Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/F6973F686EDF11ED9761455AC4F9AE02.roa
File:                     F6973F686EDF11ED9761455AC4F9AE02.roa (raw, json)
Hash identifier:          a2BjCY8UTloystCSd9gwbcQSi5nooE5g70YRniVCTb0=
Subject key identifier:   0F:39:3D:FF:BF:8F:5D:E0:22:A9:86:4C:52:01:FE:B5:81:51:78:18
Certificate issuer:       /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial:       0B93
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/F6973F686EDF11ED9761455AC4F9AE02.roa
Signing time:             Tue 24 Jan 2023 19:46:16 +0000
ROA not before:           Tue 24 Jan 2023 19:46:16 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     64075
IP address blocks:        202.181.17.0/24 maxlen: 24
                          2404:2980::/32 maxlen: 32
                          2404:2980::/48 maxlen: 48
                          2404:2980:1::/48 maxlen: 48
                          2404:2980:2::/48 maxlen: 48
                          2404:2980:3::/48 maxlen: 48
                          2404:2980:4::/48 maxlen: 48
                          2404:2980:5::/48 maxlen: 48
                          2404:2980:6::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA28B
        Validity
            Not Before: Jan 24 19:46:16 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63d03588-3c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:08:ff:a3:a0:65:81:e9:99:f6:4e:88:15:
                    6c:6e:f5:07:fd:85:8b:60:ad:4c:40:14:c5:9c:f9:
                    42:d8:3b:b2:b1:aa:6a:cc:81:4d:af:27:80:39:32:
                    a0:2b:8e:de:d8:93:91:ce:ad:5f:38:9d:3e:5a:88:
                    87:1a:bd:d6:31:78:58:b2:e5:35:0b:e2:a2:70:60:
                    92:fe:91:16:e9:ef:98:a6:a7:41:dc:dc:a5:91:2d:
                    6e:35:2f:10:c3:3e:c3:de:fe:dd:ac:37:6d:03:ca:
                    7d:1f:83:84:0c:8a:60:9b:6f:76:0d:7d:a9:49:32:
                    19:f9:73:7a:26:a8:f5:8b:b4:23:de:72:79:63:40:
                    00:d3:8d:0d:d3:42:b3:e6:b4:bd:e6:90:c3:fc:04:
                    1a:07:5f:63:a4:84:c2:f7:35:4e:58:e0:44:64:de:
                    80:50:b0:bc:1b:34:ce:52:ca:20:10:93:af:a2:d2:
                    fc:67:32:72:58:be:d2:70:31:f2:40:92:43:14:31:
                    6f:07:07:48:4e:20:f3:1c:ba:f7:30:83:bc:39:d7:
                    34:ef:20:84:58:9b:fa:6e:d9:af:ed:f4:d1:ac:4c:
                    c4:79:9e:75:16:31:55:47:64:71:3c:50:eb:8a:b0:
                    54:f2:d8:e5:4c:62:c7:39:3a:4c:db:3c:42:8c:80:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:3D:FF:BF:8F:5D:E0:22:A9:86:4C:52:01:FE:B5:81:51:78:18
            X509v3 Authority Key Identifier:
                keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/F6973F686EDF11ED9761455AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.17.0/24
                IPv6:
                  2404:2980::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:d2:04:3e:d8:e6:97:d6:6a:7e:32:8c:56:5f:84:56:31:
         d6:04:97:00:57:d1:ca:cc:06:75:ac:4b:3d:d4:01:5e:01:2d:
         31:c2:d5:4c:6f:52:eb:e5:32:eb:7b:4d:08:6f:1b:eb:4b:58:
         79:de:16:3e:db:47:91:16:d8:6b:39:4e:32:47:3e:9c:d8:4a:
         1e:3c:db:5c:c0:88:64:83:16:a6:dc:4b:79:00:a1:14:54:9a:
         c8:fe:2a:67:99:09:19:7a:de:a6:e7:26:29:0c:e3:01:fe:94:
         e9:3c:55:22:5b:b4:49:0a:cb:85:c7:87:f8:38:70:b4:6d:8a:
         04:fa:34:38:0f:ce:6d:0e:8d:26:d1:7b:d8:3c:f8:a6:65:24:
         1a:19:f2:78:68:0c:b2:de:de:42:0d:f0:b2:7b:6c:ff:c7:63:
         df:e2:e6:62:73:0e:c7:d5:b9:9e:04:72:53:06:26:da:17:0f:
         0f:21:a7:99:07:a2:a0:52:c7:99:81:55:63:d5:f7:0a:47:39:
         1e:81:c2:2f:51:31:4e:dd:10:2f:72:01:a9:6e:a4:d2:74:dc:
         f2:70:d0:18:12:83:f4:db:2a:9d:86:9c:34:55:87:58:df:9a:
         3b:96:f1:26:72:3f:55:78:5b:5e:60:38:f3:4d:f0:e8:a3:74:
         02:94:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----