Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/1375BDF227B011ED9B964E77C4F9AE02.roa
File:                     1375BDF227B011ED9B964E77C4F9AE02.roa (raw, json)
Hash identifier:          JlCk9zyXFiUvOTClyFGo0RUTfED2I8woniGwRjoe+Wo=
Subject key identifier:   A0:08:C7:4C:87:79:C7:4A:20:07:EB:36:08:71:B6:A6:B5:6F:E6:FB
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12B2
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/1375BDF227B011ED9B964E77C4F9AE02.roa
Signing time:             Mon 29 Aug 2022 21:34:19 +0000
ROA not before:           Mon 29 Aug 2022 21:34:19 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     397702
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776:410::/64 maxlen: 64
                          2402:d240:1776:411::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4786 (0x12b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Aug 29 21:34:19 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=630d30db-66cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:14:45:57:8f:27:de:b5:b2:80:10:5f:8f:
                    d7:16:5e:a5:f4:77:4e:d4:b6:f8:4a:c6:1e:1b:9f:
                    f5:52:46:cf:b9:10:10:c9:3c:0b:30:07:8e:d1:69:
                    04:b5:74:e5:24:65:0c:a4:c9:a5:55:24:1f:c4:27:
                    af:f6:7a:55:be:f2:4e:d2:62:2f:45:6f:64:5a:31:
                    24:90:78:26:ec:96:8d:be:b9:39:4e:0e:14:45:b9:
                    2d:fb:ce:c9:bd:48:1e:0e:9b:a0:23:82:08:18:91:
                    08:e9:a0:32:05:bf:7f:fe:bc:38:e1:f7:42:26:c5:
                    0b:83:88:7a:e9:dd:ed:83:6a:01:60:77:a9:2b:f6:
                    93:1f:56:a5:79:f9:a8:01:33:72:42:8a:98:b9:e1:
                    a9:90:97:b5:b8:ce:46:02:6c:ef:84:d2:38:b7:ef:
                    3d:03:78:d3:cc:7b:5f:1a:8d:29:18:13:97:c0:c2:
                    72:30:9c:07:9e:9c:21:fe:23:23:63:a4:94:13:61:
                    7b:20:8c:65:6c:9f:84:df:e3:53:df:7e:af:43:6a:
                    be:1c:7d:76:13:b4:d0:a6:2c:b0:3e:65:f9:e4:9d:
                    f0:7f:14:4b:aa:14:ce:f0:8c:91:08:92:ec:28:88:
                    27:d6:31:cc:26:ff:26:83:6c:4c:8f:de:89:f8:ec:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:C7:4C:87:79:C7:4A:20:07:EB:36:08:71:B6:A6:B5:6F:E6:FB
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/1375BDF227B011ED9B964E77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776:410::/63

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:6e:29:fd:ae:14:60:23:dc:45:61:4c:93:6f:44:7f:fd:
         93:28:99:9e:0d:7b:e6:e6:00:74:df:fe:3b:f3:c1:60:f2:dc:
         2e:49:8f:91:18:58:9b:74:00:94:90:ce:b3:d6:ae:24:da:21:
         96:13:14:07:14:52:cf:5a:82:e6:7e:75:2f:8d:fd:27:09:23:
         46:a3:1b:c3:dd:bf:f6:9b:6e:00:b3:14:51:f1:96:76:a4:b2:
         0b:01:d6:6e:32:d2:cc:b6:25:9b:60:7b:03:01:65:88:7b:a4:
         fe:c8:0a:74:79:11:47:12:2f:d4:d7:4b:7a:99:00:c4:d1:1c:
         8a:ee:fb:92:bb:46:c6:bc:93:4e:68:92:1e:4e:82:4c:16:36:
         02:61:53:6f:84:46:d4:90:c1:37:0e:08:18:34:0f:b4:0d:0c:
         5a:9d:22:06:fa:ed:11:04:be:4e:d2:76:07:49:c1:cb:65:0e:
         92:d6:d2:72:dd:7d:33:a5:c5:cd:91:64:c1:92:be:96:05:a1:
         29:1d:7b:39:78:af:d6:ea:eb:9e:66:82:db:88:81:72:61:86:
         99:39:6e:fa:a9:16:a1:9f:34:fe:d2:53:f6:20:70:26:06:98:
         a1:e9:bf:01:1f:51:3f:8c:10:00:86:d0:b6:4f:f9:8c:02:5d:
         0b:2e:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----