Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3C4522EE9ED11EBA7E58E66C4F9AE02.roa
File:                     C3C4522EE9ED11EBA7E58E66C4F9AE02.roa (raw, json)
Hash identifier:          kGKScqgTg7OIXM1XJ4qmnVc8YHnwYkInkYyHyQVlcDM=
Subject key identifier:   33:5B:03:7F:EE:73:3B:59:A0:C9:52:60:F5:94:F1:57:BB:48:3D:C7
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0DF6
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3C4522EE9ED11EBA7E58E66C4F9AE02.roa
Signing time:             Wed 03 Aug 2022 19:06:10 +0000
ROA not before:           Wed 03 Aug 2022 19:06:09 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     208753
IP address blocks:        2404:f4c0:fc20::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3574 (0xdf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  3 19:06:09 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62eac721-7e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:45:d2:7e:66:78:8e:03:55:8b:01:a1:d4:
                    fa:a7:f7:4d:92:5c:2b:47:f7:c6:32:ed:a2:30:5e:
                    bf:c7:86:c1:8a:f4:54:63:e1:23:a3:55:9e:6a:c2:
                    7d:e2:68:ec:cc:a7:75:08:e1:57:a5:8c:08:f7:bd:
                    59:e4:8e:6a:5b:3e:91:b5:5f:f0:cd:36:d9:2e:fe:
                    ea:d4:a3:97:64:a2:da:d3:be:e7:1d:5f:5e:36:c7:
                    f6:85:bf:61:18:05:61:97:b3:f5:92:fa:19:a1:83:
                    e1:1d:65:b1:91:ba:97:91:57:62:d2:d1:79:72:44:
                    23:22:cd:de:56:ef:3b:c5:68:8a:51:3d:65:a9:7c:
                    09:9f:ae:c5:d6:2f:f0:d8:24:a7:50:d1:7d:10:8e:
                    7a:7c:7a:ae:97:e2:37:7b:c1:a7:86:3d:06:ae:3c:
                    49:7e:71:0b:6b:5f:78:fe:8c:f0:40:d4:33:60:4d:
                    fc:ef:a2:fa:43:0a:ce:7c:e3:34:0b:fc:8c:34:71:
                    4d:a0:9d:24:fa:33:bb:e0:41:16:bc:37:af:7f:2f:
                    82:93:ac:28:fb:38:ff:06:63:c4:97:21:48:f9:7a:
                    cf:5c:59:32:24:37:79:a2:ef:93:88:4c:70:76:9b:
                    bf:77:66:e6:96:47:6b:45:74:35:26:26:97:c9:e0:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5B:03:7F:EE:73:3B:59:A0:C9:52:60:F5:94:F1:57:BB:48:3D:C7
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C3C4522EE9ED11EBA7E58E66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:fc20::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:b2:2d:1b:be:aa:a0:44:4c:8a:be:82:e0:4b:f1:09:27:25:
         44:49:eb:ce:aa:5c:95:42:57:a5:e6:83:d5:a2:db:cd:30:06:
         f1:84:3d:c7:5d:c2:5b:91:b9:41:16:ac:5a:12:ac:50:16:ee:
         14:ae:ae:0c:57:d5:75:bd:da:0b:97:f2:ab:bc:0a:66:f6:1b:
         9e:bc:53:20:39:84:c6:5d:0f:51:81:59:41:12:99:37:8b:99:
         b8:23:75:7b:e8:27:76:ae:df:60:20:3d:ba:cd:a8:47:97:34:
         cf:af:51:64:57:ff:71:50:19:f8:ee:88:fa:06:b4:df:cf:a3:
         52:31:d1:9a:f9:a6:22:1b:07:cf:53:94:98:21:08:a1:01:3f:
         1a:e9:40:7b:50:ff:92:10:14:2c:9f:fe:04:3a:db:30:b4:4e:
         66:40:59:32:8f:24:fe:c1:b7:87:4d:f3:19:10:bf:1e:a9:45:
         f1:c2:93:03:13:e1:1a:2c:0c:6b:15:71:5d:29:0d:c2:5f:bf:
         d0:16:be:14:16:8b:f8:b9:d8:1d:ff:cc:95:44:80:0e:d4:7f:
         3a:56:42:32:73:6a:64:2f:c3:5e:8e:32:65:94:90:55:4d:23:
         aa:88:65:14:90:5a:bf:a8:76:73:ba:f2:30:9c:f5:6a:13:4c:
         30:3c:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----