Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B292DD4AFA1E11EBBBACAE53C4F9AE02.roa
File:                     B292DD4AFA1E11EBBBACAE53C4F9AE02.roa (raw, json)
Hash identifier:          KVSMufAD797npwgX1Rn2RIHVY3jk+HEyvtqm9yQALMA=
Subject key identifier:   9E:85:FF:0E:C5:1B:C7:FD:B4:A9:38:1D:14:BF:03:71:ED:0A:01:28
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0AB6
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B292DD4AFA1E11EBBBACAE53C4F9AE02.roa
Signing time:             Tue 10 Aug 2021 21:05:32 +0000
ROA not before:           Tue 10 Aug 2021 21:05:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     211843
IP address blocks:        2404:f4c0:e666::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 10 21:05:32 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6112ea1c-3651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:09:f7:a9:97:c6:a8:db:81:2e:c4:97:01:
                    df:88:6f:89:d9:5a:da:56:bf:f8:5f:33:91:f0:65:
                    34:1b:c4:93:53:b6:f5:07:b1:a5:9a:46:18:0e:60:
                    9a:e6:31:f5:02:7c:0a:14:37:70:57:17:e7:a2:03:
                    b6:08:54:6f:62:0e:70:2b:59:20:a6:b4:9b:58:e8:
                    1d:72:dd:91:f9:2b:ff:83:2d:9c:81:a1:7b:ee:16:
                    20:ce:1d:ee:c0:3b:c2:99:f7:18:19:b2:ec:5e:b8:
                    e0:04:29:80:5d:e4:e1:30:0b:32:75:b2:b5:6f:ae:
                    51:23:da:bd:ca:a0:42:6b:cb:c5:a1:23:83:b5:47:
                    46:59:88:2c:94:4c:de:36:67:61:92:32:92:92:37:
                    7f:3b:42:a3:99:20:60:26:59:25:c6:be:ea:da:76:
                    f3:e8:22:05:41:d0:80:df:cb:8d:24:cc:d5:34:a2:
                    94:4c:61:4e:62:b6:62:fc:d6:fb:6e:ab:88:9e:73:
                    b9:fb:78:fc:ee:1e:f3:30:bf:f7:ec:bf:f0:77:60:
                    54:ed:f0:ed:f2:de:d0:cc:ba:91:d0:9a:62:e7:2d:
                    d5:ba:09:a6:4c:c8:7c:f9:b8:66:36:95:ee:39:f3:
                    0d:bc:ee:64:79:e4:6e:51:ee:c5:b3:61:bc:37:db:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:FF:0E:C5:1B:C7:FD:B4:A9:38:1D:14:BF:03:71:ED:0A:01:28
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B292DD4AFA1E11EBBBACAE53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:e666::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:26:6c:7c:ee:36:42:bb:b9:04:92:f5:94:e3:37:f1:c9:6f:
         e5:93:d3:ef:e7:78:0a:1e:6f:ef:c3:24:f6:e3:55:3b:2c:b9:
         10:f1:74:f1:79:89:5a:d4:78:da:9a:98:a3:35:ca:94:44:63:
         a5:ac:64:7d:57:17:cb:01:80:8f:2e:6e:e7:96:e0:d8:72:3a:
         8c:87:33:f1:88:70:9a:a0:b0:09:82:0e:0c:9f:35:1e:33:7b:
         95:7f:63:a7:d9:ca:af:41:d7:2b:5f:08:a8:16:52:4d:36:4c:
         a7:e0:f2:05:b4:c0:36:8e:13:d6:72:b2:3b:68:fd:c3:a4:37:
         d7:0a:27:e4:2b:25:fe:62:d1:dc:f0:0f:36:2c:cc:12:74:e8:
         b3:1a:16:70:0d:b6:91:5f:e1:cf:0a:16:94:58:2c:b2:ba:fe:
         26:5f:58:72:a0:9f:13:6a:0d:08:fe:02:16:e2:08:8c:a8:49:
         d8:17:2c:99:b4:c2:d5:24:0c:45:75:fb:5b:92:c9:2d:c8:2a:
         f5:6a:40:20:dd:04:60:f6:f9:6f:b5:9c:84:31:d6:33:99:da:
         d4:82:4f:6c:cc:a3:d4:c3:27:92:50:6e:3c:02:47:bb:ed:90:
         e4:d9:9b:4c:38:1a:ed:44:9b:6c:59:e7:c8:1b:ce:5a:3f:7a:
         83:60:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----