Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/6B64BA36647911EC9BBF676FC4F9AE02.roa
File:                     6B64BA36647911EC9BBF676FC4F9AE02.roa (raw, json)
Hash identifier:          aPgk7sxF6Ys6HAcANcbwTlwSLzn3GyLu4D1RWiY9Peg=
Subject key identifier:   51:2F:8E:0A:6D:55:78:29:EC:FF:76:A8:14:91:17:00:D7:D0:91:BA
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       0C
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/6B64BA36647911EC9BBF676FC4F9AE02.roa
Signing time:             Fri 24 Dec 2021 05:22:00 +0000
ROA not before:           Fri 24 Dec 2021 05:22:00 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     148972
IP address blocks:        103.175.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Dec 24 05:22:00 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=61c558f8-d5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:c0:2e:7c:71:49:67:97:d9:c1:01:f4:55:
                    ad:6a:6d:50:23:c3:3a:81:c8:59:03:a3:54:e7:63:
                    65:7c:63:3b:5d:e7:c0:c9:56:88:d5:01:7d:97:79:
                    cb:9a:f3:8f:59:0d:f3:1c:cd:c3:c7:5c:12:d9:00:
                    f7:52:c6:98:d5:03:26:a4:69:ea:01:41:53:9a:b6:
                    bc:77:87:42:97:04:c7:3f:d0:4a:e1:f5:08:7b:3b:
                    ce:e1:15:e5:f1:68:9a:2b:b0:cf:fa:d0:41:ee:09:
                    42:71:68:c5:c6:a0:ba:c5:a0:cb:e7:2a:6d:cb:13:
                    93:db:89:89:87:f7:64:4c:b6:0a:f7:2d:0b:68:69:
                    a1:f4:42:1d:17:d3:e5:06:64:78:39:10:69:a2:0f:
                    20:8c:f5:19:d8:18:99:4c:d5:ea:0b:35:ad:2d:4b:
                    e1:6e:32:f9:86:ae:19:19:1f:e8:53:da:06:88:20:
                    b5:07:75:ce:1b:0f:24:6e:ef:c9:01:6a:1f:0a:88:
                    4c:a4:b1:26:d5:af:ad:b2:e0:46:5a:44:20:c0:4e:
                    83:c2:bc:1f:5c:a1:13:34:66:4d:25:ce:e9:56:cc:
                    a3:76:dc:4e:12:91:1e:84:89:65:79:44:6d:85:5b:
                    a8:73:1e:b0:e6:71:a6:6b:83:ae:59:96:06:9a:07:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:8E:0A:6D:55:78:29:EC:FF:76:A8:14:91:17:00:D7:D0:91:BA
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/6B64BA36647911EC9BBF676FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:d3:35:ea:73:f8:46:b9:b4:50:ab:7c:40:b8:8a:ac:98:
         b3:78:a1:0c:02:b0:ef:d3:2d:61:3a:0d:89:27:9e:ce:06:62:
         32:f0:ce:d5:3f:5c:cb:d8:7f:8a:55:90:05:d3:fa:40:76:8e:
         9f:9f:7e:34:82:d2:59:9d:17:44:d3:ca:e3:38:04:69:57:29:
         6f:b2:eb:0f:c2:88:aa:68:9f:a4:4c:91:db:c2:c9:53:03:7a:
         71:8a:cc:57:32:ef:b7:be:d1:54:ad:e9:e5:be:8e:35:73:74:
         b9:ba:f9:d8:88:4a:0c:4d:5b:0d:b7:12:7a:1b:ff:b4:dc:6c:
         08:65:0c:ac:1b:5e:33:b9:36:4d:e2:84:58:a9:04:fe:6e:38:
         fa:35:67:89:96:ae:7d:91:a9:5f:99:5c:44:55:3d:31:3a:3f:
         86:62:81:3d:55:50:b3:6c:53:81:c6:20:b5:9e:ba:86:8d:e9:
         8f:80:86:d3:0c:b9:7c:75:e3:ae:f9:ba:55:68:35:ba:ad:01:
         fb:f1:79:2c:9f:4f:6d:15:f2:e9:0e:0d:0b:f4:04:b6:71:98:
         b6:e6:df:04:2a:d5:89:94:a9:c5:f9:c7:9c:56:66:78:68:e7:
         d0:3f:7a:54:cb:20:ec:46:c8:45:1f:82:6e:c3:db:96:fc:2a:
         f4:9c:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----