Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/969CE4B23C5711EB98351021C4F9AE02.roa
File:                     969CE4B23C5711EB98351021C4F9AE02.roa (raw, json)
Hash identifier:          Gy4/xiBkpDcFY7Pi+Qnly0Nt8q4bpgpdY8KxyqvmQy8=
Subject key identifier:   4B:DF:3A:9D:D3:CA:14:21:41:91:65:5E:69:07:91:A3:5C:16:F2:A7
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       09EF
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/969CE4B23C5711EB98351021C4F9AE02.roa
Signing time:             Mon 29 Aug 2022 20:16:40 +0000
ROA not before:           Mon 29 Aug 2022 20:16:40 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     137959
IP address blocks:        103.31.178.0/23 maxlen: 24
                          103.118.76.0/22 maxlen: 22
                          103.118.76.0/23 maxlen: 23
                          103.118.76.0/24 maxlen: 24
                          103.118.77.0/24 maxlen: 24
                          103.118.78.0/23 maxlen: 23
                          103.118.78.0/24 maxlen: 24
                          103.118.79.0/24 maxlen: 24
                          2403:2e40::/32 maxlen: 32
                          2403:2e40:1::/48 maxlen: 48
                          2403:2e40:2::/48 maxlen: 48
                          2403:2e40:3::/48 maxlen: 48
                          2403:2e40:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: Aug 29 20:16:40 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=630d1ea8-9a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:20:8e:26:d8:d7:ee:ad:e0:cd:ef:43:9c:
                    3d:f1:d8:c2:df:20:41:26:9d:a2:72:cc:0b:a6:1d:
                    de:81:19:57:78:6a:d2:fa:1a:18:b0:eb:8d:3d:ce:
                    7c:68:36:8e:36:8a:4f:3f:7a:e4:0d:72:ed:a2:28:
                    09:ca:6f:b3:bb:cb:4c:ea:9b:4f:d3:9a:2c:31:06:
                    61:3a:fa:f2:1e:93:0a:bb:40:c7:c7:ee:44:10:3c:
                    1b:e5:ab:73:49:96:ee:f8:28:61:ab:02:1d:f3:66:
                    06:e2:60:2a:b2:73:d2:96:92:dd:d9:e2:60:e8:05:
                    c6:46:03:06:78:13:84:a4:3e:84:26:4b:f8:e1:2b:
                    df:be:fa:62:b6:75:fc:8d:2b:b4:a3:5b:8a:f0:9e:
                    53:1b:63:58:52:c7:ca:34:bf:e3:37:1b:39:86:22:
                    ed:76:a2:5e:4c:38:b8:06:07:57:54:2e:5d:a9:b8:
                    1c:67:d2:88:1f:59:6a:93:96:77:5b:a8:a7:fc:7e:
                    fc:c0:f3:7d:0f:a0:08:12:eb:b2:84:e6:e2:3b:ca:
                    70:7c:c5:33:e0:9b:90:47:33:70:78:9d:ba:17:53:
                    d4:41:36:bd:0f:77:fe:31:23:31:7e:40:b6:1e:8d:
                    f1:eb:d4:ca:b6:2d:c2:16:51:f8:bc:f6:20:00:1a:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:3A:9D:D3:CA:14:21:41:91:65:5E:69:07:91:A3:5C:16:F2:A7
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/969CE4B23C5711EB98351021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.178.0/23
                  103.118.76.0/22
                IPv6:
                  2403:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:8b:a3:0b:c8:a8:7b:10:c3:f3:57:85:31:67:b6:70:79:
         2e:66:53:c5:65:e2:f6:0b:33:05:ef:c0:fe:ed:7a:1c:be:5c:
         e7:76:b6:89:71:26:34:97:f9:6b:ef:c6:7a:93:30:43:f2:1a:
         36:6b:87:f5:d5:34:96:5f:66:bf:3c:9e:01:8c:75:46:8f:c9:
         1c:ff:41:05:3d:e8:2b:8b:a2:fe:b8:b4:56:13:6d:ce:bc:6e:
         39:9c:86:03:33:27:5a:c1:6d:0c:29:c5:10:7d:cf:14:1d:0e:
         e3:40:b7:c0:97:c8:cf:5e:f7:65:d1:8b:16:60:5a:c9:3f:4c:
         80:f9:50:5b:40:aa:cf:46:c6:40:f5:8b:c7:74:7e:15:ad:ef:
         b8:43:c1:10:7c:40:5a:78:91:ad:1f:e5:1c:4a:b1:8d:fc:ec:
         7e:47:8a:c8:42:9a:7c:64:64:42:bb:e0:bb:c7:d8:45:2e:79:
         da:b1:d9:ed:6d:ac:f6:37:63:87:01:28:56:06:c8:c9:c5:70:
         bd:01:b7:06:f3:90:05:62:9d:ac:ae:8c:d9:da:10:4b:f1:e6:
         fa:e1:a6:e4:a5:13:be:94:3a:15:14:2f:39:a0:ad:6f:04:7e:
         d8:53:b2:7d:b9:b6:b2:22:66:ef:96:62:10:ff:e9:36:81:8f:
         99:9d:bf:79
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG
MDk5QzNGRjAwHhcNMjIwODI5MjAxNjQwWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzBkMWVhOC05YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymYgjibY1+6t4M3vQ5w98djC3yBBJp2icswLph3egRlXeGrS+hoYsOuNPc58
aDaONopPP3rkDXLtoigJym+zu8tM6ptP05osMQZhOvryHpMKu0DHx+5EEDwb5atz
SZbu+ChhqwId82YG4mAqsnPSlpLd2eJg6AXGRgMGeBOEpD6EJkv44SvfvvpitnX8
jSu0o1uK8J5TG2NYUsfKNL/jNxs5hiLtdqJeTDi4BgdXVC5dqbgcZ9KIH1lqk5Z3
W6in/H78wPN9D6AIEuuyhObiO8pwfMUz4JuQRzNweJ26F1PUQTa9D3f+MSMxfkC2
Ho3x69TKti3CFlH4vPYgABrVzwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEvfOp3T
yhQhQZFlXmkHkaNcFvKnMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw
MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjYyQkYvNDRFQzUxMDYxMDMwMTFFQUIxMTJBMjMyQzRGOUFFMDIvOTY5Q0U0QjIz
QzU3MTFFQjk4MzUxMDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnH7IDBAJndkwwDQQCAAIwBwMFACQDLkAwDQYJKoZIhvcN
AQELBQADggEBAAcci6MLyKh7EMPzV4UxZ7ZweS5mU8Vl4vYLMwXvwP7tehy+XOd2
tolxJjSX+WvvxnqTMEPyGjZrh/XVNJZfZr88ngGMdUaPyRz/QQU96CuLov64tFYT
bc68bjmchgMzJ1rBbQwpxRB9zxQdDuNAt8CXyM9e92XRixZgWsk/TID5UFtAqs9G
xkD1i8d0fhWt77hDwRB8QFp4ka0f5RxKsY387H5HishCmnxkZEK74LvH2EUuedqx
2e1trPY3Y4cBKFYGyMnFcL0BtwbzkAVinayujNnaEEvx5vrhpuSlE76UOhUULzmg
rW8EfthTsn25trIiZu+WYhD/6TaBj5mdv3k=
-----END CERTIFICATE-----