Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/BE2D248615FB11EDAB9C9D51C4F9AE02.roa
File:                     BE2D248615FB11EDAB9C9D51C4F9AE02.roa (raw, json)
Hash identifier:          JombDOXOlMDLhuj0BiGD9r0mkvyh2ZvTQXTL+b/0gbo=
Subject key identifier:   7C:EC:F0:70:08:20:3B:4A:15:F9:3E:04:0D:33:28:0F:24:6D:50:48
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       9F
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/BE2D248615FB11EDAB9C9D51C4F9AE02.roa
Signing time:             Mon 10 Oct 2022 05:11:21 +0000
ROA not before:           Mon 10 Oct 2022 05:11:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141778
IP address blocks:        103.163.254.0/24 maxlen: 24
                          103.163.255.0/24 maxlen: 24
                          2001:df6:3580::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Oct 10 05:11:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6343a978-e7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:c3:6a:f0:1f:dc:2a:ee:4b:f1:de:da:66:
                    58:b8:6d:46:a9:53:26:23:ce:53:ae:16:16:12:82:
                    c0:50:ea:9e:d8:f9:70:ce:e5:a1:2e:ac:0f:6a:e6:
                    fa:1f:41:8e:2e:cd:bd:db:11:f6:28:a5:75:aa:4d:
                    eb:3a:0f:a7:0f:7c:10:51:2f:50:03:a5:18:b6:6b:
                    0b:c5:2f:e1:b7:ef:db:8c:ab:5c:00:4d:ce:98:76:
                    d5:ba:6c:47:c9:10:e1:5f:cd:cd:db:5c:72:0d:40:
                    ea:1c:d9:6b:37:ae:a8:3d:82:97:0f:44:cc:96:cd:
                    c4:3a:d2:c0:ad:7d:51:56:54:09:ea:3d:b0:6b:dd:
                    1e:c0:ab:06:77:59:2e:5d:7a:9b:f4:84:25:d5:96:
                    c8:8a:87:2c:40:9a:92:22:7f:49:b4:3e:ab:28:aa:
                    59:61:cc:87:b0:da:d8:7a:35:fe:73:69:c8:aa:5d:
                    0d:4f:ba:c4:91:ce:ea:52:19:be:3d:dc:ac:22:cd:
                    ff:a2:43:89:53:7d:7c:67:fd:eb:2b:7a:75:dc:da:
                    bc:c7:61:9c:29:9f:fc:4b:8a:b3:82:e2:17:18:6f:
                    ef:c1:eb:6d:1c:06:ec:3d:14:b9:8e:fc:c4:1d:0e:
                    a1:47:18:0d:48:91:07:57:e8:66:77:69:c7:60:0d:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:F0:70:08:20:3B:4A:15:F9:3E:04:0D:33:28:0F:24:6D:50:48
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/BE2D248615FB11EDAB9C9D51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.254.0/23
                IPv6:
                  2001:df6:3580::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:d8:0f:22:41:60:48:79:8a:56:f7:8a:bb:98:c3:e3:ba:
         c1:44:0b:01:07:25:4b:e8:7c:15:ac:ee:2e:f6:bf:ac:66:36:
         50:38:ae:f6:de:42:ca:4a:7e:e2:69:f5:60:90:1f:ee:dc:7b:
         34:a3:f3:68:ca:6c:e4:cb:9b:3c:bc:ff:b0:47:bf:df:81:4b:
         ac:f5:11:a5:14:2c:72:88:cf:d3:68:8d:8f:5d:cf:ec:62:6b:
         b2:4b:15:d3:94:df:55:28:4c:ea:1a:6b:e8:6c:88:38:50:d1:
         f1:ec:84:f1:0f:2f:50:99:42:e3:9a:e4:66:ab:85:a7:59:fd:
         29:5c:cf:e3:f9:76:69:41:c9:53:65:76:48:a5:c1:5d:2a:b6:
         2c:f9:89:fe:88:37:16:36:fc:06:dc:97:ec:b4:ed:2a:b2:55:
         7b:85:59:e5:3b:7a:0c:09:73:cd:36:54:60:33:a8:f7:f6:04:
         94:76:26:0d:da:63:11:ea:2f:ff:2e:9e:35:f2:62:16:a1:5c:
         a1:a2:8c:8f:94:19:97:cf:90:eb:be:e4:08:4b:00:03:d1:b1:
         54:76:79:59:77:bd:4c:08:c9:6f:bc:09:76:69:96:03:c6:8b:
         f3:0f:fd:d9:cf:a0:b7:ce:92:84:ae:49:f7:8a:48:d7:21:6c:
         06:36:ca:6c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE
RDZCRTc3RTIwHhcNMjIxMDEwMDUxMTIxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQzYTk3OC1lN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IPDavAf3CruS/He2mZYuG1GqVMmI85TrhYWEoLAUOqe2PlwzuWhLqwPaub6
H0GOLs292xH2KKV1qk3rOg+nD3wQUS9QA6UYtmsLxS/ht+/bjKtcAE3OmHbVumxH
yRDhX83N21xyDUDqHNlrN66oPYKXD0TMls3EOtLArX1RVlQJ6j2wa90ewKsGd1ku
XXqb9IQl1ZbIiocsQJqSIn9JtD6rKKpZYcyHsNrYejX+c2nIql0NT7rEkc7qUhm+
PdysIs3/okOJU318Z/3rK3p13Nq8x2GcKZ/8S4qzguIXGG/vwettHAbsPRS5jvzE
HQ6hRxgNSJEHV+hmd2nHYA31HwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHzs8HAI
IDtKFfk+BA0zKA8kbVBIMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NUYvQUI5RUI4Q0FBOUY1MTFFQjhBNDkyMjU0QzRGOUFFMDIvQkUyRDI0ODYx
NUZCMTFFREFCOUM5RDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFno/4wDwQCAAIwCQMHACABDfY1gDANBgkqhkiG9w0BAQsF
AAOCAQEAkKjYDyJBYEh5ilb3iruYw+O6wUQLAQclS+h8FazuLva/rGY2UDiu9t5C
ykp+4mn1YJAf7tx7NKPzaMps5MubPLz/sEe/34FLrPURpRQscojP02iNj13P7GJr
sksV05TfVShM6hpr6GyIOFDR8eyE8Q8vUJlC45rkZquFp1n9KVzP4/l2aUHJU2V2
SKXBXSq2LPmJ/og3Fjb8BtyX7LTtKrJVe4VZ5Tt6DAlzzTZUYDOo9/YElHYmDdpj
Eeov/y6eNfJiFqFcoaKMj5QZl8+Q677kCEsAA9GxVHZ5WXe9TAjJb7wJdmmWA8aL
8w/92c+gt86ShK5J94pI1yFsBjbKbA==
-----END CERTIFICATE-----