Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/35316FFC5FFC11EDA508E32EC4F9AE02.roa
File:                     35316FFC5FFC11EDA508E32EC4F9AE02.roa (raw, json)
Hash identifier:          5HmRMJ5y862oABiIUSGJVOArZoIG/41az28q0tw6c+c=
Subject key identifier:   E6:91:44:23:48:64:4D:2A:8A:00:E6:8D:FE:E2:B9:81:7E:99:49:C7
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3B0F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/35316FFC5FFC11EDA508E32EC4F9AE02.roa
Signing time:             Wed 09 Nov 2022 08:20:32 +0000
ROA not before:           Wed 09 Nov 2022 08:20:32 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     149064
IP address blocks:        2001:df0:2040::/48 maxlen: 48
                          2001:df6:fc80::/48 maxlen: 48
                          2407:34c0::/48 maxlen: 48
                          2407:bb40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15119 (0x3b0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov  9 08:20:32 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=636b62d0-5729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:b5:ea:1e:c3:25:6b:f7:3a:70:27:a1:b0:
                    f3:ae:79:11:3d:eb:6e:a2:9f:0f:35:8e:3c:b3:63:
                    bc:4b:a6:2c:b1:77:fe:31:cf:81:e8:28:f6:68:12:
                    95:d1:3c:47:d4:4d:be:83:fd:de:09:07:61:dc:42:
                    ba:85:3a:90:ae:ae:43:92:61:1d:4b:f1:ee:9d:ba:
                    2a:ed:cc:07:c0:ec:1f:eb:ec:2f:4c:fa:1d:37:1a:
                    45:f1:22:82:1e:ff:ca:5f:83:6a:4b:fe:c3:a8:c1:
                    c5:e6:77:21:b7:e9:ce:c2:72:80:8f:bb:e8:71:dc:
                    28:b2:f5:69:09:3c:fc:0f:0f:5d:ba:59:ad:c1:a1:
                    dc:f4:4e:c2:b9:66:34:7d:60:71:cb:46:fa:c0:7b:
                    f8:6b:47:90:5d:dd:8c:e2:c2:4d:ec:ed:35:a9:0f:
                    77:3c:be:87:e3:0a:22:e9:74:81:d2:b9:d1:c2:e3:
                    71:ec:a1:b0:5c:ab:5f:38:2f:86:2d:d6:e1:7d:db:
                    5a:da:6b:ba:a1:04:97:6e:01:b0:1d:d4:7c:94:83:
                    05:7c:f6:1d:e6:b7:f8:28:78:89:a1:dc:d6:aa:f4:
                    96:e0:28:19:d9:8f:ee:d7:97:a7:8c:d8:c8:fd:6f:
                    a5:77:3c:85:1e:62:bb:1a:15:51:5a:de:ba:1b:04:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:44:23:48:64:4D:2A:8A:00:E6:8D:FE:E2:B9:81:7E:99:49:C7
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/35316FFC5FFC11EDA508E32EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2040::/48
                  2001:df6:fc80::/48
                  2407:34c0::/48
                  2407:bb40::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:02:a2:93:43:d0:65:36:eb:4d:17:91:31:ef:de:c3:ab:d8:
         85:85:9e:0e:2a:7d:01:ef:a7:e3:ca:e8:0a:c1:a1:54:46:4c:
         93:c0:59:1a:50:bc:d8:61:43:db:a7:c1:65:da:8a:36:08:19:
         8e:12:d3:57:6a:74:d3:a7:38:79:83:ef:55:f7:2b:3a:da:a5:
         e7:66:3b:eb:98:d2:33:66:a4:00:d9:5a:2e:60:a6:de:00:6f:
         18:cb:96:7c:77:cb:d2:97:bf:40:79:ed:1f:9b:17:9b:a3:a9:
         e4:f3:cc:82:3f:b5:1f:1c:05:d5:d5:4e:02:1c:09:39:f7:49:
         71:76:97:d6:07:35:1e:39:26:32:18:bb:9f:95:c1:eb:d3:67:
         d3:fa:54:0e:85:71:4f:01:b7:2b:73:f0:c6:f3:15:35:b9:a8:
         c1:e4:cf:ef:c5:d8:5f:58:10:52:75:33:e5:47:ba:e2:b2:15:
         54:f5:1a:ae:c7:52:18:12:c5:19:bb:fd:ff:a3:a4:cf:2d:7a:
         a8:2a:04:51:50:5e:fb:5d:5c:41:35:da:2c:ac:c3:85:e5:b5:
         12:98:1b:55:a3:88:0c:ee:3c:09:2c:8a:47:b5:23:74:75:1e:
         f8:05:ef:65:46:b3:ac:ab:87:23:4f:04:57:8d:67:cc:91:b4:
         5d:da:e4:5c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICOw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjIxMTA5MDgyMDMyWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZiNjJkMC01NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Xm16h7DJWv3OnAnobDzrnkRPetuop8PNY48s2O8S6YssXf+Mc+B6Cj2aBKV
0TxH1E2+g/3eCQdh3EK6hTqQrq5DkmEdS/Hunboq7cwHwOwf6+wvTPodNxpF8SKC
Hv/KX4NqS/7DqMHF5ncht+nOwnKAj7vocdwosvVpCTz8Dw9dulmtwaHc9E7CuWY0
fWBxy0b6wHv4a0eQXd2M4sJN7O01qQ93PL6H4woi6XSB0rnRwuNx7KGwXKtfOC+G
Ldbhfdta2mu6oQSXbgGwHdR8lIMFfPYd5rf4KHiJodzWqvSW4CgZ2Y/u15enjNjI
/W+ldzyFHmK7GhVRWt66GwROAQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOaRRCNI
ZE0qigDmjf7iuYF+mUnHMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzUzMTZGRkM1
RkZDMTFFREE1MDhFMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgACMCQDBwAgAQ3wIEADBwAgAQ32/IADBwAkBzTAAAADBwAkB7tAAAAw
DQYJKoZIhvcNAQELBQADggEBABQCopND0GU2600XkTHv3sOr2IWFng4qfQHvp+PK
6ArBoVRGTJPAWRpQvNhhQ9unwWXaijYIGY4S01dqdNOnOHmD71X3KzrapedmO+uY
0jNmpADZWi5gpt4AbxjLlnx3y9KXv0B57R+bF5ujqeTzzII/tR8cBdXVTgIcCTn3
SXF2l9YHNR45JjIYu5+VwevTZ9P6VA6FcU8Btytz8MbzFTW5qMHkz+/F2F9YEFJ1
M+VHuuKyFVT1Gq7HUhgSxRm7/f+jpM8teqgqBFFQXvtdXEE12iysw4XltRKYG1Wj
iAzuPAksike1I3R1HvgF72VGs6yrhyNPBFeNZ8yRtF3a5Fw=
-----END CERTIFICATE-----