Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/0DFD2A6ABA5C11EDA3768857C4F9AE02.roa
File:                     0DFD2A6ABA5C11EDA3768857C4F9AE02.roa (raw, json)
Hash identifier:          kN6EaOfkh4WvHyo0y9hoibXFTTHw/MTItv21qRlPrqI=
Subject key identifier:   BD:50:61:6D:F3:63:01:2B:0C:1E:E4:CB:23:19:F0:1A:A5:09:F1:8A
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       0291
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/0DFD2A6ABA5C11EDA3768857C4F9AE02.roa
Signing time:             Sat 04 Mar 2023 07:13:25 +0000
ROA not before:           Sat 04 Mar 2023 07:13:25 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     142600
IP address blocks:        103.178.66.0/24 maxlen: 24
                          2001:df0:3540::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Mar  4 07:13:25 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=6402ef95-d6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:ac:8f:fe:a9:b7:83:a5:ab:8e:1d:6e:e9:
                    7a:29:b5:f4:3d:ec:90:2b:93:c9:01:97:13:72:42:
                    54:8a:b2:66:a3:f6:0b:b2:60:45:0c:ee:8e:d6:11:
                    ee:c7:a0:86:b6:f4:4a:2f:b5:a7:c9:2c:10:64:61:
                    2f:0f:6b:d8:36:b1:99:43:f8:4f:00:02:22:07:39:
                    69:4b:46:5e:ac:90:0d:aa:6a:bb:62:bc:04:18:5c:
                    94:21:18:d2:98:2d:8f:b4:5d:c2:c8:3f:ff:18:4f:
                    83:58:0f:09:89:42:5a:b9:c4:b8:31:d9:b9:0f:33:
                    23:d2:08:e6:15:b3:1c:a7:71:79:dc:dd:84:0f:24:
                    9d:9d:1b:5d:3f:5b:cf:c4:05:5a:fe:dd:20:48:a1:
                    6c:1a:88:41:10:f0:06:5c:8c:5c:8a:53:56:d3:73:
                    dc:dc:18:c5:7b:90:e1:c9:59:46:5e:fb:a5:b4:a7:
                    43:f8:8d:2b:3d:0e:6b:23:e3:11:30:e2:6f:da:29:
                    28:31:bd:67:fa:0f:48:98:90:1c:6f:e8:ec:ce:bc:
                    aa:66:f8:45:88:a5:d1:25:12:17:ed:ec:87:55:c3:
                    b9:47:56:a4:56:a6:93:0a:a1:e5:5f:7a:39:88:2f:
                    47:32:ae:d7:1d:2f:fd:aa:92:d7:50:44:a6:2e:a3:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:61:6D:F3:63:01:2B:0C:1E:E4:CB:23:19:F0:1A:A5:09:F1:8A
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/0DFD2A6ABA5C11EDA3768857C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.66.0/24
                IPv6:
                  2001:df0:3540::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:9e:d5:ed:ab:91:3e:d1:0c:30:85:9f:e4:96:2b:bc:60:
         33:7f:9e:4e:97:2f:41:b6:78:82:c6:f3:a3:6a:c7:89:c6:3e:
         36:d8:c0:d0:45:94:d5:12:72:92:34:15:46:d0:a5:e8:3c:11:
         f9:ac:61:0a:60:48:1c:e0:b3:09:40:fe:91:a3:6c:27:75:59:
         16:35:2b:44:42:f9:ca:71:c2:3f:16:47:27:09:c7:a0:c7:5c:
         20:ea:b4:2a:1a:7e:e4:23:1f:a4:09:21:3b:0c:a2:f6:18:14:
         98:9e:aa:08:45:16:a7:ac:11:b9:94:26:46:bf:10:f7:38:10:
         70:47:e5:36:a6:ea:5d:65:ee:22:69:ce:e5:9e:34:12:a5:e2:
         4b:da:63:fe:4f:ec:e6:a6:61:9c:ea:82:aa:8b:ae:de:c6:83:
         a7:b1:85:c3:a6:b8:ec:35:49:d9:f1:69:60:c6:04:a4:1e:0a:
         0a:ec:d4:66:2d:6d:3e:f1:ee:a7:73:26:a1:a0:27:3e:82:8a:
         0c:af:22:e3:1e:6e:92:53:a6:24:34:a6:45:bc:a1:19:91:53:
         28:cd:3b:c6:21:ce:e9:9a:c4:1b:73:5e:f3:3c:58:38:d1:db:
         32:a4:ef:7b:2c:3d:c6:7b:5d:a6:51:cc:11:b4:c1:48:69:59:
         73:2b:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----