Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/9FFD3E8417EA11ECAE169014C4F9AE02.roa
File:                     9FFD3E8417EA11ECAE169014C4F9AE02.roa (raw, json)
Hash identifier:          3epK+jfPSCpNEU8e4dK4uMz6A0LnBPtKRFJYGlw19Zg=
Subject key identifier:   79:E5:C7:65:6D:5A:94:E6:80:64:7D:E0:F9:85:9D:F1:18:71:9A:91
Certificate issuer:       /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68
Certificate serial:       074F
Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/9FFD3E8417EA11ECAE169014C4F9AE02.roa
Signing time:             Wed 20 Apr 2022 21:47:27 +0000
ROA not before:           Wed 20 Apr 2022 21:47:27 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     56264
IP address blocks:        103.148.212.0/24 maxlen: 24
                          103.148.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68
        Validity
            Not Before: Apr 20 21:47:27 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62607f6f-4514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:9d:63:10:4d:2d:ff:cd:e1:c6:00:3d:ff:
                    c1:71:f7:db:60:67:95:f5:73:c0:87:32:9c:ee:bf:
                    f3:8d:d3:8d:72:a8:10:6f:96:be:f8:0d:64:37:69:
                    58:9a:bf:78:b0:65:3d:55:50:f8:1b:99:43:61:78:
                    2a:93:e5:85:2e:71:bb:3c:96:9c:ee:e6:78:a6:77:
                    35:3d:80:38:61:44:84:1a:19:fb:89:ed:e7:1f:d0:
                    58:63:6d:80:9a:d8:62:93:ca:c5:d2:3f:3a:b1:55:
                    9b:39:6c:89:77:ee:1e:06:3b:d2:ea:41:ee:a2:99:
                    bf:3f:6a:9d:84:8a:fe:bb:3e:22:8c:ae:06:f6:94:
                    5d:bf:3c:a3:1f:de:cf:34:05:24:41:e5:6d:62:c6:
                    34:4d:2c:15:c0:24:08:e4:1f:9b:78:8b:62:fd:07:
                    d7:82:71:4b:0f:ff:53:95:3b:d1:eb:88:a9:e9:9b:
                    52:8b:78:fd:d5:c3:a8:85:5e:8c:01:50:c2:cf:d0:
                    13:08:bc:ee:30:22:78:70:90:46:11:8d:d0:24:e9:
                    75:de:78:f2:6b:39:ab:26:1e:e8:55:f6:8a:d5:9a:
                    7f:da:a1:9c:af:27:22:7e:55:41:fe:c9:d5:f1:e6:
                    e5:d2:29:56:6c:33:63:ac:0e:55:9c:3a:e5:83:16:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:C7:65:6D:5A:94:E6:80:64:7D:E0:F9:85:9D:F1:18:71:9A:91
            X509v3 Authority Key Identifier:
                keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/9FFD3E8417EA11ECAE169014C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:e5:59:1f:86:fa:91:a0:40:5a:f3:43:2f:43:71:9a:86:
         fb:94:dd:5b:95:8f:24:ed:4f:e5:61:d7:b0:68:09:c2:4e:4c:
         c3:49:ff:1f:7d:2b:a0:e6:66:02:e3:3b:27:80:04:ff:32:45:
         16:aa:4b:13:28:fe:40:48:28:e7:50:e8:6e:23:6c:d3:a0:16:
         cc:e7:e7:08:a6:e9:ab:72:91:59:15:6e:7b:16:f4:4e:7c:c6:
         1b:82:64:77:e1:5c:c1:db:03:25:46:1b:8f:af:1d:83:c5:f4:
         5b:3f:04:3a:07:b0:2d:d6:b4:63:8c:d4:45:14:7b:af:c1:a4:
         27:1d:6b:c3:66:ca:45:cc:e2:be:c4:1e:d0:51:01:c8:74:1f:
         93:1f:2c:67:12:91:18:97:30:4f:c2:d3:08:f3:e9:0f:08:fd:
         02:c6:0b:13:04:79:47:69:04:26:78:7a:60:25:8c:25:69:6d:
         68:b2:a1:d8:c0:8c:0b:8b:91:91:a4:0c:1a:e3:5f:12:22:74:
         3c:29:e6:0e:d3:b6:a3:6d:2c:23:1e:90:4e:4f:07:a3:f5:ee:
         31:8b:1c:d0:29:c0:a9:d3:b6:ef:f8:2b:db:53:b0:bd:18:dd:
         55:9a:25:11:13:af:ab:92:81:0d:ad:43:44:9f:35:e8:63:16:
         5b:bd:26:a4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG
QkJEMjdCNjgwHhcNMjIwNDIwMjE0NzI3WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjYwN2Y2Zi00NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8WGdYxBNLf/N4cYAPf/BcffbYGeV9XPAhzKc7r/zjdONcqgQb5a++A1kN2lY
mr94sGU9VVD4G5lDYXgqk+WFLnG7PJac7uZ4pnc1PYA4YUSEGhn7ie3nH9BYY22A
mthik8rF0j86sVWbOWyJd+4eBjvS6kHuopm/P2qdhIr+uz4ijK4G9pRdvzyjH97P
NAUkQeVtYsY0TSwVwCQI5B+beIti/QfXgnFLD/9TlTvR64ip6ZtSi3j91cOohV6M
AVDCz9ATCLzuMCJ4cJBGEY3QJOl13njyazmrJh7oVfaK1Zp/2qGcryciflVB/snV
8ebl0ilWbDNjrA5VnDrlgxYjmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHnlx2Vt
WpTmgGR94PmFnfEYcZqRMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB
RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThDQjYvNTZBNEE2NDA1QUU2MTFFQTlDODhDQjgyQzRGOUFFMDIvOUZGRDNFODQx
N0VBMTFFQ0FFMTY5MDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlNQwDQYJKoZIhvcNAQELBQADggEBAB2C5VkfhvqRoEBa
80MvQ3GahvuU3VuVjyTtT+Vh17BoCcJOTMNJ/x99K6DmZgLjOyeABP8yRRaqSxMo
/kBIKOdQ6G4jbNOgFszn5wim6atykVkVbnsW9E58xhuCZHfhXMHbAyVGG4+vHYPF
9Fs/BDoHsC3WtGOM1EUUe6/BpCcda8NmykXM4r7EHtBRAch0H5MfLGcSkRiXME/C
0wjz6Q8I/QLGCxMEeUdpBCZ4emAljCVpbWiyodjAjAuLkZGkDBrjXxIidDwp5g7T
tqNtLCMekE5PB6P17jGLHNApwKnTtu/4K9tTsL0Y3VWaJRETr6uSgQ2tQ0SfNehj
Flu9JqQ=
-----END CERTIFICATE-----