Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/CE28569A60E711EC9161FE85C4F9AE02.roa
File:                     CE28569A60E711EC9161FE85C4F9AE02.roa (raw, json)
Hash identifier:          CedSfPLFiXhRS5dULtZimY10oBaLDmcAHtuKE0eUz0Q=
Subject key identifier:   80:9D:FB:D9:BE:C8:28:05:80:55:9C:99:65:A7:74:96:15:B9:13:26
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       02
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/CE28569A60E711EC9161FE85C4F9AE02.roa
Signing time:             Sun 19 Dec 2021 16:22:06 +0000
ROA not before:           Sun 19 Dec 2021 16:22:06 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     40065
IP address blocks:        103.175.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Dec 19 16:22:06 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=61bf5c2d-d550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:84:52:75:87:31:68:33:04:dd:be:55:7c:
                    8b:f6:da:dc:da:cb:d2:ee:51:86:67:ef:f5:ee:bd:
                    23:35:7c:b2:ea:81:4f:29:60:4a:fe:2c:55:79:11:
                    a9:f9:e8:f0:c7:9d:80:bd:49:f5:bf:cf:0b:52:09:
                    14:55:c0:d2:83:d8:54:57:86:83:13:81:4b:f7:6d:
                    ae:c1:e6:33:0d:32:99:03:dd:ea:64:8a:9a:21:4d:
                    6e:a6:1f:1f:a6:14:56:34:c4:3c:f8:0b:68:c5:54:
                    bd:e8:2f:46:a7:c8:79:2a:ee:f6:c3:6a:0c:37:2c:
                    74:cd:8f:ea:99:ff:ca:34:f8:ec:bb:2f:91:de:99:
                    75:7c:13:d8:d3:c5:45:a3:45:c3:ca:f2:67:6d:ec:
                    30:a7:64:32:7b:ad:50:63:5c:f5:61:cf:5f:b2:3d:
                    d7:0b:bf:0a:cd:1b:2e:62:d8:8e:a4:7d:72:1e:d9:
                    19:ef:b9:3a:1a:84:80:24:b4:96:d5:e7:fe:43:be:
                    4f:02:89:fd:d2:06:23:64:f1:22:d8:4a:ce:25:25:
                    34:d3:f7:24:07:98:d9:2a:a8:5e:3b:e8:cf:8d:4b:
                    c0:79:80:1e:fe:84:6c:09:90:fa:15:85:1d:71:6a:
                    4e:9a:f2:70:28:c3:64:d7:eb:5c:29:47:8b:e8:ae:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:FB:D9:BE:C8:28:05:80:55:9C:99:65:A7:74:96:15:B9:13:26
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/CE28569A60E711EC9161FE85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:ee:c3:e3:af:ba:bb:23:c6:8f:11:73:34:71:98:e8:6e:
         a5:80:42:c2:9b:31:ac:8e:3c:34:aa:de:bc:d3:7f:b6:5b:70:
         af:ed:e3:27:06:e9:a1:f1:10:9b:8c:6c:9f:81:aa:5a:08:48:
         cb:fa:30:83:fa:95:44:1a:5a:80:6a:3d:92:d9:f0:8f:40:1f:
         97:cb:e6:5a:a3:86:c5:38:ef:6b:cf:7f:a7:27:84:17:74:07:
         a5:44:f5:2b:ed:64:8a:14:af:a7:4a:52:08:61:dc:70:34:e0:
         27:ce:4c:f9:04:ce:88:f9:71:eb:2c:3b:78:c8:ad:b0:0d:af:
         85:ae:aa:94:ae:54:9f:4a:11:97:be:29:56:95:90:c7:0f:40:
         d2:a0:a0:46:c2:a7:3f:95:d7:52:c4:14:e3:05:8e:07:1c:e6:
         d8:bb:66:39:7f:53:01:4e:2d:d1:e3:3c:d0:04:a2:a3:b1:44:
         9e:1f:6e:a9:d0:c7:ee:6d:8d:c1:fd:46:96:59:47:2c:42:3e:
         9b:8a:4e:8b:85:5a:7d:c1:56:1b:2c:bb:2a:03:0e:58:65:0e:
         fe:41:ce:df:97:37:95:17:83:4e:ed:12:ad:c5:0e:66:7c:bb:
         6e:e6:c7:8c:fb:f0:45:16:d3:45:cc:9c:ad:79:4d:dd:f5:f0:
         23:33:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----