Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/9AAA994C7ABC11ECA5510C18C4F9AE02.roa
File:                     9AAA994C7ABC11ECA5510C18C4F9AE02.roa (raw, json)
Hash identifier:          itkdZh4vme1CiF1e+R6Ksu1YX4AWsP594yX5obmpyFw=
Subject key identifier:   88:8A:A9:55:3F:B5:19:4F:A8:75:9A:CF:6F:4E:42:64:1D:1B:5A:FA
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       05DA
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/9AAA994C7ABC11ECA5510C18C4F9AE02.roa
Signing time:             Thu 05 May 2022 22:48:51 +0000
ROA not before:           Thu 05 May 2022 22:48:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23470
IP address blocks:        103.112.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: May  5 22:48:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62745453-cb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:c8:8f:aa:91:a6:c4:67:cb:05:ee:14:1a:
                    2c:df:ea:b1:ac:3c:7d:6e:c4:b4:04:0a:a1:4d:46:
                    0a:5c:2d:2b:bd:55:25:2d:1e:d3:18:1c:2b:2d:f7:
                    e5:89:ec:0c:a8:b5:73:dd:fa:7f:e8:3a:84:7c:90:
                    45:8d:e1:6b:ff:a0:68:72:6f:fa:b1:16:37:27:1c:
                    27:ff:d2:ad:ba:43:47:b2:c8:35:1f:68:ca:df:06:
                    a3:af:79:56:c5:67:04:13:29:6c:70:c9:a4:4f:cb:
                    ae:04:9e:28:ac:cd:68:c1:2f:2b:3f:00:01:19:37:
                    76:35:bc:4a:88:d2:9d:84:f6:d1:bd:c9:60:38:32:
                    3c:12:e1:61:40:8e:8a:3d:8f:ff:44:86:0c:c7:0e:
                    3e:b7:f5:2f:29:94:54:45:63:42:9b:9b:ab:12:18:
                    92:68:67:93:6b:50:f2:dd:e3:36:d6:81:7b:ba:db:
                    89:97:fc:1f:11:8b:4b:ae:b3:2a:0c:22:57:05:ed:
                    23:e2:07:b4:e6:25:56:c1:ee:47:9f:3b:26:ca:75:
                    02:c0:ab:31:6c:55:86:84:e2:f9:9c:6f:dc:b4:a7:
                    9f:19:ef:36:d0:89:0a:42:2c:74:9d:da:8b:ba:d9:
                    da:eb:00:49:2f:06:1c:5b:f0:23:92:17:eb:f3:eb:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8A:A9:55:3F:B5:19:4F:A8:75:9A:CF:6F:4E:42:64:1D:1B:5A:FA
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/9AAA994C7ABC11ECA5510C18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:8c:17:0f:17:34:c2:23:a4:0c:61:fb:1b:b0:1c:90:09:
         14:5c:23:7f:7d:72:34:08:ed:fd:33:e9:3a:f6:46:bb:9a:00:
         37:8d:d5:a7:a4:84:98:97:54:6f:3c:e4:21:3f:43:0b:1e:a7:
         dd:a6:9c:1d:f1:73:ac:8f:72:b1:ef:1c:af:a3:81:1c:84:da:
         e2:98:92:f4:5a:ff:c7:1e:94:fc:45:fd:cf:d4:e3:a7:6f:8a:
         23:75:79:f9:f8:0a:41:f7:b6:a2:64:24:b6:2c:13:34:83:b3:
         24:a8:ab:d2:dd:a8:c4:6a:d3:a4:2b:b5:9b:bc:14:3c:d2:50:
         d3:e9:28:bd:47:75:b4:cf:38:7d:0e:76:39:2e:50:87:0d:f8:
         26:09:4b:3a:c6:09:13:35:b6:db:f9:de:86:67:fd:ab:f0:1f:
         4d:e1:e9:4e:a8:e6:70:9e:35:69:ff:2c:84:57:9f:e4:21:e0:
         8c:bd:02:b4:9c:66:73:34:56:60:48:b5:2e:27:a8:2b:5a:82:
         ae:07:f9:74:8e:9c:72:4c:11:d4:26:ae:51:e1:3d:52:50:91:
         36:96:70:20:0c:3a:9a:c2:30:34:b8:ac:7d:47:9d:6e:d1:ee:
         ee:b6:d4:9f:e6:47:57:3d:6d:07:b8:3d:b3:81:fa:ff:35:88:
         b1:39:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----