Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/01D260D2609511EDB3C07F13C4F9AE02.roa
File:                     01D260D2609511EDB3C07F13C4F9AE02.roa (raw, json)
Hash identifier:          5hASqPt/jt851fXqXIG54DCkEXIBX4V/jqKRJQyHTBQ=
Subject key identifier:   1D:A0:50:6F:51:6C:01:0E:A1:B9:69:35:91:F1:59:A4:A7:F1:8B:D3
Certificate issuer:       /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial:       07
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/01D260D2609511EDB3C07F13C4F9AE02.roa
Signing time:             Fri 11 Nov 2022 12:54:19 +0000
ROA not before:           Fri 11 Nov 2022 12:54:19 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     150413
IP address blocks:        103.37.6.0/23 maxlen: 23
                          103.37.6.0/24 maxlen: 24
                          103.37.7.0/24 maxlen: 24
                          2001:df1:82c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
        Validity
            Not Before: Nov 11 12:54:19 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=636e45fb-a32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:6a:92:33:42:b5:22:47:21:8e:ec:c6:b5:
                    e0:e3:86:d2:e6:d9:76:da:9f:16:d0:fd:c8:d0:c7:
                    65:e8:49:6a:ba:e7:c7:41:02:c9:4f:56:bf:9a:3c:
                    44:04:68:48:53:fc:33:66:45:b0:43:72:c0:f5:10:
                    a5:52:ad:a4:b2:65:46:09:25:b5:1c:ea:6c:1d:a5:
                    d4:15:37:c4:86:30:3b:5b:78:ab:01:bc:44:ef:37:
                    da:94:40:c8:f7:4f:cd:2a:60:d7:34:08:59:6a:ce:
                    13:5a:91:fb:f4:07:50:32:5b:f7:16:79:13:57:bd:
                    b9:37:42:2a:25:f4:0c:10:2c:d8:b6:90:3f:13:46:
                    59:83:33:61:82:ea:7f:c8:81:1f:15:ae:b4:53:17:
                    36:ac:89:0d:ec:22:70:96:bd:05:73:05:02:63:60:
                    74:e6:d4:a5:09:d7:35:b2:17:ae:5e:f2:11:b0:c8:
                    e6:1f:5a:bc:05:8d:55:fb:d6:0e:4f:db:a2:c3:93:
                    a1:aa:29:fd:30:4f:a4:9d:af:e1:0d:ec:d1:72:64:
                    f9:ec:99:e3:0c:07:c6:98:e9:7a:22:df:d0:6e:5b:
                    1e:fa:29:4b:b4:99:06:90:70:1a:fc:65:c6:43:d5:
                    29:d8:c1:9d:11:d2:01:d0:93:7c:e8:47:2b:a4:f8:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:50:6F:51:6C:01:0E:A1:B9:69:35:91:F1:59:A4:A7:F1:8B:D3
            X509v3 Authority Key Identifier:
                keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/01D260D2609511EDB3C07F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.6.0/23
                IPv6:
                  2001:df1:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:10:d1:30:0b:c6:01:81:9d:7c:09:e6:20:83:fc:02:2d:
         7c:1e:a8:2d:05:7a:f4:eb:0c:ad:f8:d6:51:17:13:53:3a:62:
         a5:09:f0:c8:88:ad:15:4d:96:17:9c:97:d7:86:f7:0a:87:08:
         34:7a:d8:9a:db:f6:80:f8:fa:96:1f:58:8f:5d:1f:f2:4d:37:
         7a:20:56:ae:c5:bb:e7:e9:a3:49:83:d9:32:36:8b:02:39:ed:
         31:f1:4b:34:7e:6b:ea:b8:b8:eb:ae:8a:66:cc:8b:d7:47:7d:
         42:a3:ea:c7:2b:c5:1e:67:ab:45:06:6c:f1:3e:2b:e5:af:10:
         e0:f1:54:cf:90:d9:15:48:d0:c5:31:85:3d:e8:25:77:2f:19:
         51:39:a4:43:cb:6e:cf:f6:2c:d7:6a:46:26:63:38:61:eb:bb:
         88:1d:2f:17:77:a0:65:48:ac:ce:b6:ec:a8:a0:28:f9:bc:f3:
         0a:d5:8b:8e:96:30:44:a4:09:06:11:0b:35:b8:bd:31:00:c9:
         db:9c:18:dc:ee:4f:1f:5a:fe:24:b2:a4:2b:e1:26:3a:2f:17:
         7b:b5:a2:4e:8c:e5:1f:5f:bf:f0:b3:36:fb:21:62:f3:8e:bb:
         b2:68:f2:04:3f:38:e3:da:a5:6a:58:74:63:34:8b:94:0a:bb:
         2c:6b:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----