Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
File:                     4B24492A9BE211EDA44C435CC4F9AE02.roa (raw, json)
Hash identifier:          jLeCdOvCT0YWDa76Bu36KAxzIE7/89ek8yRkoHjKTgw=
Subject key identifier:   E5:18:CE:79:1E:E8:21:82:1C:2D:AB:DA:B7:E6:04:D9:17:8C:FB:86
Certificate issuer:       /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial:       0AF0
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
Signing time:             Tue 24 Jan 2023 12:26:14 +0000
ROA not before:           Tue 24 Jan 2023 12:26:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150731
IP address blocks:        182.161.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2800 (0xaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
        Validity
            Not Before: Jan 24 12:26:14 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63cfce66-f6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:3b:19:8a:57:3d:2e:0d:0a:8d:81:5e:76:
                    c9:c7:f6:0c:24:d9:2c:8c:06:85:fa:cc:3d:92:18:
                    36:ce:fb:c1:5c:70:c7:b5:71:ae:d4:f2:90:ec:9e:
                    b4:de:22:2c:cf:11:9c:9d:d7:74:04:87:ff:92:49:
                    53:d9:bb:85:a4:47:60:3e:d5:11:6d:cc:3c:b3:8d:
                    eb:d2:2f:fe:aa:f6:6f:ce:23:2a:12:f8:7f:4a:6d:
                    92:6c:78:b6:40:cf:90:af:bc:7d:d8:90:db:1c:b2:
                    e2:0d:7e:59:f0:72:79:ed:4f:83:71:8d:8a:5c:e2:
                    66:74:df:eb:0d:6a:7c:bc:3c:8c:84:59:58:fc:a1:
                    19:7f:c8:81:b5:1b:a1:ae:e3:8a:fc:ce:5f:2a:b5:
                    57:8b:9d:e5:6e:74:b4:b5:85:9f:ae:af:a7:50:7e:
                    f6:f1:f0:4d:36:59:24:21:05:09:a3:e3:f5:16:6a:
                    61:10:79:fd:86:48:5e:b4:2d:6d:e8:b9:17:d8:f3:
                    82:f1:bc:3a:81:47:11:03:e5:27:a5:26:21:a0:df:
                    e7:d4:80:f6:5c:22:bb:97:41:dc:30:23:34:04:0c:
                    de:2d:aa:ef:ce:e2:ef:34:0e:ee:d9:5a:d7:b0:df:
                    50:ab:40:58:87:1a:6a:2d:7e:7c:44:7a:ec:dd:11:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:18:CE:79:1E:E8:21:82:1C:2D:AB:DA:B7:E6:04:D9:17:8C:FB:86
            X509v3 Authority Key Identifier:
                keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.161.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:ce:03:c9:6e:f3:03:ca:0a:54:28:76:f4:2a:ef:04:91:6d:
         d0:e8:32:c7:36:89:0a:04:52:50:8e:73:0b:d7:bf:c9:28:64:
         04:72:19:49:3e:42:85:84:62:be:56:a5:f9:95:a6:c4:17:f8:
         bb:15:54:b3:e4:8d:4b:cd:b5:b2:64:92:50:ba:94:63:ca:07:
         df:ed:1e:cb:a6:3c:b6:bd:25:47:a2:ee:b8:9c:e1:60:d5:61:
         1f:f1:ac:85:f6:35:08:c2:18:fa:70:c9:a0:d7:f6:11:a6:be:
         9a:96:eb:41:b7:04:c7:4c:86:5a:94:23:75:0a:9f:ce:65:a4:
         92:df:cb:a2:0e:83:7c:45:eb:82:bf:22:db:39:1b:e4:92:b1:
         bd:a7:d0:53:f1:03:9d:c8:51:97:71:aa:93:c9:cc:f9:5d:29:
         cb:1b:64:dc:c7:75:23:fc:7c:12:94:69:5a:e3:b9:e3:81:96:
         01:0d:ca:3c:94:58:ef:e7:91:96:c0:96:8e:cb:53:84:ea:11:
         41:ac:de:37:d4:d7:5d:bd:23:14:d6:0a:50:ca:c3:2e:b5:49:
         34:aa:1d:12:86:3b:86:1b:4e:2e:a8:c3:30:d0:aa:8f:72:8c:
         28:f5:55:6f:94:8c:35:43:8c:ea:35:f2:df:2d:e6:1e:a5:34:
         fa:c9:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----