Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6E1D0B34C47411EB9FA8F93BC4F9AE02.roa
File:                     6E1D0B34C47411EB9FA8F93BC4F9AE02.roa (raw, json)
Hash identifier:          wLUXJz3rPdEUSo4PiCVKckdarK4zirAMVswJ0a1KxYk=
Subject key identifier:   7E:C6:49:F9:12:C9:4B:62:06:55:2B:2E:17:CE:9D:84:ED:2B:C9:29
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       21A1
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6E1D0B34C47411EB9FA8F93BC4F9AE02.roa
Signing time:             Thu 29 Jul 2021 16:33:08 +0000
ROA not before:           Thu 29 Jul 2021 16:33:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     46664
IP address blocks:        45.249.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8609 (0x21a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 29 16:33:08 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6102d844-f140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:88:84:2d:9c:3f:e5:a9:e2:fa:8d:1f:cd:
                    8b:90:31:11:a7:b0:95:37:fc:fc:0f:ca:e5:a7:af:
                    a5:06:bc:1f:a3:96:1d:b5:17:62:59:e5:39:ca:43:
                    d9:33:bc:4a:f3:9e:1a:a6:82:59:5f:c9:74:af:15:
                    ba:4d:95:1b:2a:d4:d0:2e:c4:79:34:70:2b:cd:8d:
                    26:f0:f0:bc:af:2f:74:71:6a:06:16:d1:05:46:2b:
                    a8:6b:90:3c:46:d1:f4:5d:6d:0d:e6:ce:30:21:31:
                    33:87:5d:f1:22:fc:5f:64:21:4b:04:ed:d6:2e:da:
                    f0:9d:33:1e:3f:96:73:ce:45:52:aa:26:08:b0:08:
                    c0:ca:5e:91:38:3d:52:32:9e:0a:8e:58:db:c2:08:
                    bd:da:e3:66:20:2c:31:13:d5:ea:3a:b7:24:8c:b5:
                    4f:05:b3:f6:ce:c3:b4:8e:9a:c6:41:c8:3e:55:1f:
                    8c:0b:34:6b:6c:d1:fc:cb:f3:f4:bb:9a:78:e1:48:
                    a2:74:74:d2:29:90:55:6f:85:a6:d8:37:20:31:63:
                    9c:61:91:83:3c:e5:7f:91:6c:ef:94:1c:46:26:ba:
                    1b:a5:61:e1:e8:04:bd:ad:bf:51:0f:0f:25:bc:54:
                    40:2b:de:c3:85:2d:bf:3a:5f:bc:a3:27:64:cf:b5:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:49:F9:12:C9:4B:62:06:55:2B:2E:17:CE:9D:84:ED:2B:C9:29
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6E1D0B34C47411EB9FA8F93BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:66:fd:e2:64:f1:0f:db:c9:5c:27:32:20:b3:8d:9a:78:5e:
         60:37:9a:01:c8:99:5a:c4:64:36:01:1d:15:86:6d:bb:82:15:
         da:36:43:b5:98:c9:90:11:72:83:26:90:08:cc:10:5c:85:0f:
         1d:10:67:d3:e9:31:45:e9:1a:7e:96:38:7c:c5:16:ed:4f:51:
         89:c4:54:f8:d0:d9:d1:4e:a1:6a:9d:a9:83:f1:fe:76:70:d0:
         73:5a:4b:c4:f0:39:6b:26:49:03:df:91:2e:78:e2:51:e7:a0:
         4c:ab:c3:da:65:01:71:0f:ef:ae:bf:f7:71:16:dc:3a:e8:87:
         ab:a1:0c:58:9f:f5:2f:f6:f6:af:4f:19:e2:72:ee:4b:8a:a1:
         6d:6b:11:56:26:76:f8:fd:69:23:d7:cf:c9:7b:c5:c6:bf:c0:
         85:9e:68:fa:92:c0:09:6a:50:d5:e8:46:62:e7:0b:3a:a1:3b:
         c8:e3:d7:3f:74:93:36:64:2b:38:84:ff:f7:2b:6f:bb:b6:40:
         45:dd:22:c3:3d:96:07:79:c3:66:22:0c:47:85:60:18:8e:b6:
         6e:8e:d7:89:69:08:c4:86:54:a6:10:96:db:ba:10:1d:ed:2d:
         fa:81:05:8c:8d:09:f5:48:b7:a2:e8:87:bb:1c:ed:01:b1:f5:
         8d:f6:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----