Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/C7EDFD1E966311EC9514387BC4F9AE02.roa
File:                     C7EDFD1E966311EC9514387BC4F9AE02.roa (raw, json)
Hash identifier:          mqGAAwtQf1H/2kayCLm0iDiUY8qpK/pKT1maof552aQ=
Subject key identifier:   7D:21:0E:F1:47:F8:18:EB:40:06:16:8A:D5:13:E9:F6:AB:B8:40:16
Certificate issuer:       /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC
Certificate serial:       1A
Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/C7EDFD1E966311EC9514387BC4F9AE02.roa
Signing time:             Tue 08 Mar 2022 06:13:45 +0000
ROA not before:           Tue 08 Mar 2022 06:13:45 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     140889
IP address blocks:        103.182.170.0/23 maxlen: 24
                          2001:df0:7f40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC
        Validity
            Not Before: Mar  8 06:13:45 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=6226f419-ae9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:d1:c0:20:6b:aa:64:00:0c:9b:57:dd:40:
                    66:b7:88:3e:9a:81:19:27:34:ca:8f:b9:3b:a9:93:
                    f5:f0:fa:6a:6d:7a:f4:e7:39:b4:70:30:85:8e:0e:
                    69:33:9c:c8:ea:c0:56:d7:c0:91:13:1d:ca:61:8b:
                    b6:a5:3f:0e:70:71:94:58:5c:98:e4:47:dd:bd:40:
                    81:cd:f2:8c:f7:55:5f:6a:e0:53:ce:fb:17:a1:7a:
                    c4:dd:4d:ee:eb:a9:1c:07:20:34:e2:b2:98:42:9d:
                    1a:8b:6a:91:bb:96:84:9f:02:d0:83:73:74:12:10:
                    c1:3a:42:23:ec:af:b8:58:0c:f2:10:e7:5a:87:9d:
                    1e:23:80:fc:c5:e9:a2:f6:17:80:c4:17:c0:b4:26:
                    c3:39:75:14:0a:e1:ea:10:1f:32:75:75:c4:ed:bf:
                    a9:3e:fe:a2:da:b3:3e:73:a5:e1:3d:0c:79:21:8b:
                    a5:53:69:4e:ef:93:5a:48:81:89:69:6c:9c:e2:89:
                    9a:ba:3e:d0:1b:fc:91:94:10:3b:99:59:1d:84:8c:
                    b3:ba:cf:cb:34:9f:cd:58:95:23:81:6e:1f:9f:a1:
                    94:c3:03:a9:80:c3:6f:12:bc:57:98:b9:f9:7c:4a:
                    77:ce:17:fa:62:ed:b6:b0:c6:47:91:f3:6e:22:55:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:21:0E:F1:47:F8:18:EB:40:06:16:8A:D5:13:E9:F6:AB:B8:40:16
            X509v3 Authority Key Identifier:
                keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/C7EDFD1E966311EC9514387BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.170.0/23
                IPv6:
                  2001:df0:7f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:73:87:a0:39:d9:78:d3:1b:af:b5:29:3e:7e:83:7b:bf:56:
         13:dc:c9:48:e8:2e:43:38:c5:66:ea:cc:1a:f7:54:d4:61:4c:
         f6:47:72:b6:6d:26:a2:ab:6b:1d:2f:99:68:12:66:cb:8c:3d:
         90:63:ea:78:a3:f3:2c:0f:e5:64:24:6f:25:70:6d:ff:c1:f6:
         c0:72:b2:62:3d:92:52:1c:63:f5:f6:81:10:d9:c8:91:69:c0:
         75:ec:2c:b0:42:be:cc:58:94:4d:ee:28:fb:18:28:70:c9:97:
         7c:be:06:62:12:a2:aa:c8:5e:18:5d:36:a6:8b:15:b4:7a:8c:
         2e:2e:ae:8f:f6:7a:d6:37:dc:2a:3b:4e:d2:8a:e1:96:f2:cf:
         8b:4c:16:2a:d0:5d:d3:ab:bf:5c:64:ce:4c:f7:71:d5:31:ac:
         2a:66:e4:30:58:5b:10:82:61:49:2d:85:da:48:36:3f:98:3f:
         85:ea:ab:66:6e:2f:f0:0c:6b:34:df:43:67:5f:ca:e5:3a:03:
         28:9b:34:aa:13:9e:df:3e:d3:86:5b:64:d6:1d:c8:a4:96:ff:
         f6:0c:1d:5d:28:7a:fe:07:39:e3:6a:2e:a7:20:9e:18:dd:56:
         ca:06:5a:bf:22:31:0a:f6:24:0e:f5:be:d1:40:5a:43:51:53:
         2b:d8:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----