Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/6BC1ED0083FA11EC9C033067C4F9AE02.roa
File:                     6BC1ED0083FA11EC9C033067C4F9AE02.roa (raw, json)
Hash identifier:          QG4DF4yX0Q14sa05kHrwUTyr8V5Go9BtYNGntMZkSQk=
Subject key identifier:   95:2B:31:80:01:0C:06:3D:AE:9E:F9:3E:26:19:FA:FB:AA:BE:28:40
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       08
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/6BC1ED0083FA11EC9C033067C4F9AE02.roa
Signing time:             Thu 03 Feb 2022 14:53:42 +0000
ROA not before:           Thu 03 Feb 2022 14:53:42 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     149485
IP address blocks:        103.181.0.0/23 maxlen: 23
                          103.181.0.0/24 maxlen: 24
                          103.181.1.0/24 maxlen: 24
                          2400:56a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Feb  3 14:53:42 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=61fbec75-0b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:cc:9d:e1:b9:8e:93:d9:d0:d4:4f:9e:ae:
                    d0:16:29:16:c6:b6:2f:5c:30:1a:00:47:82:ea:c4:
                    94:c8:60:52:cb:31:3f:c8:0a:ce:b6:7a:b6:79:78:
                    4d:f7:37:25:79:33:7e:32:aa:ed:88:2d:65:c3:86:
                    58:79:30:0f:52:8f:53:26:f0:61:68:a2:08:d3:16:
                    73:02:89:cb:ea:52:6e:48:7a:dc:7b:9d:69:30:59:
                    7d:43:27:91:72:2b:4d:24:c8:8d:6c:d8:61:b6:ec:
                    72:39:ac:4c:f2:89:bf:04:ea:1c:3c:a7:bf:23:0d:
                    f3:94:cf:ea:f9:51:89:fa:dc:eb:df:78:d7:e8:68:
                    4f:8c:d5:84:b5:a7:84:d8:85:22:80:ab:8d:ca:2b:
                    45:3f:bc:0d:6b:7b:4e:5e:8c:13:db:46:36:e1:6c:
                    ea:cb:99:00:12:e2:20:80:97:cb:4f:52:1d:86:71:
                    de:ac:1b:15:44:2f:da:e2:65:e4:a1:ed:5f:5a:0a:
                    a1:c5:46:14:03:ac:36:2e:5f:80:be:f0:2a:47:96:
                    b6:3d:c5:04:62:64:cb:a9:c6:0d:66:b0:95:1f:96:
                    97:8c:0c:1d:c1:c9:81:15:8b:00:2e:51:dd:15:9b:
                    f3:88:52:89:7d:3b:69:d4:41:ae:e8:0f:ea:16:84:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:31:80:01:0C:06:3D:AE:9E:F9:3E:26:19:FA:FB:AA:BE:28:40
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/6BC1ED0083FA11EC9C033067C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.0.0/23
                IPv6:
                  2400:56a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:93:3d:45:66:9b:f9:15:f8:c6:0f:e3:54:e1:ad:4a:c8:f1:
         ee:bb:62:2d:7f:96:35:a4:6c:fb:0f:b8:0d:77:e8:f9:65:27:
         a9:ee:37:62:f0:98:eb:be:80:42:34:dd:a9:f6:b2:e9:d2:69:
         c2:ce:8c:ab:39:8b:e4:15:9e:5f:b2:1a:94:3a:85:05:9d:d1:
         6d:b2:fb:79:48:68:d2:7c:19:ec:cd:40:80:d2:50:09:bc:d4:
         7c:10:6f:50:e7:1c:a2:be:99:e7:c7:c2:1b:4b:1f:03:2c:01:
         94:52:d3:1a:18:6c:eb:b4:b3:16:5c:8e:8d:8e:ea:54:ba:00:
         e5:21:48:06:1e:c6:53:4a:1f:78:f2:9a:8c:d1:18:95:de:3e:
         08:6d:67:53:9f:5f:00:da:b8:38:e0:26:5a:a5:f5:26:a5:f0:
         32:d3:af:32:11:ea:0c:36:1d:86:92:71:c0:1f:df:2a:bf:10:
         06:2d:a2:65:6c:97:7b:85:a1:4c:86:96:07:81:3d:2b:f2:6d:
         bc:28:43:24:07:23:1b:bb:2a:9a:6a:3f:bd:c0:92:e4:bc:af:
         14:52:3b:75:d7:27:e2:a3:ca:a1:d3:3b:b1:9d:54:f2:a7:1a:
         40:e7:fe:cf:fe:2d:5e:81:7d:49:4f:e7:a1:0a:57:22:c0:c3:
         e0:04:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----