Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/2CECFEA0A40311E9B499937BC4F9AE02.roa
File:                     2CECFEA0A40311E9B499937BC4F9AE02.roa (raw, json)
Hash identifier:          zzQmGZa+j+49Dqpfjl3IKHw+cePJH3cxO81sdNnPzjs=
Subject key identifier:   66:F7:AA:24:2A:2D:F1:23:97:A0:F4:31:2D:2F:6B:39:DE:6B:84:76
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       11DC
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/2CECFEA0A40311E9B499937BC4F9AE02.roa
Signing time:             Thu 19 May 2022 18:06:16 +0000
ROA not before:           Thu 19 May 2022 18:06:16 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     397702
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4572 (0x11dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: May 19 18:06:16 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62868718-8620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a7:af:ee:a1:b6:b7:9a:01:a5:80:fe:45:7a:
                    32:d5:36:25:85:69:f8:b1:75:1c:0f:8d:eb:89:7e:
                    16:a9:8c:25:48:7f:15:3d:5c:ef:84:1b:cb:33:80:
                    77:44:e8:94:34:b4:ca:04:87:c3:91:bd:d4:f7:d2:
                    b9:91:fd:0e:46:3b:e9:3f:ed:53:35:ab:cf:00:fc:
                    dd:0e:bf:a3:4c:3a:94:95:1d:b2:24:69:20:de:aa:
                    a7:79:5e:c0:ae:17:9d:55:d9:4a:f2:14:61:3d:98:
                    74:11:2b:a4:31:88:8f:0f:ff:b2:d7:fe:5c:eb:fb:
                    c0:32:86:83:84:af:da:34:f5:0b:35:57:27:68:15:
                    8c:a7:a2:eb:08:7a:1c:e2:9f:5a:b8:48:6a:c8:c3:
                    c1:ef:91:11:cc:5e:ca:62:b1:da:4e:58:72:3b:4c:
                    4c:94:88:d1:f5:d3:4f:9a:24:b8:65:af:1f:9f:b3:
                    99:21:cb:3a:8a:cf:16:65:9c:a2:ef:55:ca:b7:81:
                    0d:42:33:49:5d:ad:ca:dc:eb:ba:d5:1f:6a:5d:df:
                    0e:a5:fb:23:26:60:50:6e:e7:4a:25:45:d2:26:d1:
                    85:6a:31:56:84:f1:14:56:bb:6e:61:ed:d5:79:d8:
                    0d:a8:e8:80:1b:71:72:42:f4:81:e2:38:c5:4e:42:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F7:AA:24:2A:2D:F1:23:97:A0:F4:31:2D:2F:6B:39:DE:6B:84:76
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/2CECFEA0A40311E9B499937BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:45:46:1f:1a:8e:52:48:cc:aa:d4:53:6d:8f:80:4c:22:
         0c:d7:d0:a4:33:b6:5d:64:00:90:a3:18:d7:15:29:ca:46:77:
         4e:3d:6f:b5:39:23:b0:ad:8b:64:4f:47:6a:c8:e6:bf:43:b3:
         ea:c7:ad:2f:d6:42:b6:54:ae:69:69:a2:ab:17:63:be:ab:e2:
         df:9b:3b:b8:3f:e5:0a:5d:96:bc:be:3a:af:c5:5f:79:e1:e4:
         78:7a:9e:a3:50:41:49:81:12:31:55:47:8c:b4:83:76:36:24:
         42:1c:fa:83:df:e0:2a:cf:6b:7e:d9:9a:0f:21:d3:78:89:ff:
         f9:2d:4a:50:d7:ec:cf:7e:bc:d7:10:b0:04:bc:ff:54:e9:dc:
         b6:ee:c5:3d:5c:05:fe:90:d1:76:07:2b:eb:10:8e:3c:53:99:
         a3:e7:f9:c1:c1:0a:c7:88:38:fe:8d:67:41:7e:0a:c0:c7:95:
         33:94:ce:11:7a:da:aa:ca:0b:2f:5d:91:b0:bd:16:9c:b2:2f:
         96:77:0e:5c:fc:13:72:70:62:45:df:f1:b6:c2:84:b6:25:67:
         99:f3:25:4a:6f:4b:8c:19:59:5b:83:24:fe:d4:b1:20:93:f7:
         a9:e7:f5:ab:47:9c:ab:bd:f0:3e:96:7d:f7:78:d2:3d:a6:03:
         7b:3c:ac:d1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE
NEM2RDU3MUYwHhcNMjIwNTE5MTgwNjE2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjg2ODcxOC04NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA86ev7qG2t5oBpYD+RXoy1TYlhWn4sXUcD43riX4WqYwlSH8VPVzvhBvLM4B3
ROiUNLTKBIfDkb3U99K5kf0ORjvpP+1TNavPAPzdDr+jTDqUlR2yJGkg3qqneV7A
rhedVdlK8hRhPZh0ESukMYiPD/+y1/5c6/vAMoaDhK/aNPULNVcnaBWMp6LrCHoc
4p9auEhqyMPB75ERzF7KYrHaTlhyO0xMlIjR9dNPmiS4Za8fn7OZIcs6is8WZZyi
71XKt4ENQjNJXa3K3Ou61R9qXd8OpfsjJmBQbudKJUXSJtGFajFWhPEUVrtuYe3V
edgNqOiAG3FyQvSB4jjFTkJsQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGb3qiQq
LfEjl6D0MS0vaznea4R2MB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2
NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5RkMvODEwNDVFM0E1NjYwMTFFOEJGM0ZENTI3QzRGOUFFMDIvMkNFQ0ZFQTBB
NDAzMTFFOUI0OTk5MzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABncr8wDwQCAAIwCQMHACQC0kAXdjANBgkqhkiG9w0BAQsF
AAOCAQEAjQ1FRh8ajlJIzKrUU22PgEwiDNfQpDO2XWQAkKMY1xUpykZ3Tj1vtTkj
sK2LZE9Hasjmv0Oz6setL9ZCtlSuaWmiqxdjvqvi35s7uD/lCl2WvL46r8VfeeHk
eHqeo1BBSYESMVVHjLSDdjYkQhz6g9/gKs9rftmaDyHTeIn/+S1KUNfsz3681xCw
BLz/VOnctu7FPVwF/pDRdgcr6xCOPFOZo+f5wcEKx4g4/o1nQX4KwMeVM5TOEXra
qsoLL12RsL0WnLIvlncOXPwTcnBiRd/xtsKEtiVnmfMlSm9LjBlZW4Mk/tSxIJP3
qef1q0ecq73wPpZ993jSPaYDezys0Q==
-----END CERTIFICATE-----