Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
File:                     1BD5815C4E4C11EA9DF9795FC4F9AE02.roa (raw, json)
Hash identifier:          yt0jIGtOB6pEDUqji2mtpWlxAdG7a4PJnB3MmDrMVBA=
Subject key identifier:   19:F9:9F:6D:13:29:8A:BC:E8:87:ED:D3:9E:8A:86:40:9C:6E:4A:6A
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       0ED2
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
Signing time:             Tue 14 Sep 2021 06:26:46 +0000
ROA not before:           Tue 14 Sep 2021 06:26:46 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     56032
IP address blocks:        103.110.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3794 (0xed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Sep 14 06:26:46 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=614040a6-3bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:1b:5a:dc:1b:cd:2c:60:98:b6:49:04:5f:
                    b9:02:01:93:82:5a:98:e5:ca:4f:ed:db:99:b7:e8:
                    19:28:a6:68:fe:0d:2c:c4:ba:58:f9:dc:4b:db:29:
                    9b:75:42:e4:ba:dd:49:07:df:9e:f4:3e:ea:91:dd:
                    1d:9a:7c:bd:f6:39:2f:cc:b5:34:89:b1:3a:f0:2b:
                    15:cb:1d:b6:17:a5:8b:fb:8a:07:36:15:a4:8e:78:
                    b9:a0:1f:f8:54:ec:d3:92:0a:a7:19:99:36:c7:b5:
                    9e:4b:6d:41:bc:65:26:eb:7d:62:38:aa:34:24:7c:
                    67:36:0a:87:3a:41:6c:c3:60:d4:6a:22:1f:bf:22:
                    1b:47:b8:03:d8:ea:5a:f5:32:ba:19:27:8a:3f:53:
                    73:34:ba:da:e6:df:15:aa:51:8a:41:7c:5c:54:35:
                    45:e4:1c:3c:0f:5a:98:f8:66:ce:3d:e4:c1:3d:66:
                    8c:d8:93:ac:51:07:7f:e1:b2:29:78:7f:9a:74:22:
                    4f:e8:4c:0f:a1:f3:1a:46:3c:8f:b5:9b:91:6e:38:
                    4c:2b:fb:1e:2d:3e:d1:55:54:a9:77:26:f9:78:3e:
                    da:0b:8f:2a:74:f0:42:f7:e1:b0:8a:46:60:12:26:
                    5b:df:a3:6e:48:35:51:c8:17:28:75:8e:2d:c5:19:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:9F:6D:13:29:8A:BC:E8:87:ED:D3:9E:8A:86:40:9C:6E:4A:6A
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1BD5815C4E4C11EA9DF9795FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:97:94:e9:f9:dc:15:17:84:f8:48:2e:aa:af:86:07:35:7e:
         77:17:47:b4:96:63:44:8b:ff:78:e9:aa:26:e5:22:31:9c:eb:
         a2:ed:d4:d2:35:6a:69:ec:77:75:2b:82:f3:4e:89:be:42:4d:
         a6:fa:31:58:5f:66:05:27:68:3d:23:92:d4:ec:d0:23:18:65:
         9f:fd:e1:4a:30:63:42:a5:88:5c:0b:35:f9:10:69:63:97:3f:
         a3:6b:9f:cd:b7:8b:05:26:bf:22:29:b8:b9:c4:bf:5a:d3:2e:
         e9:2e:5e:76:8e:d2:70:f5:78:cc:38:51:58:b4:ca:1b:4b:e4:
         fe:87:01:a5:2e:70:ae:58:6f:aa:dd:a0:4e:4f:e1:13:95:30:
         25:6f:4c:84:5c:82:d1:0e:7d:8f:29:f6:d4:2c:bb:26:b6:9c:
         b2:43:3a:45:ee:41:ae:f1:68:69:07:7a:a4:96:00:90:6b:c4:
         13:b3:36:62:6e:d4:8a:f2:78:b0:d5:80:46:34:b6:06:63:4d:
         2f:d6:94:45:95:2b:64:f0:8c:ef:62:1e:b4:38:8c:e5:00:0a:
         bd:96:f0:60:b1:22:8b:72:61:1a:17:a7:26:68:55:aa:45:65:
         39:ab:32:a0:e2:f0:90:d7:76:6c:d7:3b:ef:16:c4:e1:23:ef:
         00:78:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----