Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
File:                     C1618BFA617111EBBC678459C4F9AE02.roa (raw, json)
Hash identifier:          YF7SljG7oFnybnS2JMsPY2+2aM9T1cwOvPPrZFaYFOs=
Subject key identifier:   27:94:A3:61:0B:50:0C:49:5F:3E:42:7F:8B:E5:DF:88:B3:40:83:A4
Certificate issuer:       /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial:       0872
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
Signing time:             Mon 26 Jul 2021 07:36:57 +0000
ROA not before:           Mon 26 Jul 2021 07:36:57 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     140900
IP address blocks:        103.116.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
        Validity
            Not Before: Jul 26 07:36:57 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=60fe6619-9cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:98:90:6b:7a:a1:15:b7:64:9b:c1:39:0c:
                    70:90:7b:6d:8d:a3:fd:48:14:03:8d:f2:ff:a6:3f:
                    f9:4d:f0:cb:82:02:0a:3f:8e:f5:e7:c1:dc:e6:57:
                    f1:68:95:68:56:80:d7:49:79:b8:00:fa:73:0e:34:
                    d3:3f:bb:8c:b2:c0:7c:a0:0e:67:b2:d2:c5:b6:41:
                    7b:ad:31:3f:ec:b1:a0:f2:23:bc:b2:2b:88:39:fb:
                    7e:7d:bd:18:7f:43:17:e2:20:1a:5f:23:89:db:ec:
                    58:a3:ec:06:09:f1:19:40:40:34:fd:83:a7:45:46:
                    3d:af:f8:7a:f8:be:6a:f3:cc:d8:14:df:84:c3:c7:
                    b4:76:5f:1e:33:f2:1c:92:3d:55:fe:8c:39:a5:4b:
                    91:93:59:5d:94:58:25:b4:5b:c7:01:6f:e1:1d:de:
                    44:b2:2f:74:7a:34:3d:7a:5f:15:1f:5c:54:e3:be:
                    3f:c4:81:6f:1d:8e:9f:f5:d2:ba:c1:f7:36:36:2f:
                    0c:aa:4f:63:97:86:97:50:83:af:ca:78:7c:d8:be:
                    8d:75:e2:80:0a:f0:8d:1c:08:9e:08:01:65:82:fb:
                    8d:c6:b9:c7:2b:98:e6:5b:9e:1d:3e:3d:fa:3b:ba:
                    27:bf:9b:64:8f:0d:36:4b:50:d3:54:b7:6b:3c:07:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:A3:61:0B:50:0C:49:5F:3E:42:7F:8B:E5:DF:88:B3:40:83:A4
            X509v3 Authority Key Identifier:
                keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C1618BFA617111EBBC678459C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1e:dd:30:25:1f:68:12:73:0a:e1:12:da:7c:3a:14:cf:87:
         6d:43:01:4d:0e:51:45:f0:05:52:f5:d3:5e:4c:43:68:75:fc:
         aa:39:a9:2a:a7:2a:d2:fa:d7:cd:96:3f:42:1c:9b:7d:3f:d1:
         75:44:42:3b:1c:95:31:a1:46:69:92:65:2b:50:dc:b1:f5:ed:
         63:77:07:0e:b1:bc:dd:7b:5f:51:fb:f3:12:65:c3:e0:75:80:
         22:c6:43:ae:3a:60:82:17:f6:df:ac:8f:37:be:f9:e7:ce:4b:
         95:11:7d:0d:0f:48:70:18:37:2e:bf:7c:60:9e:7a:71:06:e9:
         72:b3:1a:2f:64:0c:1a:a9:a8:e6:98:e4:d6:6a:6e:e8:41:77:
         8d:31:40:ea:66:55:7a:99:6a:54:cf:fc:9b:20:4a:4f:f2:a6:
         bc:5e:53:42:4d:6c:fa:79:6a:b1:75:98:e5:f1:52:52:f0:4f:
         24:cf:c7:3c:69:17:f8:89:aa:e6:2d:1f:d9:ae:b3:f1:45:01:
         3b:2a:d3:e7:ac:3c:58:d6:bb:1c:c4:8f:ef:07:8c:2d:2b:b8:
         21:7a:e0:70:4e:77:a6:3e:e1:8e:e4:53:58:aa:7d:2d:6d:dc:
         28:b4:74:86:97:d9:7e:15:64:ed:23:03:9a:57:b8:0b:19:64:
         4b:92:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----