Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
File:                     1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa (raw, json)
Hash identifier:          AAs1ltmmHWnS4GOYsfsGxsK/qn5EiHwrr+KUGnEABJQ=
Subject key identifier:   E1:DF:5F:EF:7D:AD:CD:21:C3:6C:44:84:AE:3F:F3:AD:42:8D:34:AA
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       04
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
Signing time:             Thu 07 Jul 2022 06:14:54 +0000
ROA not before:           Thu 07 Jul 2022 06:14:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13631
IP address blocks:        103.187.70.0/23 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: Jul  7 06:14:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62c679de-4d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:6a:47:6e:e0:89:96:3b:52:c0:05:75:70:
                    72:d6:f4:85:aa:e1:39:f6:ac:cd:f9:3b:2c:48:32:
                    99:08:95:c0:f4:04:0d:00:bd:3e:d7:f0:d1:8d:77:
                    59:7b:e9:86:d3:41:81:bb:8b:30:30:d4:7a:44:ca:
                    71:36:9e:5b:19:f8:a8:c7:72:fa:c4:f5:ee:b4:c3:
                    c8:b9:b1:0f:12:6d:86:18:4c:ea:d4:bb:b9:d1:77:
                    c5:01:f5:99:9d:ea:25:a9:cf:08:f5:f3:c3:2c:f8:
                    88:52:7c:a3:54:0c:72:28:20:ec:00:c4:a5:39:81:
                    a7:bf:9d:f5:63:65:a0:a5:58:6d:68:79:e9:2e:64:
                    30:d6:57:be:f1:e6:cc:e2:aa:ef:86:b6:fa:d6:05:
                    28:d6:b5:9a:9e:03:18:50:d0:0d:d6:63:eb:a4:f8:
                    3e:9f:ab:9c:01:21:29:4f:89:eb:e4:09:dc:61:f6:
                    56:c8:b8:1d:c3:fc:1b:b1:e5:28:d6:dc:eb:72:c3:
                    27:09:02:58:6c:b1:2d:e5:f0:7e:e0:14:97:28:7c:
                    0f:67:11:d2:8f:a0:59:02:fd:36:71:d7:01:43:76:
                    65:93:92:c4:79:4c:0b:64:2c:11:f1:13:04:08:5b:
                    5b:85:e7:22:6f:81:d5:a9:0a:97:2b:dc:a8:43:41:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:5F:EF:7D:AD:CD:21:C3:6C:44:84:AE:3F:F3:AD:42:8D:34:AA
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/1E1F21EEFDBC11ECAE699C1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:0b:98:0e:f1:8d:eb:30:7c:ad:d8:73:5c:de:ec:8e:6b:
         15:c1:64:6c:26:e7:12:d9:66:46:16:46:4c:72:da:a9:ea:b7:
         67:8d:0f:1d:41:c0:66:9f:5e:73:9c:c0:01:25:f4:5a:24:0b:
         84:d8:80:dc:34:ac:23:8e:2a:14:2b:7b:19:07:20:b4:57:cd:
         92:5b:a7:2c:17:d1:25:97:a8:65:8a:b3:14:f1:c4:47:36:40:
         39:e8:5a:0a:f5:a5:85:ba:2f:92:72:7c:bd:4f:73:52:ec:cb:
         e9:8e:5f:ff:d7:f3:dd:da:ac:e1:16:a5:df:01:76:62:ad:7e:
         25:5e:4e:3f:37:90:0c:da:2c:a0:39:a0:d5:e6:ce:b9:db:d6:
         ce:35:ac:83:ae:52:63:38:61:4b:f2:6c:e6:40:f9:31:6c:ee:
         5d:ce:ce:8c:58:97:1c:de:26:57:f2:f1:45:4f:2b:28:de:de:
         bb:bb:d0:94:2f:08:74:05:35:c7:fb:c3:6f:dc:3b:70:69:4d:
         c1:c9:3b:7a:e0:5f:b4:28:04:85:56:7d:86:89:95:6e:65:1c:
         35:d3:00:e0:3a:4a:d2:2b:99:57:21:e4:93:92:c7:36:c9:0b:
         5b:18:20:78:7e:26:d4:6a:0d:95:cc:56:a5:d1:17:71:f0:e9:
         1d:62:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----