Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C5F3E856313C11EDA8FB742AC4F9AE02.roa
File:                     C5F3E856313C11EDA8FB742AC4F9AE02.roa (raw, json)
Hash identifier:          ONBHnzAvSJBctMoiBaqpaI8jit9Ia6QhGS7vsqSkmUw=
Subject key identifier:   E3:F8:2E:DA:C4:20:0B:2D:02:C2:1D:01:DA:D7:0D:96:69:9B:D0:4A
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12E8
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C5F3E856313C11EDA8FB742AC4F9AE02.roa
Signing time:             Sat 10 Sep 2022 20:14:25 +0000
ROA not before:           Sat 10 Sep 2022 20:14:25 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     6461
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4840 (0x12e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Sep 10 20:14:25 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=631cf021-47c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:92:76:bd:98:37:bc:ce:42:45:3f:b5:f7:
                    6e:87:12:06:87:0a:a1:e9:8b:2a:92:bb:3a:8a:48:
                    ac:3e:5d:4c:04:73:8f:f0:cc:30:f2:20:4a:8a:a4:
                    4d:9a:00:72:fc:91:d9:29:3b:44:ba:ff:40:98:60:
                    ad:b7:ad:a2:3c:3f:1c:7f:54:93:ab:66:1d:de:60:
                    7f:18:43:de:1d:fe:db:6a:3e:b4:74:f4:4e:9b:cf:
                    7d:d1:d8:a3:ed:85:1b:53:66:18:b0:4d:f8:ae:fd:
                    11:52:25:ac:b1:db:c3:7c:7c:94:4e:aa:cf:5a:48:
                    92:94:21:82:67:cf:c4:5c:c2:bf:ae:ea:3d:85:96:
                    61:39:b3:28:08:b1:d4:df:8a:d4:1b:ac:b7:b5:96:
                    45:b6:ca:85:ed:8b:93:97:c1:8e:6b:e5:6f:27:3c:
                    26:e0:19:5a:19:47:eb:fe:10:d7:69:73:1a:e1:62:
                    6c:b8:60:ce:9e:69:3f:ef:36:b5:33:3b:49:68:ab:
                    32:f1:ed:97:7f:a3:e0:d8:91:6c:07:b3:8a:eb:4d:
                    a2:a2:ba:f3:a5:05:c5:1f:83:bd:5b:f4:00:e8:3a:
                    82:0b:de:94:8a:92:e4:62:38:83:e4:3e:49:d9:30:
                    15:47:50:97:3f:73:7f:95:53:49:7a:d7:e8:1d:a6:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:2E:DA:C4:20:0B:2D:02:C2:1D:01:DA:D7:0D:96:69:9B:D0:4A
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/C5F3E856313C11EDA8FB742AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:d0:95:9b:57:a0:08:67:ea:f8:90:31:05:1b:4e:9c:48:bc:
         94:81:40:1e:b4:88:d9:68:20:14:a2:65:e0:25:bc:e8:9d:2d:
         ed:ad:3f:c2:4e:94:ee:4f:ff:b9:6c:6f:43:34:1e:6d:c2:17:
         7b:71:61:a5:64:47:f6:31:d7:9f:d5:8c:7d:bb:bb:40:db:e5:
         5a:9a:7d:14:92:81:3d:1f:ce:78:47:b3:8d:af:76:79:89:b3:
         fe:f4:1f:5b:e0:1e:11:84:40:1c:76:3c:2d:5b:c2:17:35:32:
         5c:c2:f2:61:59:b0:3f:46:37:2a:1e:be:ce:af:ac:55:63:64:
         a3:eb:07:f5:45:d7:8d:e3:5e:38:6f:be:b5:74:27:83:b1:a9:
         85:a6:54:3d:c9:88:27:0f:1f:86:80:9d:c5:4f:2d:14:e5:ae:
         20:fe:7d:da:77:07:40:ee:e4:29:48:a9:09:3b:c7:de:d1:f3:
         c2:34:cd:e8:c6:7e:20:40:f1:4e:2c:72:56:57:b1:3a:75:90:
         e1:fb:84:9f:47:14:f6:49:84:78:19:b7:38:f6:eb:1f:33:1f:
         9e:f7:a9:25:31:1e:4c:d4:73:15:ff:a9:5f:bc:aa:22:2b:9f:
         82:f0:e4:91:eb:4a:b3:ee:7b:a1:6c:b2:b2:8b:5a:d8:3e:1c:
         7d:fd:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----