Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
File:                     0068B446668D11EDBFE3FC1BC4F9AE02.roa (raw, json)
Hash identifier:          eIEAQ6m4Qn2ToiZcHjLBo/4b64fSKdUwEb9rIsaYESU=
Subject key identifier:   27:5D:03:61:DB:35:E3:CE:59:65:E6:E5:DA:01:D8:07:69:A0:43:02
Certificate issuer:       /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial:       028D
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
Signing time:             Thu 17 Nov 2022 15:32:10 +0000
ROA not before:           Thu 17 Nov 2022 15:32:10 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        103.177.80.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
        Validity
            Not Before: Nov 17 15:32:10 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=637653fa-67ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:c2:30:cb:37:5c:6d:4f:cc:fb:ed:5c:de:
                    97:97:26:8a:ec:41:7c:d3:16:d5:97:a3:17:84:2d:
                    f9:10:d4:e1:4a:c8:d9:b5:fa:3a:58:c5:26:35:e1:
                    00:2d:51:be:63:96:4d:be:a9:e5:0c:79:41:69:9f:
                    c6:ed:20:d2:3a:7a:de:ba:ea:22:54:32:f0:05:bc:
                    2a:b4:25:11:a1:f8:78:ac:6e:d6:95:f8:c5:7c:b4:
                    ff:5e:ff:af:76:24:6b:79:27:84:8f:95:06:d3:41:
                    00:b0:a5:ad:20:9c:f0:f5:e3:c8:b8:bd:45:b6:31:
                    f4:11:63:2b:72:8c:cc:d4:02:58:44:07:9a:ca:db:
                    44:8a:7f:b3:b5:9f:16:b8:6d:86:3c:49:cc:5a:08:
                    10:ee:7f:a2:49:d9:72:3c:42:3b:de:40:15:fe:9d:
                    d3:f3:d9:ef:c3:bf:76:ea:6a:24:3d:a5:2c:23:55:
                    1e:da:10:8c:12:bd:49:a6:40:85:ab:5f:7e:89:c8:
                    54:86:46:82:34:49:0d:25:89:ec:a7:12:b8:f4:a4:
                    10:da:b6:e0:20:f6:cb:08:28:27:49:43:7e:ef:fb:
                    1c:72:74:f1:81:20:21:eb:b4:08:c2:19:e4:9c:85:
                    92:1a:2b:6f:d7:5b:36:38:34:84:95:99:7a:bb:f7:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5D:03:61:DB:35:E3:CE:59:65:E6:E5:DA:01:D8:07:69:A0:43:02
            X509v3 Authority Key Identifier:
                keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:ae:6d:a3:7b:22:9f:f7:1f:77:e1:da:a2:24:8d:60:45:71:
         71:e9:26:15:63:f3:82:56:cd:cc:b9:80:6c:7d:fa:8c:44:1b:
         4f:86:32:41:75:ac:f0:43:b5:9d:26:74:fa:cd:40:6a:c3:02:
         51:81:08:b5:1c:2f:b3:ec:f3:ee:7d:07:7b:5d:dd:1f:4d:38:
         b3:51:46:e1:ed:92:b0:e7:7a:74:18:b1:b1:05:dc:ae:bc:fe:
         e9:d9:e9:7f:cc:33:29:6c:76:b4:cc:bc:1f:a6:ee:aa:57:c4:
         77:1c:b0:51:8e:35:8a:0b:62:e8:1f:47:d1:3d:8b:ac:b7:85:
         98:5b:ee:ac:be:ba:55:a3:d3:0d:e6:28:15:7d:54:a8:4d:1a:
         9f:cb:78:c1:01:82:21:9b:19:ba:34:db:4e:94:fb:ed:a7:77:
         f7:69:0c:07:db:18:04:1c:08:77:d4:1d:d5:72:27:a0:21:f3:
         b4:66:ca:a8:d0:ed:7f:3f:74:87:af:17:dd:56:d1:0e:b0:fd:
         05:33:be:99:be:44:8b:bf:be:fb:af:5e:40:a4:54:b9:12:c5:
         21:60:2b:46:d8:8e:6c:0c:6c:d0:22:7e:b7:4d:ef:9f:d7:db:
         61:3f:47:d0:9e:ab:20:77:84:fe:11:87:45:06:af:d5:54:b8:
         a2:42:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----