Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
File:                     9CBB9546C2BB11EC8174106FC4F9AE02.roa (raw, json)
Hash identifier:          eLfW7poLqFOnJuHqaXlUhvtyFCsqdqA7JFx7jARu1iM=
Subject key identifier:   F4:1C:09:93:9C:37:CF:22:80:34:FE:37:C7:25:B7:E1:2A:D0:20:F6
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       026F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
Signing time:             Sat 23 Apr 2022 04:12:39 +0000
ROA not before:           Sat 23 Apr 2022 04:12:39 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     9331
IP address blocks:        150.107.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Apr 23 04:12:39 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62637cb6-7eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:b2:40:cd:84:78:a0:2d:f2:1d:d0:93:39:
                    14:88:e0:0a:15:a0:ae:f0:18:0d:f6:68:ee:6a:4f:
                    c4:7c:d7:6c:c5:3c:32:95:28:55:67:a9:7a:df:29:
                    a3:4f:f7:e1:32:59:49:17:01:5a:35:12:19:23:e0:
                    74:d0:55:c5:02:63:d9:a3:bf:5e:42:cf:3d:3a:06:
                    dc:4e:e3:56:79:af:48:aa:bb:ea:a4:b6:6f:d4:b5:
                    c9:9c:26:b0:07:f1:07:57:7e:53:e5:67:71:00:51:
                    b4:0c:7a:6c:d0:b4:e7:98:a2:3e:76:51:58:c9:0d:
                    aa:65:d5:6d:2a:8e:2f:b4:8e:61:15:bb:7e:47:31:
                    9b:c1:46:40:f5:3f:83:f4:85:a5:c7:da:e1:1c:40:
                    41:68:0f:84:08:5a:de:bf:f1:a2:6c:b6:04:5e:69:
                    5b:c4:bd:4e:28:f6:e8:4d:2b:98:77:58:be:bf:4e:
                    68:16:10:d8:d0:1b:eb:7c:a4:5f:53:7d:58:25:ba:
                    69:32:8c:71:35:ae:66:cd:09:a0:c2:57:8c:a9:12:
                    f4:e3:d7:b0:84:1f:a1:47:9e:ae:cb:cf:f8:f3:01:
                    0e:ec:71:72:ec:b4:e7:ae:a6:b3:76:cc:39:a1:93:
                    80:8c:14:2a:a4:cd:e1:8a:56:d8:ec:00:f8:a8:f3:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1C:09:93:9C:37:CF:22:80:34:FE:37:C7:25:B7:E1:2A:D0:20:F6
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9CBB9546C2BB11EC8174106FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:c0:00:71:65:75:ca:7f:ea:80:ce:ce:53:b6:2e:3e:8b:
         fd:ef:6c:8e:62:dc:81:39:35:17:3a:21:4c:d4:f2:27:83:c9:
         8f:a5:38:ec:54:9a:64:07:11:24:9c:7d:a1:ae:80:ed:2c:45:
         dd:67:26:e0:02:66:6f:09:6c:01:74:75:9c:9b:62:02:ae:e6:
         a7:00:e6:6a:f4:bc:04:bd:fd:10:91:db:c7:4e:e2:0b:64:30:
         56:6d:72:c1:af:a3:e4:3b:85:25:e3:cf:e2:49:a9:19:cb:c5:
         5c:17:70:4d:f4:08:3e:92:76:c5:75:0a:ca:36:61:3b:e7:87:
         c1:5a:6b:54:3f:9a:26:7e:8a:b6:2c:4a:a5:99:55:9c:74:d9:
         ae:ed:24:8d:bd:fa:69:fb:80:33:5c:63:52:2c:26:44:d7:49:
         8f:c4:7e:a6:4e:9e:98:ae:0e:6b:8f:cb:7d:da:05:71:dd:6d:
         04:75:eb:93:5a:84:b1:e3:f4:56:51:20:2c:42:c7:98:2c:15:
         a3:a6:73:d3:3b:bf:6a:f5:5c:5c:57:35:7a:83:22:b3:b1:58:
         74:15:cf:77:0a:4b:43:fe:7c:7e:16:ca:fe:05:8b:a4:81:e1:
         0f:c0:e2:de:c6:c6:65:fb:6e:6c:2c:0f:a5:7d:1c:63:1c:fd:
         0d:05:c3:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjIwNDIzMDQxMjM5WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjYzN2NiNi03ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRmyQM2EeKAt8h3QkzkUiOAKFaCu8BgN9mjuak/EfNdsxTwylShVZ6l63ymj
T/fhMllJFwFaNRIZI+B00FXFAmPZo79eQs89OgbcTuNWea9IqrvqpLZv1LXJnCaw
B/EHV35T5WdxAFG0DHps0LTnmKI+dlFYyQ2qZdVtKo4vtI5hFbt+RzGbwUZA9T+D
9IWlx9rhHEBBaA+ECFrev/GibLYEXmlbxL1OKPboTSuYd1i+v05oFhDY0BvrfKRf
U31YJbppMoxxNa5mzQmgwleMqRL049ewhB+hR56uy8/48wEO7HFy7LTnrqazdsw5
oZOAjBQqpM3hilbY7AD4qPOmJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPQcCZOc
N88igDT+N8clt+Eq0CD2MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvOUNCQjk1NDZD
MkJCMTFFQzgxNzQxMDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACWawAwDQYJKoZIhvcNAQELBQADggEBAHsYwABxZXXKf+qA
zs5Tti4+i/3vbI5i3IE5NRc6IUzU8ieDyY+lOOxUmmQHESScfaGugO0sRd1nJuAC
Zm8JbAF0dZybYgKu5qcA5mr0vAS9/RCR28dO4gtkMFZtcsGvo+Q7hSXjz+JJqRnL
xVwXcE30CD6SdsV1Cso2YTvnh8Faa1Q/miZ+irYsSqWZVZx02a7tJI29+mn7gDNc
Y1IsJkTXSY/EfqZOnpiuDmuPy33aBXHdbQR165NahLHj9FZRICxCx5gsFaOmc9M7
v2r1XFxXNXqDIrOxWHQVz3cKS0P+fH4Wyv4Fi6SB4Q/A4t7GxmX7bmwsD6V9HGMc
/Q0Fw8g=
-----END CERTIFICATE-----