Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/CC25FD3EC6E511ECA3C25F46C4F9AE02.roa
File:                     CC25FD3EC6E511ECA3C25F46C4F9AE02.roa (raw, json)
Hash identifier:          CeL8KNCtrbX3vRaLjsvoqScKK7MS5CO0kyHBdBmAiOA=
Subject key identifier:   26:46:6C:32:B6:5C:04:87:E9:53:B3:20:BA:92:30:9D:D9:3E:AE:41
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       105A
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/CC25FD3EC6E511ECA3C25F46C4F9AE02.roa
Signing time:             Thu 28 Apr 2022 11:24:42 +0000
ROA not before:           Thu 28 Apr 2022 11:24:42 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     10103
IP address blocks:        14.192.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4186 (0x105a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Apr 28 11:24:42 2022 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=626a7979-bb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:da:e6:e4:61:ee:1b:bc:f6:d6:4a:44:ac:
                    d6:53:91:7f:3a:85:ed:65:18:7a:ce:cf:43:e8:e8:
                    3e:79:c7:4d:1a:9a:46:ed:2d:dc:f8:bc:e8:53:fb:
                    8e:08:fd:f6:0c:ca:e9:03:1a:51:5d:a9:27:2c:1b:
                    09:b4:7b:e7:47:c0:3c:94:51:8a:5d:55:52:b7:c1:
                    3c:81:62:4b:7c:e2:95:b7:f2:74:10:2c:67:11:be:
                    58:15:08:72:1b:13:98:3e:71:3f:5f:90:32:18:97:
                    b3:00:07:59:6c:88:95:f9:5c:ce:45:ef:95:6f:a2:
                    7f:5a:7b:69:64:c4:2b:b2:df:fd:fd:c4:a3:75:63:
                    6d:da:5c:63:6b:d3:c0:18:25:ce:f3:dd:85:cc:85:
                    0d:7b:1b:63:d3:8c:fb:8c:8a:1a:06:62:fb:1c:42:
                    b7:7f:b7:c2:b6:38:96:84:27:ff:8f:87:02:55:88:
                    45:5e:fd:69:a0:9d:64:b8:f9:aa:11:ad:de:86:61:
                    12:b4:df:f4:48:76:58:9a:b6:e0:9e:0f:f9:b7:50:
                    18:d2:91:da:f6:3b:c3:e7:8e:6c:19:46:b0:ac:09:
                    e6:fb:a9:20:6f:04:4b:0e:e2:6c:1d:f6:e7:ef:c9:
                    e9:30:1b:1d:75:fb:c7:67:dd:d3:66:07:6c:31:16:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:6C:32:B6:5C:04:87:E9:53:B3:20:BA:92:30:9D:D9:3E:AE:41
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/CC25FD3EC6E511ECA3C25F46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:62:db:1a:21:6e:b9:a7:27:06:6f:ff:15:02:39:42:92:
         5e:42:df:54:aa:6d:57:36:af:51:f6:57:24:cd:bf:05:93:45:
         b8:c9:52:a0:03:fc:21:ad:2c:8f:c6:7d:12:38:20:3f:15:b2:
         db:73:f0:3e:e0:55:a5:ab:ef:72:a3:0b:3f:7a:14:36:03:5b:
         0a:cf:b0:75:ca:08:f0:41:2a:cc:c1:49:1a:cf:f8:40:c8:66:
         05:f9:28:3d:18:c3:97:58:b0:15:67:0b:20:90:2b:e1:67:c4:
         5c:94:c7:4a:fa:94:4c:80:1d:26:43:f7:e2:cc:6b:7e:42:99:
         eb:0a:70:05:37:3c:c9:bf:89:b4:6e:e9:da:e9:5a:6f:54:9d:
         3e:e4:62:69:b8:6e:0c:12:6e:8d:40:05:48:5a:63:e6:8b:48:
         1e:19:31:1c:06:bb:69:18:57:37:55:40:bf:a0:24:de:ea:4d:
         ff:2e:d2:94:ca:08:95:34:f2:0a:29:80:56:98:43:06:e0:aa:
         c6:94:8f:8f:ef:43:4c:a5:60:53:c9:8a:5e:fd:2b:05:af:51:
         0b:b1:93:af:35:3e:89:a7:25:c2:db:ad:aa:51:c6:d7:42:8f:
         e1:9a:37:97:5b:83:0d:35:c9:c9:9e:f1:3a:f4:f0:db:c2:65:
         ad:c4:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----