Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/21B326D6129911EABFA9601BC4F9AE02.roa
File:                     21B326D6129911EABFA9601BC4F9AE02.roa (raw, json)
Hash identifier:          XEUe11ITCBm783NYMYO33g+11qKE9at+VyyLzYToDcw=
Subject key identifier:   B9:19:C6:EC:4D:32:9A:CF:74:9D:DB:E7:58:44:CF:81:3E:29:DD:4A
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0DE1
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/21B326D6129911EABFA9601BC4F9AE02.roa
Signing time:             Wed 03 Aug 2022 19:05:48 +0000
ROA not before:           Wed 03 Aug 2022 19:05:48 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     139833
IP address blocks:        2404:f4c0:f900::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3553 (0xde1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  3 19:05:48 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62eac70c-0f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:ed:b7:89:26:4b:ae:3e:c9:d6:04:d9:2c:
                    0c:3d:c0:90:2e:13:12:97:f3:7a:58:8c:2f:f0:37:
                    c0:40:4a:99:e0:d4:a2:46:76:41:cc:88:e2:b9:0b:
                    b0:44:37:7c:f6:e4:4a:57:d7:d4:3c:69:43:0b:6f:
                    c2:36:8d:eb:7f:f1:a1:8e:2f:40:fe:de:a0:13:d2:
                    7f:f5:bd:65:cf:6e:94:ae:6a:12:a9:93:b8:15:2a:
                    38:a0:e1:b7:ac:31:79:17:8d:91:dd:98:91:64:24:
                    65:27:ee:c5:92:67:7d:c2:c0:77:00:15:fa:15:90:
                    83:df:39:51:31:4b:85:7b:c4:e0:79:c3:ba:ee:66:
                    bd:50:c3:68:dc:fc:6b:4c:94:ce:d5:f5:d5:d3:11:
                    a9:b6:19:2e:f4:00:a7:12:a7:3b:48:a4:d4:dc:a8:
                    d9:5e:a3:b9:34:13:fe:3f:99:c0:67:62:29:b2:b3:
                    de:07:85:08:2c:c2:5e:0e:24:76:83:96:53:84:84:
                    2d:24:8d:3c:40:31:d4:4f:03:c6:1b:d7:ed:6e:56:
                    36:f4:b5:6a:f5:4c:67:dc:c9:8d:33:a1:84:15:40:
                    dd:3c:e3:9e:8f:51:bf:3a:34:73:ee:74:d3:9a:9f:
                    39:f0:80:d0:80:97:e1:64:65:3f:99:8f:a3:34:a2:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:C6:EC:4D:32:9A:CF:74:9D:DB:E7:58:44:CF:81:3E:29:DD:4A
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/21B326D6129911EABFA9601BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f900::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:5a:6f:9b:7f:9c:c6:d3:9f:14:73:8f:19:fb:4b:a9:96:
         16:d1:27:6b:f4:dc:0c:76:39:f7:fc:c9:ac:33:97:0b:bf:80:
         8f:6a:1c:3f:8b:87:62:43:33:5e:fe:81:d9:47:b4:68:ed:bd:
         39:73:61:4a:e8:af:15:e0:90:23:a9:57:9c:b8:6a:59:c0:52:
         e0:1e:ad:f9:bb:a9:e5:b4:12:4b:d0:76:43:07:f5:ec:a8:b5:
         00:b5:b0:34:1e:b4:a9:e9:99:91:1b:31:10:55:44:01:0b:5e:
         98:a0:64:73:e9:05:90:df:8b:b3:89:62:4c:57:f5:94:b3:35:
         61:c2:ed:c0:df:3d:f2:41:e0:ff:6d:e7:65:76:4a:61:51:ee:
         57:f2:34:25:b3:7e:c0:06:62:9d:95:88:97:68:c1:ff:e5:d4:
         45:90:13:0e:e0:11:bb:a2:d7:63:c1:10:dd:3e:dd:8b:5f:43:
         9a:8a:de:64:bc:2f:3b:0e:c7:13:4b:e2:ed:dc:af:24:12:5c:
         ee:d6:c1:4a:3f:b7:41:4a:71:9e:08:23:81:71:52:9a:e8:54:
         34:70:ce:d2:b3:48:02:56:6c:eb:8e:38:1b:f9:95:f2:0e:2f:
         c8:26:5f:f6:b0:48:da:22:5f:73:7f:df:8b:85:4d:3d:8c:2f:
         0e:b2:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----