Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/626DEBF0195011ED818A3C66C4F9AE02.roa
File:                     626DEBF0195011ED818A3C66C4F9AE02.roa (raw, json)
Hash identifier:          1ua0mtcjPKT+0ba6ebpFHPqpQ79UMWiJRy2Xy2Gl0Ag=
Subject key identifier:   C1:9D:55:9E:C6:CE:3F:DD:78:1D:17:25:66:83:BA:25:A9:8F:12:4C
Certificate issuer:       /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial:       02
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/626DEBF0195011ED818A3C66C4F9AE02.roa
Signing time:             Thu 11 Aug 2022 08:34:16 +0000
ROA not before:           Thu 11 Aug 2022 08:34:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149766
IP address blocks:        103.185.146.0/23 maxlen: 23
                          2001:df0:9840::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
        Validity
            Not Before: Aug 11 08:34:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62f4bf08-d5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:9c:6f:c0:62:2c:3b:39:82:29:ca:b1:9c:
                    43:aa:40:39:38:76:fb:bb:89:70:e2:cd:54:89:4a:
                    8c:dd:2d:82:10:a1:5a:9c:1b:7b:24:b3:bf:5f:08:
                    9f:1d:b7:4d:30:47:17:6b:6c:fb:4f:a1:74:90:6b:
                    5f:79:22:d0:da:2f:b8:d1:45:9f:73:f9:13:84:f7:
                    00:1b:d1:95:82:39:4b:9a:f9:71:8f:57:27:59:92:
                    63:02:21:73:d7:5f:80:1a:06:95:6d:35:c4:28:48:
                    c7:ca:63:75:51:e9:6e:19:12:71:71:5a:b9:29:47:
                    ab:9b:05:8c:ff:b0:f3:44:b7:f1:2c:9d:b6:ba:e4:
                    f9:bc:97:fc:dd:1e:c6:33:1c:c7:92:eb:8e:f7:47:
                    07:09:11:0e:cf:5f:3a:37:20:64:e5:cb:12:50:2b:
                    02:7e:fa:98:8f:bc:a6:95:ac:63:56:0a:b4:b8:2c:
                    09:03:0a:b2:65:3a:9f:bd:4b:bb:05:3d:81:18:07:
                    93:22:e5:69:e1:5f:ac:bc:00:5a:c6:88:b3:f6:78:
                    da:86:97:87:d5:62:3f:fc:b6:99:38:6e:72:88:8b:
                    b0:78:a9:e0:2a:2d:bb:28:6d:f6:5b:43:c0:50:ec:
                    df:2f:95:42:f7:55:63:0b:ef:44:f5:7c:ee:2f:5b:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:55:9E:C6:CE:3F:DD:78:1D:17:25:66:83:BA:25:A9:8F:12:4C
            X509v3 Authority Key Identifier:
                keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/626DEBF0195011ED818A3C66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.146.0/23
                IPv6:
                  2001:df0:9840::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:27:39:5a:f0:44:61:0f:60:b9:83:56:c6:55:df:0a:d9:
         80:0d:bf:3d:cf:a6:b8:27:41:5c:17:91:8f:0e:0a:01:3d:9a:
         03:f7:58:cd:22:c1:7c:57:88:13:d5:3b:ad:ad:71:b1:4a:8f:
         53:cf:eb:54:0c:e2:cc:65:b8:fc:17:e8:39:66:1b:95:ef:53:
         08:96:15:b6:bb:7f:d3:41:85:d7:1d:2f:d3:ef:c0:f5:d2:4c:
         d7:fe:f7:3d:66:67:e5:89:f9:1a:c0:37:77:fb:3a:96:b6:34:
         d3:24:fc:c0:0e:ef:e2:dd:5f:ea:5a:19:99:6c:b9:77:7c:aa:
         57:fc:92:1c:32:07:bf:01:dc:db:82:32:24:49:1d:fe:b5:65:
         30:3f:94:fe:99:ab:ff:cc:08:b2:65:12:e1:40:44:e8:9d:d8:
         0f:e3:ce:2f:05:c0:b8:3d:2c:d5:db:92:ec:57:9d:4b:10:d3:
         54:c1:32:58:2f:d9:1d:01:d7:4a:07:3d:7f:0d:1a:75:65:e5:
         90:bd:7d:72:64:17:5d:fa:ad:3c:f0:06:48:55:54:f0:a0:dd:
         f6:78:42:30:e8:2f:4b:ba:e3:ee:fa:e5:97:dc:a1:01:89:84:
         8d:28:db:d9:e8:b6:29:8f:db:93:a2:eb:97:96:3a:4e:64:5c:
         c0:d5:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----