Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/4906E91C310D11ED96791134C4F9AE02.roa
File:                     4906E91C310D11ED96791134C4F9AE02.roa (raw, json)
Hash identifier:          BP9oTmNrZofbnXKwWngKbI487QZQPiNeV+YsOvOz3as=
Subject key identifier:   C1:63:4E:70:BE:19:87:42:33:D3:61:17:A3:96:DB:E0:65:6E:05:FE
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12D9
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/4906E91C310D11ED96791134C4F9AE02.roa
Signing time:             Sat 10 Sep 2022 13:34:25 +0000
ROA not before:           Sat 10 Sep 2022 13:34:25 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     397702
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4825 (0x12d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Sep 10 13:34:25 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=631c9261-1dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:96:0f:31:fb:67:34:a0:59:c3:8c:ef:47:
                    48:41:60:35:b6:00:8b:b0:d5:0e:bb:be:de:b9:e1:
                    c8:c0:fb:5f:dc:93:77:3b:26:9f:54:ea:d9:fb:9a:
                    8f:79:41:ec:92:d8:8c:f1:22:ec:06:68:c3:e0:28:
                    b0:9f:b4:11:ce:76:98:b6:2b:80:80:74:f0:68:98:
                    11:99:76:36:e0:79:de:86:5d:a8:ec:50:90:de:32:
                    39:81:40:77:43:84:6f:3a:50:45:16:75:4f:4e:48:
                    f6:86:3a:6b:e0:7a:0e:75:97:70:cc:bf:9d:df:80:
                    78:98:7e:9c:92:13:5a:61:90:05:11:ca:47:02:45:
                    59:4c:1c:b8:39:6d:6a:fc:23:b5:ac:3b:7e:cc:14:
                    6c:f5:48:1d:0d:b3:2e:43:0f:24:11:60:a2:20:cd:
                    c5:d2:f1:0d:46:98:47:35:c8:b1:d5:f1:99:f2:de:
                    b5:9a:5a:28:a7:3e:75:05:14:60:ba:2e:e5:dc:11:
                    f3:0f:af:54:14:3b:df:08:75:3b:be:a2:a9:dc:6d:
                    f6:82:3e:03:8d:ec:2d:37:21:fe:99:ab:55:cb:76:
                    73:bd:cb:3a:cc:0f:92:c4:6f:bf:45:6e:55:05:c0:
                    7e:74:26:9a:83:ed:1e:0e:68:33:bf:9c:0b:47:7f:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:4E:70:BE:19:87:42:33:D3:61:17:A3:96:DB:E0:65:6E:05:FE
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/4906E91C310D11ED96791134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:f8:b6:fa:18:1d:22:d3:59:66:e0:74:7c:13:62:f8:a3:ed:
         20:41:8c:d5:a5:45:f4:f1:df:87:a8:29:8d:07:ce:a1:8b:af:
         1b:8d:6c:56:21:25:96:17:c3:81:96:e0:1a:8d:69:ca:8a:9d:
         71:3c:9d:f8:04:be:6b:b4:a7:79:e7:56:43:b8:07:b7:f6:e9:
         24:d3:33:cf:3b:9a:3a:c9:75:50:85:84:0e:63:af:ae:8f:9a:
         e5:4f:d6:81:2b:3a:8d:6a:4b:4d:0f:f4:21:34:97:63:1d:f2:
         1c:c9:0d:1a:af:56:95:c3:a1:d9:4f:ea:b4:9c:56:2a:1f:05:
         43:81:b4:8c:63:21:8e:ae:88:50:5a:03:84:fc:e6:6e:4a:ca:
         2b:ee:d2:70:e6:3f:7b:b9:9e:75:fd:c7:cb:f5:eb:c1:a1:89:
         0d:dc:aa:cc:33:27:0e:78:8a:b3:cc:49:79:8f:83:dd:cd:db:
         5d:cc:ea:24:fc:8b:32:07:13:32:34:14:50:6a:ee:cd:c8:bf:
         b8:3d:58:4a:ed:1b:8a:45:fa:64:03:ea:05:e7:70:b4:39:e8:
         89:04:ec:82:e4:98:a8:8c:9c:cb:d3:0c:14:11:c3:3a:cd:3e:
         33:23:60:07:1b:df:30:16:6e:39:42:22:52:11:9f:0a:6a:df:
         3d:84:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----