Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
File:                     B7313F5089A111EC8A43DF14C4F9AE02.roa (raw, json)
Hash identifier:          vD62Ay/n25mm+guAYer/pK5opClVyNC83RZRsFIlLkc=
Subject key identifier:   E0:C4:3D:0A:70:26:15:CA:73:E3:06:57:D3:42:DB:67:81:ED:BD:EB
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       02
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
Signing time:             Wed 09 Feb 2022 12:13:40 +0000
ROA not before:           Wed 09 Feb 2022 12:13:40 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     200325
IP address blocks:        103.180.114.0/23 maxlen: 24
                          2400:52e0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Feb  9 12:13:40 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=6203aff4-bb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:16:9f:c7:ae:42:3b:97:25:dd:73:35:0b:
                    a0:00:34:46:b9:88:06:c7:3b:9e:25:58:ca:a4:d6:
                    3c:5a:eb:16:30:d1:bf:87:c8:cd:d3:57:13:d6:bd:
                    4d:e9:22:28:e3:fc:70:72:d6:9f:03:8f:8e:10:80:
                    99:f3:14:f4:fe:9b:90:df:4b:d1:02:b0:5f:04:1c:
                    d8:35:5c:b0:54:59:a7:5a:0c:b4:57:67:51:07:f3:
                    42:61:53:2f:ab:f9:64:c2:0c:ea:87:f1:9a:cc:fb:
                    cc:41:37:dd:ca:c6:b1:ac:03:cf:33:aa:9d:9e:56:
                    81:bd:6d:b0:a4:11:fa:1e:b7:de:aa:62:02:81:76:
                    f3:2c:99:f2:07:a9:97:03:46:7a:76:46:41:be:7e:
                    fd:81:d9:8d:12:84:ae:81:47:cc:b8:b9:bf:92:c0:
                    d1:c7:63:c5:a1:ae:49:ea:ca:5a:03:59:95:84:cc:
                    9e:4e:53:ac:ee:78:f4:46:e6:45:2f:37:31:e8:ee:
                    09:03:86:cd:56:ef:a8:de:d2:c2:79:8b:45:38:4c:
                    27:c9:2c:89:72:45:a3:9c:4c:4f:30:d5:5b:23:b0:
                    42:a2:23:55:33:2b:0d:d0:41:fa:d2:c2:d7:43:d3:
                    21:b2:40:eb:dc:3e:f9:f0:59:b7:be:98:f0:cd:9a:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C4:3D:0A:70:26:15:CA:73:E3:06:57:D3:42:DB:67:81:ED:BD:EB
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/B7313F5089A111EC8A43DF14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.114.0/23
                IPv6:
                  2400:52e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:64:6c:2c:4c:00:91:47:9a:c8:55:34:94:e8:1b:f3:b4:4e:
         a8:4f:fd:36:32:81:4d:34:f0:ce:2c:83:a5:3c:6b:10:a7:70:
         fe:c4:19:7d:bb:ff:2b:ef:28:ae:7f:0f:7b:e6:07:89:9e:0f:
         17:fb:b2:3f:4c:ec:8d:d1:29:60:fb:77:50:99:09:38:87:13:
         9f:c0:52:4b:fc:cb:28:eb:6c:ba:c4:ba:96:97:2a:2d:d6:ed:
         30:04:99:86:66:5c:c3:f1:e8:2a:a5:40:65:60:ec:97:b1:92:
         3b:88:fd:d0:ce:ca:07:1c:d5:2a:f6:6a:7a:1b:0b:da:5f:22:
         8c:31:1d:6d:00:ff:fb:f4:f2:47:05:e4:3d:eb:34:82:42:4e:
         68:31:4c:aa:91:58:c1:4b:59:ed:03:ac:ef:a2:47:1c:3a:52:
         e8:e2:6f:b1:18:5a:02:06:d9:3c:3b:f0:c0:f7:15:1e:65:58:
         2e:c1:0d:75:52:d1:fc:d4:1d:d6:31:9b:41:64:8b:38:a7:ca:
         be:20:39:45:9a:cb:ea:f6:ea:74:77:e1:d8:72:13:92:9e:51:
         a6:29:8f:06:a4:71:f3:ca:06:2e:a2:63:5a:5a:20:84:72:59:
         c8:36:a0:98:d0:11:6f:91:e1:74:d6:52:94:a3:8b:06:80:71:
         80:81:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----