Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/1731EDB6A44E11EC8C8DF840C4F9AE02.roa
File:                     1731EDB6A44E11EC8C8DF840C4F9AE02.roa (raw, json)
Hash identifier:          TnonGcpHNrcB07J4yWEtb8eDgLgV7JqaqpPsCD7fzg4=
Subject key identifier:   5E:98:AD:C6:DA:B8:BD:C9:5D:91:CD:1A:D4:3C:32:2A:F8:92:FC:F2
Certificate issuer:       /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial:       43
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/1731EDB6A44E11EC8C8DF840C4F9AE02.roa
Signing time:             Tue 15 Mar 2022 10:53:05 +0000
ROA not before:           Tue 15 Mar 2022 10:53:05 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     136969
IP address blocks:        103.179.240.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
        Validity
            Not Before: Mar 15 10:53:05 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=62307010-f98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:cc:b1:66:5d:f1:f2:d8:08:1f:53:5b:70:
                    46:14:7b:f6:c3:3e:2a:c3:51:7f:91:30:7b:ff:df:
                    0a:8e:c7:2c:b7:ff:08:7f:f6:61:74:f1:3b:3d:00:
                    f8:97:94:63:c4:39:bf:9d:f3:47:4c:dd:19:35:34:
                    d3:10:78:8d:2e:39:a3:ea:6c:f1:38:3c:b5:db:56:
                    66:f0:2a:70:f6:8b:30:a8:e9:f6:c1:72:48:44:15:
                    f0:65:94:1b:ea:18:b1:96:a3:c5:12:23:e1:5d:4a:
                    85:15:fe:6d:b9:a0:c1:06:24:9e:50:f2:d2:ef:64:
                    c9:69:e9:6b:53:4f:60:aa:f8:63:67:c7:2a:7b:6d:
                    98:d4:59:61:26:5f:84:05:3a:f1:0a:cd:a7:6b:16:
                    aa:50:50:de:06:55:11:97:b6:b0:fa:b0:ec:c6:bf:
                    de:a8:60:4c:b8:39:2c:6a:da:a3:d5:5b:e3:2c:04:
                    2f:11:e5:51:e1:ee:9e:ac:5d:19:53:00:fd:9f:38:
                    3b:1c:3a:68:01:0e:da:a0:a0:2c:4a:50:04:b1:2b:
                    cb:08:eb:98:b0:9a:02:1a:24:94:7c:b6:e2:69:d1:
                    85:5a:6b:a4:05:f0:ef:58:9f:7d:e8:dd:48:1b:40:
                    3e:cb:c2:1f:23:e7:db:76:a2:be:0a:bd:33:73:02:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:98:AD:C6:DA:B8:BD:C9:5D:91:CD:1A:D4:3C:32:2A:F8:92:FC:F2
            X509v3 Authority Key Identifier:
                keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/1731EDB6A44E11EC8C8DF840C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:46:05:b7:a3:b3:2c:f2:c6:50:cc:da:4f:89:87:54:48:42:
         da:69:12:2a:3a:04:61:ab:a2:55:35:60:4c:91:83:87:d7:d7:
         e7:48:12:eb:78:2c:63:3a:5f:5f:de:b8:46:5c:f2:a9:50:2b:
         51:ff:28:d8:25:f5:ac:24:a7:d5:17:80:6e:44:ca:db:20:93:
         f1:6d:b3:a1:ef:13:06:48:f5:99:3a:da:cd:e8:ef:5e:48:a7:
         9d:08:51:21:e1:75:d6:06:ee:c8:77:1f:3a:a4:ac:49:ba:1a:
         e2:e8:bc:05:b0:d4:94:5d:40:86:64:1b:f8:c2:8e:81:78:89:
         59:24:cd:41:d8:63:49:eb:2e:fc:5c:63:4f:51:de:41:19:bd:
         53:ed:67:06:e6:f9:da:58:0f:19:b4:7b:48:a2:bf:e8:5b:ca:
         49:35:31:ba:a8:50:04:ad:64:33:da:28:07:77:66:d6:02:ee:
         57:d3:ec:d5:d3:c0:65:f1:72:98:3d:69:64:ff:49:c8:78:8b:
         c2:80:21:5e:2c:f1:0c:43:3c:ce:c8:3a:02:cc:eb:c1:ee:e0:
         e4:ab:94:14:9b:c4:34:2e:60:73:de:c1:5e:c1:7c:5d:cb:75:
         b7:18:cc:32:7e:1b:41:6a:d1:1b:4c:c3:2f:6a:c8:ca:b5:11:
         46:7b:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----