Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/7C771EB4F22911E9A86FCC63C4F9AE02.roa
File:                     7C771EB4F22911E9A86FCC63C4F9AE02.roa (raw, json)
Hash identifier:          S6JmrIusp6c737pjktjzrd+CrIgol6zJFK9diutZ1Wo=
Subject key identifier:   7C:F9:00:44:D8:45:46:37:56:98:C5:EA:BC:1F:55:9D:C0:C5:08:54
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0A8F
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/7C771EB4F22911E9A86FCC63C4F9AE02.roa
Signing time:             Sun 08 Aug 2021 07:15:14 +0000
ROA not before:           Sun 08 Aug 2021 07:15:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     139328
IP address blocks:        2404:f4c0:f600::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  8 07:15:14 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=610f8482-7a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:92:28:15:d4:0f:ad:b7:8e:85:1b:1b:d8:
                    ef:73:e5:d7:73:e4:2b:c4:0e:99:9d:e2:9b:ee:06:
                    99:c8:67:4d:f0:d5:68:56:57:e5:68:62:fc:a7:6a:
                    95:c6:af:3c:20:f6:b4:15:56:eb:59:31:9d:dd:0e:
                    a5:e9:2f:a1:c8:1a:37:3e:72:d8:b3:27:44:59:47:
                    c5:36:52:e5:8d:a4:ca:27:94:37:30:68:45:1b:49:
                    06:4e:aa:35:07:06:60:77:fa:4c:b5:95:2c:da:82:
                    1d:04:83:87:15:c1:2c:46:74:78:26:33:18:72:2b:
                    98:22:f6:26:7a:97:0a:aa:df:bb:f1:c1:66:6b:d8:
                    be:aa:7f:4a:a7:38:46:38:1a:38:1a:9a:70:9c:b7:
                    fe:f9:ef:a8:4c:97:4d:3b:47:80:70:ed:0a:7f:6a:
                    5d:ec:99:25:b2:5c:1a:d1:8f:db:87:2e:67:b7:58:
                    bc:a1:a4:e7:a7:34:f0:e3:ee:a3:70:f6:0a:85:4c:
                    d2:8c:eb:47:e9:11:e9:6c:48:19:9d:b7:55:17:26:
                    ad:09:a3:53:1a:60:b2:af:42:86:0e:32:05:93:21:
                    f1:77:7e:6f:31:e1:e1:71:12:ce:04:ef:bb:66:61:
                    1b:f5:7c:e5:d0:09:c0:6b:ab:56:eb:19:d3:e8:a2:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:00:44:D8:45:46:37:56:98:C5:EA:BC:1F:55:9D:C0:C5:08:54
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/7C771EB4F22911E9A86FCC63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:4f:48:c9:ab:ee:66:fc:6f:33:c9:92:22:fc:80:33:4d:a7:
         09:15:79:88:a0:96:1d:ac:7c:56:9c:b8:ee:2f:d6:57:a1:fd:
         4a:df:74:1f:78:f9:23:66:9f:72:c7:64:bb:5c:93:d5:f7:0a:
         b8:76:bf:48:ee:89:c7:4c:fe:3d:5a:ac:1c:07:d5:48:68:54:
         56:ed:8e:97:83:e7:d3:3b:51:f5:42:a0:70:c2:76:26:eb:ba:
         ec:6f:90:6b:8c:4a:a4:5e:bb:54:32:eb:ea:2d:b6:1f:76:64:
         f1:03:7a:ec:51:13:32:d5:b9:cc:00:68:d4:3c:e2:cc:1e:78:
         36:d7:21:82:29:62:a9:b9:4b:b9:ec:64:46:9e:b5:e1:29:d1:
         f0:af:3f:d7:5c:9e:f8:5d:44:8a:2e:32:f4:39:c7:4d:33:40:
         af:bf:f8:09:ad:95:aa:c0:3f:74:f5:3d:d8:65:f3:3e:d5:29:
         68:11:59:ae:fa:d3:df:e1:51:bc:6b:33:5b:64:a4:dc:2c:f1:
         7f:67:2b:d3:dd:1e:db:6f:eb:10:48:ea:05:f1:e5:06:db:78:
         dd:fb:65:12:8c:09:09:80:dd:ad:da:27:10:e3:ea:ad:03:b7:
         9f:0c:a7:22:d3:ee:f5:56:e8:48:9d:f2:e4:29:1e:1d:1a:48:
         5a:5a:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----