Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
File:                     89CBC0AEE13B11EAACE94567C4F9AE02.roa (raw, json)
Hash identifier:          bRDyJEQKEqWHcwfgp40CE+QkJW/ochpXhG7HH2fCCjo=
Subject key identifier:   8D:0B:28:83:1F:71:C6:02:68:CC:91:5E:E3:FD:75:36:49:21:73:9D
Certificate issuer:       /CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
Certificate serial:       0704
Authority key identifier: 0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
Signing time:             Mon 04 Apr 2022 21:47:44 +0000
ROA not before:           Mon 04 Apr 2022 21:47:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140305
IP address blocks:        2001:df3:2e80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
        Validity
            Not Before: Apr  4 21:47:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=624b6780-e0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:ce:b4:5b:91:84:6c:97:91:12:53:f8:53:
                    6b:6b:ab:d0:63:c3:70:8b:e4:1e:3a:f3:08:c0:2f:
                    41:18:5e:88:4c:52:4b:15:da:b2:79:0b:39:59:1f:
                    fa:ae:db:9b:3a:0a:57:74:fa:13:77:7a:18:8a:93:
                    12:33:39:2c:51:59:1c:9e:cc:07:ef:f7:3f:44:16:
                    5e:01:86:29:81:af:26:fa:53:ae:0b:f2:00:92:ae:
                    0a:a3:4b:49:51:00:fd:2d:e5:77:57:65:be:f1:e0:
                    ab:58:03:bb:2e:7d:1a:b8:59:9e:8b:30:1c:c1:c0:
                    e8:89:9f:fb:30:1d:4c:71:3a:f8:ef:d2:f8:27:6c:
                    bd:3c:90:ee:27:6e:e6:f6:25:30:d0:ac:15:fe:88:
                    4c:a5:4f:89:65:c0:e6:5e:54:97:ef:28:be:92:14:
                    38:c8:71:fe:3e:a9:07:46:e4:61:5e:74:7c:85:99:
                    98:1f:df:5a:1c:48:72:f3:19:16:8b:c4:b8:05:f4:
                    81:37:dd:7a:61:c2:83:2c:49:3b:45:20:95:01:df:
                    5c:8e:e5:66:90:95:83:eb:04:04:7a:99:1f:9e:08:
                    3b:78:98:c3:1b:9e:c8:b4:58:99:1f:48:89:6e:33:
                    9a:43:75:8a:ae:d9:e2:62:26:49:9d:c7:e8:c5:8b:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:28:83:1F:71:C6:02:68:CC:91:5E:E3:FD:75:36:49:21:73:9D
            X509v3 Authority Key Identifier:
                keyid:0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/CkTNg8CQGlZ_xywZEmYXiBpHoSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/89CBC0AEE13B11EAACE94567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:ee:97:8f:6f:04:52:19:c3:eb:b3:bc:0d:6c:8a:e2:aa:
         51:4c:4e:c0:a0:ea:32:58:fd:e8:04:c5:16:80:25:82:5a:eb:
         5b:a6:aa:16:2b:8a:0f:8c:45:bb:bc:ad:e1:6d:f7:ca:af:5a:
         83:47:2d:6b:96:43:e5:95:2d:4f:d8:bd:7d:6b:5a:72:2f:6c:
         e9:df:73:e2:95:b1:71:24:30:f3:5f:81:fb:4e:48:3e:e2:a9:
         68:70:06:0e:92:d4:bc:de:91:d2:08:a6:e1:34:f6:6a:5c:34:
         42:3a:81:d5:90:28:5e:5e:fe:56:d4:23:2c:1e:42:52:7c:e1:
         65:b9:2c:1a:a8:79:7e:7d:bc:9f:6a:45:42:c6:44:b9:26:7b:
         ce:ef:ac:d9:c7:d5:df:1a:5b:71:3e:09:8c:bc:e7:3a:ac:5f:
         01:32:50:59:ae:99:09:ea:2b:c8:a0:79:e9:4f:83:a6:c7:27:
         78:23:27:c6:a8:32:93:61:1a:40:09:04:04:77:a1:ff:28:31:
         40:cd:65:4f:48:a9:d1:8f:71:e1:ba:19:e1:9c:bd:35:0d:d3:
         95:2b:67:71:3c:9a:58:02:39:48:5f:70:a2:5a:a1:be:3f:73:
         8d:47:74:d6:23:31:d9:00:a0:38:88:37:4b:d6:72:73:c8:85:
         5c:33:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----