Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/575539D89AD111EC890E2B39C4F9AE02.roa
File:                     575539D89AD111EC890E2B39C4F9AE02.roa (raw, json)
Hash identifier:          LCZbLGLCjSst+1kTe2xFk5mDm67hKwCD5RlSbaCL14M=
Subject key identifier:   18:E8:BF:17:D0:C8:B1:B1:99:88:47:8D:57:65:EF:E8:AD:6F:EB:99
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       0F15
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/575539D89AD111EC890E2B39C4F9AE02.roa
Signing time:             Tue 27 Sep 2022 02:15:32 +0000
ROA not before:           Tue 27 Sep 2022 02:15:32 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     147001
IP address blocks:        103.135.101.0/24 maxlen: 24
                          2404:7ac0:608::/48 maxlen: 48
                          2404:7ac0:609::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3861 (0xf15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Sep 27 02:15:32 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=63325cc4-1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:b6:e0:c5:9b:7f:a8:80:dc:ba:39:d7:42:
                    5a:f0:24:58:7c:3d:e4:22:57:02:0f:65:5f:61:91:
                    12:f3:35:e9:93:41:80:85:81:47:06:67:b7:1b:5a:
                    ea:c4:da:38:28:e8:ae:a0:47:b0:03:e1:b0:b4:c3:
                    48:c8:5c:6d:30:f4:8f:23:7c:a8:77:3c:26:3d:5b:
                    ef:0e:d1:dc:12:f7:89:c2:72:eb:cb:b8:78:ca:1a:
                    da:60:ef:b1:0c:aa:7f:8b:8a:e3:70:f0:7e:11:9b:
                    03:69:5c:56:0f:90:9b:a5:24:d4:a3:e2:10:70:d2:
                    83:9d:f6:cc:55:72:36:85:0a:c0:5d:f2:05:8c:c2:
                    90:50:cf:d3:ab:8a:49:21:b6:a7:48:93:d8:ae:5e:
                    93:69:74:22:85:c2:a2:51:be:fb:c9:04:f7:0e:8c:
                    59:94:90:36:aa:3d:75:43:b3:7e:9f:ef:95:03:eb:
                    05:e9:f1:a2:0a:f5:26:f2:83:a5:78:ce:65:63:10:
                    2c:5d:a2:8b:1c:d3:3e:af:9f:ab:eb:78:04:2e:22:
                    58:bd:58:99:a9:d3:70:1b:81:1f:c0:34:f2:75:03:
                    39:20:9d:a3:80:32:12:11:4f:2a:99:b2:72:3b:32:
                    bb:69:51:d0:b3:26:f2:81:90:02:89:5c:64:03:6a:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E8:BF:17:D0:C8:B1:B1:99:88:47:8D:57:65:EF:E8:AD:6F:EB:99
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/575539D89AD111EC890E2B39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.101.0/24
                IPv6:
                  2404:7ac0:608::/47

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:7f:8f:17:00:96:25:92:d8:51:e9:b9:a6:de:7d:9b:92:
         d3:f7:38:db:98:fe:ab:65:66:59:ee:b1:82:a8:2c:7e:41:04:
         41:23:4e:53:5a:2f:c5:1e:fa:df:bf:7f:11:2a:5c:31:4a:96:
         57:79:63:0b:57:66:00:9f:a8:bd:3f:07:70:c8:f3:0f:bd:fb:
         cb:2a:1f:94:03:b1:ec:85:35:ef:8b:d5:d5:6b:f3:73:42:2f:
         d5:8f:41:9c:ec:2c:52:2e:9a:c0:2a:00:a1:65:b7:61:c2:af:
         da:5f:1c:87:a2:19:3c:63:1c:4f:08:cb:8b:fe:bd:55:53:1b:
         4e:55:b5:69:85:52:99:94:80:8c:d9:0c:ff:11:10:2f:0a:46:
         93:5f:64:d8:e8:cf:b9:2b:00:81:7f:66:50:bf:78:70:b4:29:
         d9:70:77:db:3d:e8:a3:b9:c0:77:a6:b6:20:c8:07:d1:6a:1f:
         52:31:37:5d:3d:7b:fb:f7:72:2b:58:25:68:c6:e4:23:33:ee:
         71:b3:2d:5f:5e:8d:eb:69:5c:63:62:df:76:4b:0d:f6:b9:e8:
         e0:b8:4c:30:a7:c1:25:02:59:e6:a6:6e:be:f1:d4:42:5f:ff:
         be:de:4e:e3:f7:6b:d8:d3:af:a4:e6:aa:f3:eb:3a:1e:fc:c8:
         5a:bc:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----