:46:be:8d:87:ad:de:37:3e:0e:7f:f6:a6:e5:
                    3f:ac:6a:1b:74:0f:6c:d3:aa:1c:54:11:76:45:8c:
                    69:20:15:bc:68:1b:87:7e:e5:49:06:41:e5:04:c7:
                    0d:35:d7:07:c5:f8:71:7e:ad:54:27:7b:03:52:e9:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:0D:C9:EF:8C:D2:AF:C8:C3:C5:63:AD:3A:CC:97:F2:2A:B0:6D
            X509v3 Authority Key Identifier:
                keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/5B068E72B0DB11EC87206C69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:36:cc:43:b8:ca:08:91:78:bf:c3:78:07:dd:b1:9e:4f:4d:
         78:9b:e9:33:6c:4d:33:ea:b1:3c:3c:28:4b:83:27:70:0d:1f:
         46:26:0e:9d:3a:e1:ea:a1:d7:9b:0b:1b:3f:43:eb:45:29:8b:
         0e:dc:d2:0f:09:01:7b:04:74:ba:52:0e:5d:d5:59:c9:32:88:
         7f:b4:be:ca:c0:e4:52:2d:f6:e2:5a:56:da:30:6b:cc:77:b8:
         3a:55:b4:db:0f:a0:1c:10:49:d8:89:44:c3:d2:6b:14:55:68:
         24:fe:ef:23:73:cd:1b:c3:ea:cc:71:9f:78:c0:77:6f:3a:18:
         6f:3e:0c:42:7d:4a:f4:83:69:fb:f1:5f:82:83:87:3b:8a:f7:
         15:4b:c6:da:f0:30:a9:b3:99:e5:7c:5f:ee:ca:14:c9:c5:d8:
         87:21:7b:7f:6c:a7:03:f3:a9:50:65:41:a0:f1:19:5a:ae:db:
         3a:6f:de:61:12:27:7a:ed:70:24:9b:47:44:7b:af:e1:8a:56:
         0a:02:94:68:ae:ae:6c:80:c6:7a:9b:27:25:2e:bb:20:d8:c1:
         e0:38:a5:54:1a:b9:34:dc:b3:2d:0f:9f:b9:b0:7d:8f:ff:bb:
         cf:55:bb:33:ff:57:8c:7e:e4:3b:67:4b:a9:41:1a:17:46:08:
         96:4e:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----