Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/3C3940F07FB011EB92379937C4F9AE02.roa
File:                     3C3940F07FB011EB92379937C4F9AE02.roa (raw, json)
Hash identifier:          yB3lzsxIO0n6y/aJzQ1E9PxbPdwPSulbCRE2bgtVNu4=
Subject key identifier:   DF:B4:7E:11:7F:A5:10:66:DA:7B:9D:79:16:94:5A:77:48:11:E9:8C
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       0362
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/3C3940F07FB011EB92379937C4F9AE02.roa
Signing time:             Tue 03 May 2022 13:50:56 +0000
ROA not before:           Tue 03 May 2022 13:50:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140637
IP address blocks:        163.47.92.0/22 maxlen: 24
                          2400:cc00:3000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: May  3 13:50:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62713340-0659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:39:04:07:68:86:13:df:09:0c:c4:db:68:
                    8c:15:11:e0:09:d9:57:90:15:0b:6e:3e:28:25:f3:
                    af:a2:d3:7b:d4:57:e0:e1:c3:58:88:f8:c9:20:2f:
                    73:ac:12:b6:a1:83:ca:f1:96:03:31:96:1f:ee:6a:
                    1d:42:8b:52:fa:a1:e6:24:28:08:0f:ee:54:8d:9b:
                    08:51:81:20:8f:20:8e:1f:f1:6a:a2:e6:24:64:8d:
                    a2:81:50:95:c8:05:f7:a7:33:54:43:c3:49:2f:4a:
                    30:bb:09:7f:c3:53:33:41:00:f4:73:cd:47:f6:98:
                    fa:bb:6d:c0:8c:51:90:56:87:ae:b2:09:05:94:fc:
                    f5:f6:7d:6d:16:4b:33:5a:50:1f:5a:35:7d:48:d0:
                    45:28:d0:97:91:0e:08:01:60:f1:96:61:3d:70:1a:
                    19:16:09:1b:32:38:1c:d3:2e:58:92:85:78:e2:60:
                    50:c0:ec:f5:a8:8a:81:20:07:75:5b:ff:68:5a:3f:
                    d8:d8:b5:4e:ab:12:ce:bb:7b:31:73:7a:69:7c:85:
                    9d:b1:61:7f:d7:62:9d:63:c2:46:b1:bb:7f:2f:6c:
                    c0:0a:c0:1a:7a:10:1f:52:36:76:44:65:f5:c4:08:
                    69:c9:85:ab:02:b8:16:26:73:49:32:6f:92:46:a9:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:7E:11:7F:A5:10:66:DA:7B:9D:79:16:94:5A:77:48:11:E9:8C
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/3C3940F07FB011EB92379937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.92.0/22
                IPv6:
                  2400:cc00:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:89:25:f1:77:56:98:95:36:5e:bf:52:01:6d:a6:6c:c9:62:
         ae:ce:ed:a1:d2:b6:9c:1a:f9:93:d5:f7:fb:11:1d:79:ea:78:
         55:ca:2e:c9:e2:f6:85:99:66:38:c5:f4:a2:a7:75:2b:6e:76:
         67:1d:46:95:23:6f:55:06:bc:6b:8a:0c:49:f1:2f:cc:92:90:
         49:3b:b2:be:aa:9e:cb:61:47:a6:71:07:bc:00:e5:db:35:ac:
         29:bf:47:78:84:e9:91:9c:34:56:e4:b6:04:83:5f:e2:3c:21:
         9d:24:11:4f:fd:b5:9d:fc:b2:ae:82:7c:e7:12:fb:1f:38:4b:
         41:3c:87:3c:d7:76:cb:4e:51:0e:df:d8:e0:21:fa:40:06:0e:
         30:4b:aa:b5:9c:d3:e4:dd:ce:60:b8:79:d7:7a:a6:7d:2f:ab:
         4e:8d:d8:ea:72:70:6f:74:f7:2b:db:16:1c:34:53:38:0b:7d:
         2c:9a:92:f3:69:fa:61:de:10:f1:00:33:16:74:31:26:ea:ac:
         13:e7:da:ac:ab:95:9e:68:40:43:8b:0b:7e:9b:d9:38:0c:9e:
         c5:ed:58:4f:1b:c3:3f:b2:92:e2:0d:22:0c:92:6e:38:31:09:
         16:f9:80:cf:03:1e:be:1b:92:90:73:c0:32:07:8e:18:3f:8b:
         de:7b:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----