Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/12345F6627B011ED9B964E77C4F9AE02.roa
File:                     12345F6627B011ED9B964E77C4F9AE02.roa (raw, json)
Hash identifier:          EIoIB1nZd4WNaERh5r0wtSXv6M+ZjZyEwG4M/UgxW1A=
Subject key identifier:   3E:A8:9F:6C:F4:ED:26:DC:49:1A:3A:8E:CC:53:7D:7D:FA:C1:CF:A8
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12C9
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/12345F6627B011ED9B964E77C4F9AE02.roa
Signing time:             Thu 08 Sep 2022 11:14:29 +0000
ROA not before:           Thu 08 Sep 2022 11:14:29 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     53340
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4809 (0x12c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Sep  8 11:14:29 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6319ce95-207b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:12:fd:8a:c9:8e:81:9d:16:08:7a:06:31:4a:
                    9f:a7:8f:c3:7c:a8:43:8a:b5:b4:75:6e:d6:01:60:
                    e9:08:57:74:f0:ae:45:a0:5f:a4:a0:da:a7:9a:fe:
                    1b:80:a5:0b:d9:d5:41:0d:0b:24:d1:d7:eb:8c:70:
                    b9:99:a1:23:7f:d8:e6:17:79:b6:a5:f4:d5:e5:93:
                    aa:28:95:49:3d:6c:f8:42:f7:fd:3a:45:01:e3:17:
                    fd:d5:c4:58:e9:2f:a5:a0:d3:a1:39:df:56:cc:36:
                    e1:51:1b:e8:37:0c:9f:58:79:a9:53:86:50:66:3f:
                    eb:da:ce:16:d6:e1:b5:f2:50:58:e8:10:7f:fc:d7:
                    4c:16:99:4f:46:dd:42:e1:99:70:f1:35:a2:83:e0:
                    35:b9:e2:4a:95:c3:6c:68:e0:87:a8:fc:50:89:b2:
                    75:6f:03:ae:6b:9d:36:87:25:1f:09:75:be:e7:ab:
                    d4:14:62:f3:45:e4:bc:c7:ea:af:81:e3:0a:a9:ba:
                    99:05:d4:cc:b5:31:27:eb:9a:33:68:07:f4:4b:2f:
                    61:d9:2c:78:a0:fb:c2:7c:5a:ba:d6:a0:1f:ed:d1:
                    c8:01:1a:70:49:92:9f:47:9a:06:39:92:49:c2:65:
                    30:73:c7:db:aa:2a:ec:3c:19:00:d6:97:e3:56:e4:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:9F:6C:F4:ED:26:DC:49:1A:3A:8E:CC:53:7D:7D:FA:C1:CF:A8
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/12345F6627B011ED9B964E77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:2f:37:8c:11:20:bd:09:27:f3:cd:be:3e:16:8e:bb:16:
         7d:ad:fa:ac:ad:c2:a2:21:66:54:d1:b8:a0:58:16:6e:87:c1:
         49:41:6d:25:13:95:b1:4b:3c:1b:ea:40:1d:cd:f7:54:8b:d2:
         64:4f:e2:52:fd:d5:59:19:79:df:8b:b9:ca:1d:17:23:8f:73:
         a5:a5:88:48:c1:df:b9:5b:5b:91:78:2e:36:7b:6c:e0:ac:d9:
         da:1f:0b:dc:cd:35:46:af:3e:06:2f:a5:fe:4d:99:ef:c0:c9:
         75:af:8e:65:9c:0b:fa:8e:da:e4:6c:ad:7b:0d:38:09:95:64:
         c5:38:9e:85:27:cf:b7:cb:5f:a7:19:bb:2c:02:1d:4d:df:2f:
         09:33:4c:ea:7e:0f:07:f3:d3:4c:b7:6c:eb:55:93:1d:52:b9:
         ba:12:ec:3d:09:13:1d:2c:60:1d:d1:9b:30:35:ad:94:ea:a5:
         e6:8b:84:b2:cc:86:2e:46:54:56:27:41:71:41:29:a9:57:b4:
         8e:f3:87:5f:b1:7a:97:b6:9b:5e:87:9a:cb:ff:18:99:94:21:
         4c:42:42:fd:0f:2d:01:69:34:79:74:61:a5:6c:18:e5:c3:44:
         18:b6:4b:d7:a3:44:ac:5d:d4:8d:31:ee:1b:de:bf:79:f5:ef:
         11:d2:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----