Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/776B544AED4311ECBE61B46BC4F9AE02.roa
File:                     776B544AED4311ECBE61B46BC4F9AE02.roa (raw, json)
Hash identifier:          4QoYHT5+gU6TpZsj3ss3d+r+Ig/YSTadOrjQOP1gaiA=
Subject key identifier:   5F:B0:EA:8E:25:40:B9:82:58:25:FB:1E:AC:5B:EE:48:EB:0F:33:99
Certificate issuer:       /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial:       02FA
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/776B544AED4311ECBE61B46BC4F9AE02.roa
Signing time:             Thu 16 Jun 2022 07:10:56 +0000
ROA not before:           Thu 16 Jun 2022 07:10:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     38254
IP address blocks:        103.167.250.0/23 maxlen: 23
                          103.167.250.0/24 maxlen: 24
                          2001:df6:c480::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
        Validity
            Not Before: Jun 16 07:10:56 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62aad780-bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:1f:51:7c:ae:84:20:24:37:c5:0d:b5:1c:
                    22:3d:0f:cd:5b:ac:9a:a9:8a:6d:58:e4:f5:35:da:
                    48:e6:ec:96:98:bd:3f:43:5d:4f:ea:1c:f6:d3:84:
                    75:2c:ff:98:28:ee:e4:92:c6:f8:31:8d:cb:42:5a:
                    3b:6d:8d:54:b1:8c:2c:9c:3a:29:29:b4:dd:b9:fc:
                    f4:25:0f:07:14:3c:ef:de:e3:c7:1d:01:fd:ef:70:
                    e3:f1:1e:ae:10:4c:e5:c4:3a:3c:55:2f:64:09:5c:
                    17:e6:be:ac:5b:12:33:e9:dc:ad:35:80:02:66:81:
                    1e:37:db:2c:60:20:11:40:4f:4b:e1:b7:a4:5c:40:
                    57:c9:48:7f:ff:35:59:c4:68:ec:f4:40:d4:1e:8d:
                    2e:4f:eb:13:2b:b8:bd:27:4c:07:35:0a:83:e7:26:
                    93:04:b6:90:c6:a9:bb:3e:d3:c7:fe:78:8f:cb:f5:
                    4d:70:22:4f:3d:c8:7a:74:23:69:a2:7d:24:3d:06:
                    50:ca:25:24:ab:ab:45:20:af:62:b8:1a:90:17:cf:
                    b0:bd:ef:cd:39:f5:e2:f7:39:52:bb:f8:84:52:54:
                    81:88:56:32:d0:7e:f4:82:31:85:84:d5:63:e4:b1:
                    ea:b1:86:79:07:c7:3a:fc:7e:da:5c:7a:6c:2e:78:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:EA:8E:25:40:B9:82:58:25:FB:1E:AC:5B:EE:48:EB:0F:33:99
            X509v3 Authority Key Identifier:
                keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/776B544AED4311ECBE61B46BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.250.0/23
                IPv6:
                  2001:df6:c480::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:bd:ff:e8:57:33:b7:62:35:f5:ef:04:de:44:0a:17:37:
         71:8a:14:72:3f:a1:1f:17:f4:c7:ab:5c:ec:8e:31:cd:dc:c7:
         38:da:8c:a0:28:dd:f1:dd:36:b1:ec:3b:05:e6:1b:b2:cf:db:
         db:a6:0d:ac:f1:7a:18:76:41:8b:a1:e3:df:f2:cb:24:8f:8f:
         8e:67:a7:ca:0d:20:be:28:b1:7d:fa:77:76:33:82:9f:fd:53:
         9f:24:1b:9c:0a:30:10:f7:3d:93:88:92:b8:22:a2:29:10:7d:
         cd:f8:87:80:8a:0d:a3:67:55:db:ad:fb:0d:aa:00:1d:59:7c:
         ae:a1:aa:56:45:5c:42:1d:66:61:24:27:66:1f:18:b7:9c:96:
         f5:1d:63:4d:52:40:8f:45:bc:7b:a8:0b:16:ac:28:b3:50:f8:
         e6:58:b8:40:16:ab:28:da:47:b4:43:41:8c:91:5a:6b:0d:19:
         a3:32:df:3c:b9:54:6f:7d:71:1c:52:6c:a6:b5:5c:f6:15:1b:
         8f:0f:35:37:a9:3f:60:c4:24:2a:3f:aa:13:6c:ff:87:5b:b8:
         9e:be:4f:aa:a1:48:0a:8b:1f:0e:d6:d6:aa:44:92:98:e8:e5:
         cb:b3:02:97:56:9e:09:f0:35:9a:4e:44:c3:a1:ac:9d:af:d6:
         8c:6b:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----