Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2253BCDA538911ECBA3D650CC4F9AE02.roa
File:                     2253BCDA538911ECBA3D650CC4F9AE02.roa (raw, json)
Hash identifier:          qz2PAo+xAyWmMLRW0nkYVJ2pskp/4rAUOSyvW/xfL5Y=
Subject key identifier:   60:69:04:E9:E0:65:ED:12:6D:8D:0E:E6:D8:FC:4B:E8:E7:13:61:6D
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       BE
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2253BCDA538911ECBA3D650CC4F9AE02.roa
Signing time:             Thu 02 Dec 2021 16:01:40 +0000
ROA not before:           Thu 02 Dec 2021 16:01:39 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     2914
IP address blocks:        2407:d340:fff0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Dec  2 16:01:39 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=61a8ede3-4123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:85:ed:bc:fb:02:e8:02:d3:ff:1f:c9:c0:
                    4c:4c:23:02:aa:49:c0:cb:8e:8c:8a:96:bb:97:07:
                    4d:39:cb:0b:82:b7:26:42:94:e8:95:55:c1:33:48:
                    fe:8e:bb:1b:ae:39:db:52:91:21:89:67:da:44:98:
                    3b:ed:5d:3d:9e:d3:c8:57:7d:fc:ec:e4:e5:68:62:
                    3f:75:7e:60:70:7b:15:d6:dc:db:20:f0:e2:82:fb:
                    87:db:ca:36:6b:2b:a3:b4:7f:da:4d:0f:1d:45:f8:
                    65:fd:ff:b0:5e:2f:c4:44:cb:1a:ba:4b:aa:ee:0c:
                    3f:cc:01:07:d8:4c:df:6e:1f:8f:ec:e2:b0:9f:19:
                    26:f8:5a:ca:09:ab:cf:18:f1:30:35:44:a8:6f:0c:
                    64:3f:af:ce:1e:15:8a:95:68:0b:13:cf:46:50:fd:
                    2e:3a:6a:ab:10:0b:cd:2a:5d:6f:af:6e:aa:62:15:
                    1c:a6:c3:c9:ff:58:d5:31:03:d9:a8:0f:04:9a:fb:
                    90:7f:45:06:b8:b1:35:b6:b4:90:0d:64:bd:4e:e0:
                    5d:0e:a3:2f:41:b4:23:2e:20:48:d8:14:7a:d9:b6:
                    45:e1:62:82:1d:77:9f:51:aa:0a:ff:d7:93:ae:8e:
                    26:72:eb:77:87:a1:c9:c8:5c:63:eb:54:4b:66:ad:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:04:E9:E0:65:ED:12:6D:8D:0E:E6:D8:FC:4B:E8:E7:13:61:6D
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/2253BCDA538911ECBA3D650CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d340:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:ee:d3:22:8c:91:af:90:d5:52:c6:41:22:61:31:4a:e2:c4:
         ec:2c:cf:95:25:b0:c2:eb:73:2a:64:33:ce:4d:89:1c:8a:04:
         9b:83:23:9a:88:d5:33:af:aa:e6:38:d8:a3:35:48:53:9b:ce:
         3e:2a:7c:d8:22:64:69:50:88:67:db:19:96:80:f3:f0:ba:14:
         f3:34:9b:67:69:33:43:40:c4:27:57:94:d6:70:d7:99:95:8b:
         c6:db:f3:a7:98:03:e1:1d:18:69:d7:d9:37:93:5a:a5:5c:9e:
         d3:f1:4e:89:9f:33:29:5f:4e:ad:63:b6:07:43:94:fa:38:8d:
         e9:6c:a0:f9:9b:80:ec:75:80:80:af:5a:75:c8:68:bd:34:15:
         c0:b7:7b:6f:6e:be:58:98:6b:09:35:b0:c4:25:06:1f:2a:f4:
         97:f5:b3:a3:24:29:c6:50:0e:38:df:76:84:cc:04:d3:21:81:
         10:aa:95:7b:ae:0b:d2:32:4a:06:3e:c3:c7:c3:a1:3d:93:04:
         fa:77:91:a3:86:33:28:42:e2:16:c0:b3:28:ee:42:3d:b9:34:
         7f:5f:f1:1c:2d:64:aa:72:ea:b4:3c:96:84:3e:6b:0c:14:a2:
         bd:de:e5:02:c2:fc:a2:e4:67:8d:a5:d0:6c:b5:ed:a6:ac:c5:
         5b:ca:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----