Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F0DB4498607311EA97A74D41C4F9AE02.roa
File:                     F0DB4498607311EA97A74D41C4F9AE02.roa (raw, json)
Hash identifier:          62+ngtAT3p1NxS/CHqJRLvz/KFjbesZtio2FyCCzDQc=
Subject key identifier:   0F:41:84:84:AC:5A:6D:C5:5A:C1:2E:23:81:BA:6D:82:35:5E:AE:EF
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0A83
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F0DB4498607311EA97A74D41C4F9AE02.roa
Signing time:             Sun 08 Aug 2021 07:15:01 +0000
ROA not before:           Sun 08 Aug 2021 07:15:01 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     138211
IP address blocks:        2404:f4c0:e010::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  8 07:15:01 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=610f8475-ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:47:a0:89:4a:e1:69:92:0e:f0:c6:5b:95:
                    54:08:6a:fb:2b:53:38:10:88:1d:39:b3:a4:8b:6f:
                    2e:9d:74:a7:e9:13:a1:a0:93:49:99:bb:17:87:62:
                    7c:92:6a:38:04:cf:7c:5b:b0:73:c9:c1:15:94:4e:
                    36:9d:33:a1:cd:60:32:4e:5e:60:8b:ee:53:63:46:
                    14:d7:b9:14:d5:f9:f0:bd:3e:b4:0e:a1:f7:f6:d5:
                    e0:e5:7f:20:a2:0b:2c:9f:e6:85:f2:a7:58:41:a6:
                    6b:cb:06:99:3b:3c:86:3c:21:bf:72:3f:04:bf:5a:
                    e2:cb:e1:70:85:48:91:6b:0b:25:8a:aa:4b:75:c2:
                    37:9a:2c:c9:da:f4:13:bc:45:74:bc:ec:82:67:8a:
                    7c:3c:5c:95:bf:19:3e:70:18:11:32:da:d4:fb:d3:
                    89:7c:21:01:45:19:b0:4a:31:a0:78:ce:29:62:8b:
                    df:ea:99:1f:1d:03:62:61:8c:4a:c7:51:39:2d:ee:
                    7a:a9:59:95:17:c5:0d:b1:23:17:08:0d:11:cf:1d:
                    b9:64:69:c5:96:ed:50:86:b4:1a:ba:8b:39:01:dc:
                    98:36:17:9e:d0:dc:de:c0:76:80:dc:43:a7:9c:b6:
                    68:f4:74:b0:f0:fd:89:53:56:3f:39:40:70:79:b3:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:84:84:AC:5A:6D:C5:5A:C1:2E:23:81:BA:6D:82:35:5E:AE:EF
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F0DB4498607311EA97A74D41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:e010::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:40:8e:82:eb:56:79:3c:db:48:67:6e:2f:d0:b1:c0:65:8c:
         8c:8a:54:0e:d0:50:b8:a3:46:6c:aa:18:41:36:8e:19:17:26:
         0e:29:99:b4:a8:4d:5a:d2:07:a8:aa:f0:5c:7e:18:93:f9:37:
         0a:93:9c:dd:6c:5d:ff:db:c4:52:8e:a1:e5:5b:80:54:7c:cf:
         28:d6:ee:c2:1d:cf:29:69:e9:26:06:3e:41:e7:44:30:fc:8b:
         ed:ba:a4:3f:10:73:f0:c3:eb:df:e4:78:a0:9d:e2:b2:d9:d0:
         7d:d1:b9:78:5a:80:fa:66:91:7a:de:03:17:ac:8c:d9:58:5e:
         5f:da:a2:7e:a3:b7:be:fa:17:6a:be:0e:f5:76:6a:78:21:5f:
         4a:ff:e8:a1:7d:87:f9:40:6f:06:ad:7f:6b:55:73:97:60:0d:
         45:3e:86:f5:b3:3c:1c:39:88:59:c8:46:95:97:fc:fc:1b:fe:
         da:43:25:5d:32:36:3d:fd:7a:0b:27:9a:b5:41:2a:b3:7a:f9:
         5d:f2:63:62:e5:71:94:e7:32:97:c3:56:75:4e:27:8c:43:1e:
         e9:ad:12:f6:e7:b6:20:05:38:ed:b8:bf:0f:e6:f6:6b:ac:7d:
         96:77:e0:d6:5a:7e:1f:b8:e5:1a:67:68:57:a2:7f:9a:95:56:
         e4:39:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----