Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/F03F75DE1DB611EC953E3044C4F9AE02.roa
File:                     F03F75DE1DB611EC953E3044C4F9AE02.roa (raw, json)
Hash identifier:          48IVP9CMP2xJXbnw4L/1QIvkDAaDfMLGWof6rFSSbmE=
Subject key identifier:   A9:E3:C8:19:B5:7C:12:29:10:70:E0:D6:ED:AA:88:4E:C1:00:AC:CF
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       02
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/F03F75DE1DB611EC953E3044C4F9AE02.roa
Signing time:             Sat 25 Sep 2021 04:13:30 +0000
ROA not before:           Sat 25 Sep 2021 04:13:30 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     1239
IP address blocks:        103.173.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Sep 25 04:13:30 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=614ea1e9-f41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:ef:cf:24:46:9d:a1:43:42:f3:bf:2f:63:
                    b5:7d:09:54:40:02:b7:1f:12:09:ff:e3:ec:6f:a8:
                    b7:77:00:f6:93:20:51:1b:bb:df:e1:99:a9:2e:f0:
                    84:0a:f7:4e:b5:0a:03:58:32:48:d2:94:2f:3a:46:
                    a8:65:71:c6:5b:02:27:48:55:80:bd:48:b4:b3:85:
                    66:1b:34:e8:b2:7f:ae:85:17:50:5a:f9:da:f4:f2:
                    61:f3:fa:ea:95:09:41:ba:55:a6:1c:1a:22:ed:62:
                    f7:94:2d:ec:72:f2:5b:cb:ec:d0:16:6c:f0:c6:18:
                    e5:13:04:0d:f9:8c:44:22:1e:4e:43:9a:a5:af:ff:
                    c6:67:db:ce:2d:06:82:77:cd:fa:23:62:a9:bc:61:
                    59:53:99:c4:15:5a:7b:c7:4c:1e:af:ff:86:3d:24:
                    a0:a6:44:a3:22:ab:31:b9:55:11:92:bb:41:a1:7d:
                    3e:27:d9:56:6a:60:84:6b:5c:ca:6f:ab:21:7c:88:
                    bb:b6:2b:bf:c9:19:5a:43:0d:55:05:27:c5:6e:16:
                    3b:72:25:29:1b:13:98:31:39:40:1e:37:b2:fd:30:
                    86:4f:aa:7a:31:a8:3e:ea:aa:54:a6:e6:37:f1:d8:
                    77:c0:e1:b3:7a:ff:96:4a:15:8c:ab:0d:9e:82:21:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:C8:19:B5:7C:12:29:10:70:E0:D6:ED:AA:88:4E:C1:00:AC:CF
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/F03F75DE1DB611EC953E3044C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:54:7c:20:bf:74:b7:95:01:75:fc:3f:9d:42:f7:b7:41:
         de:f6:7e:a1:20:39:8c:33:c6:6e:c5:dd:8e:b8:e3:97:4a:84:
         a1:97:5b:2d:ca:19:d6:49:27:e2:89:b4:a5:b9:84:68:60:31:
         f6:f2:75:b0:bb:e8:16:51:7a:5c:ae:f6:61:a3:9c:79:74:c4:
         01:25:8d:a0:01:02:d2:1b:46:77:af:44:ef:2e:3b:70:74:f5:
         0f:01:1f:fe:44:be:a8:0c:f1:42:03:9a:aa:7d:53:00:e4:aa:
         64:35:09:41:2f:19:01:c0:9e:f2:8e:af:b8:54:2f:e9:a4:85:
         ff:5b:7a:10:44:70:34:2d:da:8e:70:95:5a:19:6a:18:e1:2e:
         9e:94:bc:bc:a4:bc:cb:59:33:2d:80:06:27:dd:c6:12:70:e9:
         7c:16:78:a9:79:5b:7c:42:91:d2:4b:34:3d:96:27:0f:43:de:
         18:97:02:3b:aa:a1:4c:8a:fc:80:cb:32:2a:00:a4:a6:9f:ad:
         f3:17:b5:48:a9:59:12:35:90:35:85:c0:b8:6e:1d:59:2a:ab:
         43:09:50:b2:6d:79:3b:e4:31:52:54:4c:6d:e8:36:54:e9:99:
         ea:8f:e7:aa:c6:a1:5c:aa:a9:5d:1d:e3:42:7b:bd:03:46:3b:
         00:58:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----