Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/14A6C35C063F11EDA55AFB22C4F9AE02.roa
File:                     14A6C35C063F11EDA55AFB22C4F9AE02.roa (raw, json)
Hash identifier:          Oz/jGgcWUFd/t2bBdFXpc77ETzGkBRks5kEc3+Oc+4U=
Subject key identifier:   4C:E2:D6:D0:CA:2E:1B:83:E4:53:D5:9E:2C:57:04:10:96:93:77:19
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       0211
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/14A6C35C063F11EDA55AFB22C4F9AE02.roa
Signing time:             Mon 18 Jul 2022 02:12:32 +0000
ROA not before:           Mon 18 Jul 2022 02:12:32 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     993
IP address blocks:        103.175.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Jul 18 02:12:32 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=62d4c190-4bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:ff:c4:70:ce:3b:e1:c2:61:a5:af:69:55:
                    a1:58:97:0a:3f:cd:5e:c6:21:bf:2b:a1:0b:6d:d7:
                    60:98:27:71:b3:aa:70:cd:95:68:57:81:58:e6:35:
                    6b:4a:40:5a:b8:cf:a9:91:c8:e8:d3:d6:5a:76:ac:
                    c2:eb:80:6e:c6:ed:92:7a:bd:ad:e7:32:38:34:70:
                    6f:c0:fa:e5:0a:72:48:ce:8e:0e:3e:b6:a1:e0:d7:
                    bb:50:08:1e:bf:a5:1e:0b:e6:77:c5:47:90:a6:c4:
                    34:7e:e1:8b:03:38:90:64:4e:f4:92:07:22:ab:f1:
                    3c:7e:9a:a6:61:83:2b:ba:2c:38:c6:d8:d9:ac:24:
                    d5:ee:22:dd:d6:d9:c7:b1:87:af:1b:80:8a:aa:0b:
                    7c:56:b0:11:a0:e6:3b:de:62:ee:cc:ff:1a:03:c9:
                    52:6f:b4:ac:de:b9:49:e9:7d:21:88:c9:75:08:20:
                    69:87:d6:f2:93:89:a1:f1:da:67:16:02:55:b9:68:
                    1c:2c:71:0c:c1:67:14:79:a9:05:3a:e7:e4:54:2a:
                    4b:7d:5c:3d:4d:e5:1b:b6:20:a7:b0:9a:02:55:df:
                    71:62:5c:fc:15:97:22:a4:f3:f6:c4:9b:dd:d0:44:
                    55:d7:41:02:57:37:cb:46:d0:86:9f:1a:f8:42:03:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E2:D6:D0:CA:2E:1B:83:E4:53:D5:9E:2C:57:04:10:96:93:77:19
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/14A6C35C063F11EDA55AFB22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:ca:a0:4a:6c:cd:be:40:0c:6d:a3:f0:a6:8d:5b:40:09:
         90:bb:ac:d5:6a:6b:7b:b1:a8:7b:a9:d4:a0:ba:f0:92:d9:f2:
         cd:3d:2f:bd:81:82:8a:c8:40:71:03:83:3e:3d:36:82:35:21:
         b7:41:94:eb:95:a7:9c:7e:fb:2e:41:a2:1c:2f:ad:09:ad:0c:
         63:55:f4:a8:6c:fd:43:94:35:50:cf:4e:f4:fa:d5:64:d0:90:
         f8:d7:94:0c:bd:d6:92:f7:75:b3:39:2e:3e:cb:7a:b7:1e:15:
         aa:6a:cd:9e:6e:49:29:04:db:21:5b:49:72:e7:32:e3:e2:12:
         90:8a:9d:c4:08:a3:84:cb:cd:de:de:72:2c:c2:9d:96:b5:d5:
         b0:82:66:74:7f:35:7c:6f:da:89:16:05:a1:e8:b8:0f:84:4b:
         95:b4:d1:5e:a9:1b:ea:ff:b6:66:88:45:f7:4f:32:fa:cd:d8:
         02:29:26:e7:df:dc:a2:67:02:94:b7:78:45:53:c4:8a:39:f0:
         28:e3:f9:aa:dc:10:67:9d:01:48:a7:e3:16:87:11:29:3d:bf:
         6f:4f:29:cb:8c:af:b0:0e:fa:bd:09:3c:bf:56:d8:c3:e0:9d:
         ca:5a:91:d6:e5:ef:da:9b:df:c5:98:17:19:ef:04:7f:65:89:
         5b:c1:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----