Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/EA16F93CAF8011EC8B7D0A55C4F9AE02.roa
File:                     EA16F93CAF8011EC8B7D0A55C4F9AE02.roa (raw, json)
Hash identifier:          05cF/5TKKIfrdsIj4CABG5ytYgc847Jt+QxSIT3gxk8=
Subject key identifier:   20:CD:7D:11:83:88:B4:6E:22:78:1C:7D:29:F1:D0:7F:9A:8F:A8:00
Certificate issuer:       /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial:       13
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/EA16F93CAF8011EC8B7D0A55C4F9AE02.roa
Signing time:             Tue 29 Mar 2022 17:14:28 +0000
ROA not before:           Tue 29 Mar 2022 17:14:28 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     149522
IP address blocks:        103.182.122.0/24 maxlen: 24
                          2400:5ce0::/48 maxlen: 48
                          2400:5ce0:1::/48 maxlen: 48
                          2400:5ce0:2::/48 maxlen: 48
                          2400:5ce0:3::/48 maxlen: 48
                          2400:5ce0:4::/48 maxlen: 48
                          2400:5ce0:5::/48 maxlen: 48
                          2400:5ce0:6::/48 maxlen: 48
                          2400:5ce0:7::/48 maxlen: 48
                          2400:5ce0:8::/48 maxlen: 48
                          2400:5ce0:9::/48 maxlen: 48
                          2400:5ce0:a::/48 maxlen: 48
                          2400:5ce0:b::/48 maxlen: 48
                          2400:5ce0:c::/48 maxlen: 48
                          2400:5ce0:d::/48 maxlen: 48
                          2400:5ce0:e::/48 maxlen: 48
                          2400:5ce0:f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
        Validity
            Not Before: Mar 29 17:14:28 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62433e74-4c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:9a:7d:fd:2c:5b:f9:e0:16:82:6f:35:09:
                    a3:18:09:64:4f:45:f6:7a:d5:a6:01:23:36:a6:06:
                    75:9c:ed:ee:a3:0c:82:80:cf:41:10:43:c0:05:1d:
                    31:ab:ec:d4:7a:b9:6c:ba:f6:07:fb:8a:20:62:7f:
                    43:07:a0:f1:61:1e:6c:86:07:ea:0c:43:09:24:5a:
                    62:7d:ad:b2:c6:7e:9a:60:d6:45:b2:a6:59:86:9c:
                    4b:f1:ea:47:6b:c4:d9:85:e4:c8:94:4c:61:36:d5:
                    ae:d3:1b:d1:2c:7f:3f:10:14:eb:6d:f4:e3:80:6e:
                    0f:cc:3c:a2:58:cb:70:68:eb:03:c3:ec:e6:97:9a:
                    7c:1f:20:f7:7e:4b:1d:e6:a4:35:05:cc:6a:d6:c3:
                    94:bc:f6:17:a5:6a:19:98:1e:ae:c2:87:a2:32:85:
                    6c:ae:ca:7e:d0:55:b3:a6:89:60:12:9c:87:57:9a:
                    08:3c:36:b8:f9:c0:e6:01:1d:a2:98:48:f2:a2:02:
                    74:20:57:1b:39:f3:d5:40:1b:6f:96:a8:44:14:31:
                    e4:8a:50:bf:90:37:93:4f:d3:19:d0:d6:ef:e2:54:
                    c1:8c:1a:5c:45:49:8a:5a:bb:84:41:32:f4:f0:3c:
                    77:c9:70:19:76:68:87:43:e2:36:de:54:1d:ab:0f:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CD:7D:11:83:88:B4:6E:22:78:1C:7D:29:F1:D0:7F:9A:8F:A8:00
            X509v3 Authority Key Identifier:
                keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/EA16F93CAF8011EC8B7D0A55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.122.0/24
                IPv6:
                  2400:5ce0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:c3:05:e0:76:c2:4e:d2:d4:61:1e:9c:fa:9f:d0:ca:19:
         86:81:7d:aa:e2:a4:3a:d2:77:a3:2e:05:d5:e9:bd:ed:a2:bc:
         24:a5:ae:a5:d1:5a:8e:ea:9f:3a:83:3d:79:e1:85:1b:b0:d3:
         74:8d:c5:d6:b7:ab:75:0b:ef:a9:e7:3f:8f:30:a0:9e:c6:e6:
         d6:d7:ee:0e:ea:ee:26:79:85:12:5b:bd:08:46:c7:cd:10:69:
         26:1b:a9:86:be:d8:a4:ec:c9:e8:8e:c5:52:88:5a:36:48:f9:
         8d:a3:69:d2:75:b8:cd:25:21:29:6f:f9:0b:f4:94:cb:0e:78:
         25:f5:c0:80:ce:10:d3:b6:5a:97:9c:7e:43:a3:7d:d1:5e:d1:
         d0:a7:6b:f6:d9:ba:c2:36:40:76:d1:2e:c1:b9:17:65:72:f8:
         34:c1:f3:df:1a:36:6a:46:f5:de:ab:28:41:71:77:c0:f8:4f:
         0d:f4:aa:11:de:07:be:af:7b:20:bc:b7:41:0b:6f:ef:ba:31:
         e9:67:03:83:f0:91:2a:1b:3f:bc:c5:3c:1f:0d:35:7a:7f:14:
         dd:5d:7c:fd:5d:cf:9d:86:ee:ab:81:09:a4:f8:bb:c8:56:73:
         09:b4:75:2c:f6:99:17:90:ca:c6:a9:d7:b2:b5:a0:ae:98:0c:
         e3:5a:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----