Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
File:                     0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa (raw, json)
Hash identifier:          LjWkftnY5a2A9fbs9pvwS5fCu8ofZvStYT6mZM3lMRk=
Subject key identifier:   8D:2F:39:8B:E4:A3:1D:CB:D4:B8:81:2B:FF:39:78:C7:2F:62:6C:51
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       023E
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
Signing time:             Wed 16 Mar 2022 06:12:26 +0000
ROA not before:           Wed 16 Mar 2022 06:12:26 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     139646
IP address blocks:        103.101.206.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Mar 16 06:12:26 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62317fc9-9509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:a7:79:7d:98:15:3a:9e:a8:4e:db:2e:69:
                    6b:ed:d2:3d:1a:13:dc:9e:0b:22:81:a3:c8:e6:8c:
                    2d:61:ae:08:40:cb:9f:ea:89:70:97:45:08:0c:b8:
                    cf:44:44:85:78:1a:34:b3:d7:32:01:7c:56:2e:59:
                    91:b7:b1:95:2e:d6:ad:0c:2d:8b:57:91:fe:84:bd:
                    99:ed:9a:1e:f0:57:28:e5:bf:b3:6c:59:b9:b8:ad:
                    d5:58:9a:d0:53:1d:dd:c8:3c:46:43:3b:a8:6c:e6:
                    62:a0:eb:63:5c:e6:c0:30:b0:52:eb:f5:fd:e4:0e:
                    69:03:86:b1:ea:5f:50:cb:a9:28:37:3e:9c:29:86:
                    bf:ca:ce:83:79:f1:d9:33:e1:7a:96:48:7f:b4:76:
                    9a:50:21:a1:54:5f:78:34:28:ef:31:64:74:f6:24:
                    ac:dd:bd:af:0a:f4:67:5e:e7:7d:e5:b0:a1:48:c4:
                    8f:e9:46:2a:ae:c4:bb:f6:3c:9c:70:6a:63:34:e7:
                    78:bf:61:86:9e:d2:51:77:c4:6c:c6:5c:d6:2c:9a:
                    b5:4a:82:c2:c3:b7:8b:c9:a3:c8:a1:6b:c6:92:00:
                    f7:01:00:d3:33:12:ba:a1:16:fe:64:19:75:c6:e6:
                    05:d3:30:71:d6:be:f8:e4:eb:d2:0a:11:0c:82:1e:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2F:39:8B:E4:A3:1D:CB:D4:B8:81:2B:FF:39:78:C7:2F:62:6C:51
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/0CC9BBF4A4F011EC96AF7B65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:08:c0:b8:65:0a:f0:43:c3:4d:f8:c7:46:da:64:d0:4e:4f:
         98:26:61:1d:84:99:c2:f4:95:64:9f:48:c6:b4:2b:16:01:23:
         dd:7a:7d:9a:d4:47:65:8f:15:5c:ec:86:bc:8b:e8:c1:c3:38:
         0a:cb:de:c4:b0:5d:4e:48:da:54:10:48:73:b7:df:06:4a:4d:
         a2:45:37:b4:1d:0c:34:88:93:71:09:52:22:42:34:a0:bf:e9:
         8e:77:fa:a8:3a:5a:42:c4:61:f3:80:d8:bf:af:10:00:4b:ac:
         11:55:43:c5:ee:06:5a:24:71:12:da:67:bf:43:cb:7a:16:2c:
         70:a3:2e:cb:a2:bc:67:9b:af:9b:20:6c:48:37:ba:2b:87:e6:
         34:de:ff:3c:f2:14:e0:2a:e5:a2:ae:a6:17:27:c7:68:05:e0:
         b6:28:76:80:06:da:cc:f7:c3:c6:2c:b0:c7:c9:7b:4d:6c:e2:
         84:50:e5:7b:e1:be:8d:19:ce:47:e4:9e:99:25:bd:ab:5a:03:
         f4:44:25:f4:5f:c1:1b:36:1b:2e:3e:e3:5d:f2:3d:3a:bb:20:
         8f:0f:8d:2e:d9:22:f8:55:ca:fd:9c:14:72:48:d6:04:17:80:
         c6:15:76:31:8c:0d:18:13:51:cc:b7:0a:2d:29:36:61:a8:2b:
         80:60:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----