Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/663EC31A7E7011EC84E3C158C4F9AE02.roa
File:                     663EC31A7E7011EC84E3C158C4F9AE02.roa (raw, json)
Hash identifier:          6/FDoxPBXomm44fQ9iE9gDoLvStqQ5T/RU2euadQ0lA=
Subject key identifier:   0C:D3:46:97:51:FB:09:8D:C2:98:22:26:F5:44:F0:22:FB:7D:DD:65
Certificate issuer:       /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Certificate serial:       03
Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/663EC31A7E7011EC84E3C158C4F9AE02.roa
Signing time:             Wed 26 Jan 2022 06:22:56 +0000
ROA not before:           Wed 26 Jan 2022 06:22:56 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     211843
IP address blocks:        103.180.108.0/23 maxlen: 24
                          2001:df0:59c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
        Validity
            Not Before: Jan 26 06:22:56 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=61f0e8c0-aa6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:40:8f:af:ff:80:0c:a7:07:10:2d:b1:9a:
                    19:06:02:8d:4f:8e:9f:e1:f9:db:80:49:15:ec:41:
                    5c:0a:2d:0e:27:f6:9f:79:db:ee:b4:c9:45:ef:01:
                    6f:d5:ef:6a:e7:1f:84:57:6f:18:ca:7f:e2:19:a5:
                    77:38:2c:47:0f:e7:df:26:29:45:37:d9:75:b0:f6:
                    94:19:97:0b:40:ce:ee:cf:61:b8:77:6c:f7:b4:57:
                    20:ea:e5:6f:fb:12:a7:60:2f:44:67:c9:c2:c6:8a:
                    a9:69:f9:25:a9:b5:f1:06:c8:a6:81:0f:45:9c:8d:
                    8f:99:35:28:8b:29:fe:ea:27:47:82:42:ca:11:d3:
                    67:72:82:db:af:c7:64:ff:df:a3:c1:a1:31:7c:54:
                    94:8b:81:c0:49:2a:62:f0:e9:51:4c:69:09:6c:b2:
                    f0:3f:0e:7a:5d:94:3e:33:c5:45:b7:55:8a:bc:2e:
                    c9:5f:ff:6d:cc:92:25:f4:14:c8:ed:57:6b:7b:a1:
                    29:7f:d7:60:d2:ec:e5:2c:02:1b:10:a6:69:d2:72:
                    14:20:57:9c:0d:6f:cf:5d:2b:b1:70:99:3d:8d:ba:
                    05:6f:1d:b3:60:62:62:2b:99:df:72:2c:4a:56:97:
                    4d:a8:0b:a9:72:79:19:35:51:cd:e2:f0:61:af:4a:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:46:97:51:FB:09:8D:C2:98:22:26:F5:44:F0:22:FB:7D:DD:65
            X509v3 Authority Key Identifier:
                keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/663EC31A7E7011EC84E3C158C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.108.0/23
                IPv6:
                  2001:df0:59c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:78:bf:9b:0d:3e:cd:35:76:21:fa:93:e5:31:54:eb:03:5d:
         97:8a:d0:9f:af:41:eb:04:a8:ee:0b:7a:f0:39:25:1d:f1:37:
         5f:3c:c1:dc:a5:21:d8:f4:c8:bb:c3:fb:04:60:44:09:71:9a:
         16:7c:ee:66:de:df:c8:25:21:f7:76:cd:56:3d:68:46:f0:ca:
         35:b1:3f:14:17:4d:4a:5b:45:b6:31:d2:e7:f1:d7:6e:d9:54:
         db:fa:99:0e:ab:2b:a7:0d:b2:8c:80:12:dc:60:90:ba:7e:5b:
         89:35:c0:52:8b:0e:9c:48:33:e2:5a:8c:f6:8f:e6:f7:b8:3e:
         db:ab:6b:91:c8:25:2c:05:17:68:95:b0:8a:62:90:8e:d4:1c:
         81:a6:c9:f9:d3:f4:be:38:30:a5:5b:01:5f:a5:f4:66:ff:bd:
         a7:12:44:b5:08:1e:be:b3:38:8d:1f:1c:11:d1:24:48:99:db:
         43:f8:76:cd:37:f7:8f:72:76:fc:80:8d:2a:c4:c5:75:79:c2:
         55:5c:89:43:97:91:b5:e4:6d:78:b2:b0:26:08:aa:76:25:e5:
         f7:7f:fd:37:83:ca:d3:e2:ad:97:f7:5e:a0:1e:a5:48:99:28:
         e2:42:c7:2d:e4:67:85:af:a8:73:2a:7f:42:d7:fc:ed:8a:06:
         47:23:dd:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RUI4MDExMC8GA1UEBRMoNkYyM0YyN0YwOTBCRUY0NTMxODAyMDcyRTFEQUNGMjEw
RDlENDIzQzAeFw0yMjAxMjYwNjIyNTZaFw0yMzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZjBlOGMwLWFhNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+e0CPr/+ADKcHEC2xmhkGAo1Pjp/h+duASRXsQVwKLQ4n9p952+60yUXvAW/V
72rnH4RXbxjKf+IZpXc4LEcP598mKUU32XWw9pQZlwtAzu7PYbh3bPe0VyDq5W/7
EqdgL0RnycLGiqlp+SWptfEGyKaBD0WcjY+ZNSiLKf7qJ0eCQsoR02dygtuvx2T/
36PBoTF8VJSLgcBJKmLw6VFMaQlssvA/DnpdlD4zxUW3VYq8Lslf/23MkiX0FMjt
V2t7oSl/12DS7OUsAhsQpmnSchQgV5wNb89dK7FwmT2NugVvHbNgYmIrmd9yLEpW
l02oC6lyeRk1Uc3i8GGvSmZRAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUDNNGl1H7
CY3CmCIm9UTwIvt93WUwHwYDVR0jBBgwFoAUbyPyfwkL70UxgCBy4drPIQ2dQjww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFQjgwLzc3NjJGQzVBN0U2
QzExRUM4NzNENjc4M0M0RjlBRTAyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFq
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYnlQeWZ3a0w3MFV4Z0NCeTRkclBJUTJkUWp3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi82NjNFQzMxQTdF
NzAxMUVDODRFM0MxNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAWe0bDAPBAIAAjAJAwcAIAEN8FnAMA0GCSqGSIb3DQEBCwUA
A4IBAQDLeL+bDT7NNXYh+pPlMVTrA12XitCfr0HrBKjuC3rwOSUd8TdfPMHcpSHY
9Mi7w/sEYEQJcZoWfO5m3t/IJSH3ds1WPWhG8Mo1sT8UF01KW0W2MdLn8ddu2VTb
+pkOqyunDbKMgBLcYJC6fluJNcBSiw6cSDPiWoz2j+b3uD7bq2uRyCUsBRdolbCK
YpCO1ByBpsn50/S+ODClWwFfpfRm/72nEkS1CB6+sziNHxwR0SRImdtD+HbNN/eP
cnb8gI0qxMV1ecJVXIlDl5G15G14srAmCKp2JeX3f/03g8rT4q2X916gHqVImSji
Qsct5GeFr6hzKn9C1/ztigZHI91M
-----END CERTIFICATE-----