Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/69A115E4B87D11EB853F6970C4F9AE02.roa
File:                     69A115E4B87D11EB853F6970C4F9AE02.roa (raw, json)
Hash identifier:          vE4y1Eqt9zkYAWnHha4sC2YpzLLWD3jXQ1+n1shK2Ag=
Subject key identifier:   2F:D3:E4:4C:42:AF:6D:C2:BB:25:FA:53:85:BE:CE:E0:5E:DA:3F:9B
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       02A2
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/69A115E4B87D11EB853F6970C4F9AE02.roa
Signing time:             Wed 10 Nov 2021 13:29:50 +0000
ROA not before:           Wed 10 Nov 2021 13:29:50 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     138320
IP address blocks:        116.206.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Nov 10 13:29:50 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=618bc94e-4ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:2d:8b:43:7d:6a:8e:e4:22:29:54:b9:93:
                    68:36:6b:18:1b:bf:46:57:9d:5e:00:78:9b:ea:56:
                    3b:84:2d:e3:80:fd:e8:39:2e:a0:b1:1d:03:03:d0:
                    57:cc:92:e9:c6:1c:b2:35:75:f8:e9:38:a3:4e:c9:
                    45:0b:cf:5e:90:46:2a:77:d6:2a:43:52:ce:4f:0d:
                    4d:56:75:84:39:b3:2b:46:19:19:65:28:44:fb:07:
                    df:0e:f3:d1:4b:47:35:5f:79:70:aa:5e:8a:0b:8d:
                    eb:e0:04:ce:60:4a:76:eb:0e:3e:b7:0a:92:d4:24:
                    b6:ff:eb:33:fc:16:0d:c8:5f:0e:d3:b4:06:06:20:
                    d3:58:5b:ae:ae:fa:d4:9e:fa:76:0c:31:53:d5:90:
                    31:a0:d4:01:77:58:98:e0:a5:f5:37:f4:05:e4:cc:
                    7b:bf:11:22:ac:fa:ae:7f:53:1c:74:33:cc:f2:8b:
                    3f:ef:a2:40:b4:0c:28:be:14:48:38:20:ae:d2:5e:
                    97:75:76:74:d2:b4:1a:1f:22:f0:8e:ba:a7:d4:43:
                    99:e7:a4:fa:5c:1f:85:d4:47:78:8b:79:46:38:aa:
                    76:e4:02:66:e1:4f:15:84:74:6a:c7:4b:28:a2:e9:
                    8b:35:13:d4:bb:42:e1:82:f5:86:68:28:21:6d:1c:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:E4:4C:42:AF:6D:C2:BB:25:FA:53:85:BE:CE:E0:5E:DA:3F:9B
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/69A115E4B87D11EB853F6970C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:a1:98:b1:30:83:27:5d:9e:e8:2d:2e:3b:f2:e3:9b:eb:
         bd:80:ae:73:5b:b8:c2:59:3f:86:eb:4b:80:db:4b:c9:b6:80:
         bf:79:5d:aa:d2:b9:88:95:ca:9f:d6:c0:24:4e:49:24:33:3e:
         c9:d6:13:be:18:4d:7a:2f:4e:c6:46:d9:33:c3:e4:dc:33:1a:
         54:85:f2:cd:83:5b:10:25:69:69:82:3f:a9:96:6a:e5:7a:ad:
         32:07:ca:26:d5:54:70:eb:53:b3:c4:a4:05:96:c6:c1:e7:ee:
         f6:07:ee:4e:80:f1:d3:d1:3c:2c:50:88:7d:7d:d8:fd:1c:5b:
         5d:89:80:11:93:60:76:35:ad:33:e5:b5:c5:b4:95:fe:2b:9b:
         e0:06:ef:3f:b5:30:47:fb:d2:d8:7a:e0:ff:d5:b8:f6:96:54:
         a0:31:80:98:82:28:89:cf:77:cb:e1:28:22:20:d0:89:cc:92:
         50:80:99:10:91:44:44:f5:05:24:11:d2:dc:18:25:df:7e:ef:
         7e:af:ae:4b:2a:ba:d7:8f:e0:dd:43:c0:3d:8b:be:9b:e8:3d:
         3b:20:e5:e2:e3:74:69:42:fb:ce:94:74:7e:3b:77:ed:b8:2d:
         a3:e0:05:78:c0:18:4a:67:e4:5b:3e:33:88:67:df:b1:19:fb:
         ff:c1:eb:ad
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3
M0Q1QUFGM0UwHhcNMjExMTEwMTMyOTUwWhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MThiYzk0ZS00Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bQti0N9ao7kIilUuZNoNmsYG79GV51eAHib6lY7hC3jgP3oOS6gsR0DA9BX
zJLpxhyyNXX46TijTslFC89ekEYqd9YqQ1LOTw1NVnWEObMrRhkZZShE+wffDvPR
S0c1X3lwql6KC43r4ATOYEp26w4+twqS1CS2/+sz/BYNyF8O07QGBiDTWFuurvrU
nvp2DDFT1ZAxoNQBd1iY4KX1N/QF5Mx7vxEirPquf1McdDPM8os/76JAtAwovhRI
OCCu0l6XdXZ00rQaHyLwjrqn1EOZ56T6XB+F1Ed4i3lGOKp25AJm4U8VhHRqx0so
oumLNRPUu0LhgvWGaCghbRz+YQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC/T5ExC
r23CuyX6U4W+zuBe2j+bMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB
M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvNjlBMTE1RTRC
ODdEMTFFQjg1M0Y2OTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB0zi8wDQYJKoZIhvcNAQELBQADggEBAFsToZixMIMnXZ7o
LS478uOb672ArnNbuMJZP4brS4DbS8m2gL95XarSuYiVyp/WwCROSSQzPsnWE74Y
TXovTsZG2TPD5NwzGlSF8s2DWxAlaWmCP6mWauV6rTIHyibVVHDrU7PEpAWWxsHn
7vYH7k6A8dPRPCxQiH192P0cW12JgBGTYHY1rTPltcW0lf4rm+AG7z+1MEf70th6
4P/VuPaWVKAxgJiCKInPd8vhKCIg0InMklCAmRCRRET1BSQR0twYJd9+736vrksq
uteP4N1DwD2LvpvoPTsg5eLjdGlC+86UdH47d+24LaPgBXjAGEpn5Fs+M4hn37EZ
+//B660=
-----END CERTIFICATE-----