Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
File:                     8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa (raw, json)
Hash identifier:          UzTutb6KJ8Zezok9j0LE0iDHJ555fDh2ru+ZtHMNoOw=
Subject key identifier:   2E:7C:8D:68:64:DE:DA:0B:84:20:38:E0:78:23:A5:98:43:B0:66:E5
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       05D9
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
Signing time:             Thu 05 May 2022 22:48:50 +0000
ROA not before:           Thu 05 May 2022 22:48:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        103.112.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: May  5 22:48:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62745452-8d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:11:16:d6:85:5b:1c:d9:b2:78:92:32:fc:
                    5e:d6:eb:3f:66:bf:e4:9f:7d:61:01:3e:87:56:4a:
                    46:ec:78:ac:36:14:7b:fa:d2:e5:92:d6:c8:80:c8:
                    94:1a:56:99:97:57:79:04:89:0a:40:c0:75:6e:4d:
                    62:91:47:53:4d:03:77:60:6b:a0:68:ff:a4:2a:6c:
                    12:4b:b3:c7:7a:cd:d9:2a:8c:b0:61:56:11:02:84:
                    bb:80:d7:39:3c:47:01:b7:81:bc:b8:6a:f6:01:8c:
                    29:b4:a1:0f:38:bc:0e:56:f8:e0:de:e9:99:15:dc:
                    25:93:9e:bd:25:67:f2:0f:d8:d5:1e:d5:64:76:c0:
                    2c:b5:b0:d9:87:01:21:9a:5a:93:a5:b0:cd:f1:fc:
                    37:a6:86:09:10:ec:11:1d:36:8c:9f:38:ac:e6:a3:
                    bf:8d:48:3c:54:75:67:b4:a5:d5:3b:17:6b:23:76:
                    90:bd:31:58:f7:a2:3f:ce:50:77:3f:62:ca:72:de:
                    60:25:ef:eb:66:a4:b7:1d:7f:de:c7:64:e7:13:2e:
                    54:fd:39:8a:fe:ab:72:0f:64:79:9c:50:98:7d:41:
                    70:51:b3:11:f0:00:fc:59:c6:d3:3a:34:91:61:f8:
                    bc:9d:a7:29:56:37:14:32:32:35:63:d7:8f:0a:8e:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:8D:68:64:DE:DA:0B:84:20:38:E0:78:23:A5:98:43:B0:66:E5
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/8E82AC8ADCBC11EAAB7A240FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:9d:7b:fa:8d:23:f2:22:72:5d:4b:c2:e3:55:72:ba:69:
         7c:95:ee:b0:77:8e:c2:02:12:dc:85:b8:ec:b3:5e:11:4b:7d:
         74:e9:20:6a:9a:53:3e:ed:a9:f1:12:1f:e9:ba:09:16:23:93:
         3c:75:72:cc:5b:92:d7:f4:6c:88:2b:1c:93:71:3e:f3:11:7c:
         78:44:7e:19:18:26:c5:06:4b:7e:06:05:91:58:fa:38:c7:0d:
         3c:4e:98:95:81:79:9c:df:0a:e8:06:02:3b:fe:ed:a0:db:71:
         a7:9a:72:22:4b:2b:52:11:15:10:40:8c:17:5f:0d:5e:bc:89:
         ed:7c:ff:d1:b8:ad:bc:24:0b:36:73:ea:42:25:58:d2:90:d3:
         2a:e7:c5:88:ae:98:34:66:a3:e7:1f:cc:33:92:53:c7:e6:e5:
         d1:84:53:22:73:79:56:35:52:bd:f4:87:8a:bd:14:17:15:cc:
         02:78:8f:a5:98:17:b5:f1:00:4e:8f:88:e1:0d:12:84:c3:53:
         ab:69:70:e6:60:ec:fd:54:12:b1:2c:11:ba:c3:dc:11:34:ea:
         4d:c9:df:fe:53:53:36:d4:26:7e:b8:3f:2e:a8:13:cd:9f:99:
         ce:f3:71:4b:ba:d2:ec:59:fd:4c:2e:56:66:73:a0:5e:36:34:
         be:4f:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----