Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/E6100776B2FE11ECAD63E74BC4F9AE02.roa
File:                     E6100776B2FE11ECAD63E74BC4F9AE02.roa (raw, json)
Hash identifier:          Op7mE/ZDxudUNsolz/i7m8uL1Ilj5ehTWF/Hp/WTXFA=
Subject key identifier:   8C:C7:FB:DF:51:AD:AE:20:B5:AE:BD:F4:AB:19:08:F2:7C:90:33:C6
Certificate issuer:       /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial:       05
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/E6100776B2FE11ECAD63E74BC4F9AE02.roa
Signing time:             Mon 04 Apr 2022 02:34:42 +0000
ROA not before:           Mon 04 Apr 2022 02:34:42 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     136237
IP address blocks:        103.84.136.0/23 maxlen: 24
                          103.84.138.0/23 maxlen: 24
                          2400:a040::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
        Validity
            Not Before: Apr  4 02:34:42 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=624a5941-9eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:8a:63:23:72:c8:28:6c:36:ba:d9:bb:58:
                    9a:78:b2:9d:ce:47:83:f8:04:b6:f5:33:79:bb:40:
                    b1:c9:15:64:8a:2d:90:32:22:80:a7:3f:20:4a:c8:
                    4c:68:df:4a:12:48:a4:52:3d:21:b2:95:3c:29:06:
                    97:91:76:ae:0b:c1:49:d5:82:8a:2c:8d:df:a8:7d:
                    3a:1c:55:2d:f6:f9:6d:cc:88:f8:1e:a5:ec:92:3c:
                    2f:e6:91:82:2e:ea:8d:a1:d7:ca:04:ad:fb:dd:15:
                    1f:56:2e:c5:5b:de:00:25:7d:1e:03:79:10:88:68:
                    21:95:6e:ac:21:7a:0a:82:09:ec:b9:a3:20:1d:5c:
                    3e:b8:ff:00:38:d4:ef:53:94:1f:1d:4d:1a:58:81:
                    02:de:0f:df:68:a1:09:a8:0c:37:5e:ea:50:14:9f:
                    0f:ce:70:ff:aa:43:bf:fe:9c:1e:0b:f1:18:1f:00:
                    42:0e:0e:b6:b8:1f:63:2c:9e:7c:19:d5:e7:2b:82:
                    8a:37:4a:6f:f2:e3:31:be:b6:65:b6:35:6c:84:74:
                    26:8b:b6:c9:3b:c2:8e:24:15:27:91:7e:48:fc:b3:
                    1e:eb:3d:f8:f5:11:e5:0a:4e:a9:fe:8f:a0:92:f0:
                    69:5e:eb:cd:a0:03:36:7d:9c:93:1a:85:e4:3d:d0:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:FB:DF:51:AD:AE:20:B5:AE:BD:F4:AB:19:08:F2:7C:90:33:C6
            X509v3 Authority Key Identifier:
                keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/E6100776B2FE11ECAD63E74BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.136.0/22
                IPv6:
                  2400:a040::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:55:24:2b:5c:f2:d3:5a:b7:9d:b9:d9:ce:d2:7f:71:71:
         bc:d8:6d:48:4a:ea:f3:42:9b:2a:2c:2a:47:cc:f3:e6:bd:b2:
         de:cc:1b:54:26:c6:f2:5e:8b:d3:15:af:43:e6:09:44:90:2b:
         46:e1:08:57:a2:7d:6c:87:97:3a:e3:b3:4e:bb:5e:12:15:b9:
         bd:57:34:a7:fd:c7:fd:9e:28:d2:b2:5d:69:75:23:b9:88:10:
         24:15:07:52:fa:64:a4:3e:bb:f3:f4:06:0b:cb:2d:28:3d:3e:
         a8:9e:69:80:24:f9:69:48:8a:b9:ec:59:85:e2:3c:12:59:4f:
         21:d6:dd:dc:3e:1d:58:73:b2:dd:62:87:df:8d:7b:23:6c:f9:
         7c:b5:bc:4e:c9:e3:c7:8e:18:d1:d4:f7:29:4c:53:ba:ad:54:
         6e:ce:b2:3f:c5:d8:bc:43:19:55:27:cb:44:d5:a0:eb:26:6c:
         f4:d0:ab:9b:40:5b:e6:b8:e6:05:b7:51:0a:99:e3:98:38:93:
         d8:75:9a:7b:3b:f0:2a:cf:54:b7:5f:63:e1:f2:22:2b:ee:ad:
         a6:e1:d4:25:bb:81:b7:74:1f:ee:66:ac:df:ca:03:e8:bf:11:
         32:9a:4d:e6:fe:d1:5d:b6:f9:d5:bd:38:d0:e2:99:83:c9:c2:
         b7:8a:14:5f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MzMzOTExMC8GA1UEBRMoODcyRTVBQjUzOUJFNDM4NTc0MDNENEY1RDQ1QTU0NzJC
QjIwN0E2RDAeFw0yMjA0MDQwMjM0NDJaFw0yMzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNGE1OTQxLTllZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7H4pjI3LIKGw2utm7WJp4sp3OR4P4BLb1M3m7QLHJFWSKLZAyIoCnPyBKyExo
30oSSKRSPSGylTwpBpeRdq4LwUnVgoosjd+ofTocVS32+W3MiPgepeySPC/mkYIu
6o2h18oErfvdFR9WLsVb3gAlfR4DeRCIaCGVbqwhegqCCey5oyAdXD64/wA41O9T
lB8dTRpYgQLeD99ooQmoDDde6lAUnw/OcP+qQ7/+nB4L8RgfAEIODra4H2MsnnwZ
1ecrgoo3Sm/y4zG+tmW2NWyEdCaLtsk7wo4kFSeRfkj8sx7rPfj1EeUKTqn+j6CS
8Gle682gAzZ9nJMaheQ90Bz3AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUjMf731Gt
riC1rr30qxkI8nyQM8YwHwYDVR0jBBgwFoAUhy5atTm+Q4V0A9T11FpUcrsgem0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzM5LzQ1MjY3OTcwQjJG
QTExRUNCNTc0Q0U3RkM0RjlBRTAyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2Vt
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaHk1YXRUbS1RNFYwQTlUMTFGcFVjcnNnZW0wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9FNjEwMDc3NkIy
RkUxMUVDQUQ2M0U3NEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAmdUiDANBAIAAjAHAwUAJACgQDANBgkqhkiG9w0BAQsFAAOC
AQEAorRVJCtc8tNat5252c7Sf3FxvNhtSErq80KbKiwqR8zz5r2y3swbVCbG8l6L
0xWvQ+YJRJArRuEIV6J9bIeXOuOzTrteEhW5vVc0p/3H/Z4o0rJdaXUjuYgQJBUH
UvpkpD678/QGC8stKD0+qJ5pgCT5aUiKuexZheI8EllPIdbd3D4dWHOy3WKH3417
I2z5fLW8Tsnjx44Y0dT3KUxTuq1Ubs6yP8XYvEMZVSfLRNWg6yZs9NCrm0Bb5rjm
BbdRCpnjmDiT2HWaezvwKs9Ut19j4fIiK+6tpuHUJbuBt3Qf7mas38oD6L8RMppN
5v7RXbb51b040OKZg8nCt4oUXw==
-----END CERTIFICATE-----