Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C27ADD98E4A011EDB46E7983C4F9AE02.roa
File:                     C27ADD98E4A011EDB46E7983C4F9AE02.roa (raw, json)
Hash identifier:          JuTxEGcpRA0NqxdluBmHeLSM9bMytSeTecbe+/TtOfk=
Subject key identifier:   96:52:14:81:CC:E7:B5:C1:C8:82:4B:3C:FC:DC:6A:17:AE:D0:6D:8F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3236
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C27ADD98E4A011EDB46E7983C4F9AE02.roa
Signing time:             Thu 27 Apr 2023 02:31:05 +0000
ROA not before:           Thu 27 Apr 2023 02:31:05 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     21700
IP address blocks:        122.8.16.0/22 maxlen: 22
                          122.8.28.0/22 maxlen: 22
                          122.8.40.0/22 maxlen: 22
                          122.8.48.0/22 maxlen: 22
                          122.8.64.0/22 maxlen: 22
                          122.8.80.0/22 maxlen: 22
                          122.8.92.0/22 maxlen: 22
                          122.8.96.0/22 maxlen: 22
                          122.8.100.0/22 maxlen: 22
                          122.8.104.0/22 maxlen: 22
                          122.8.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12854 (0x3236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Apr 27 02:31:05 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=6449de68-0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:94:72:06:6b:76:33:0c:7d:e9:58:2e:5c:
                    be:dc:1f:15:e5:9d:11:fd:3c:e6:49:90:46:07:21:
                    ec:8a:57:11:4a:19:d9:28:eb:64:73:96:7c:05:f8:
                    41:e1:8b:5e:29:43:f0:80:c7:74:06:32:86:27:91:
                    ce:75:0e:ef:89:be:9a:10:e0:8a:76:af:4f:0c:32:
                    ba:e7:41:13:ce:f8:27:d2:83:e7:17:8b:8e:dc:7f:
                    27:c9:2d:78:b6:f2:2c:9e:cf:63:f4:e6:a5:68:c2:
                    4c:2e:13:12:b9:5d:11:3b:66:65:7e:cd:05:01:11:
                    e3:f4:e4:e1:7f:65:6c:89:7c:21:b4:f9:68:35:93:
                    e3:fe:db:9e:ae:b9:09:d8:30:d6:32:05:2b:7f:59:
                    a4:4f:3c:f0:36:bd:ff:88:ac:6b:cd:27:27:5c:d1:
                    9a:e7:ae:40:a5:9a:48:86:89:ef:14:ba:3a:07:1f:
                    03:f4:58:dd:f6:19:2d:32:f1:2e:ce:85:57:a6:04:
                    ce:4e:f7:c8:da:27:9b:b9:29:90:a7:c0:4c:55:0d:
                    ed:00:a2:3d:42:83:04:ed:c6:24:e8:1f:b0:7b:a6:
                    1f:d6:5f:79:81:23:d6:44:ca:45:23:22:25:d7:ca:
                    bb:5f:5d:78:28:30:3e:de:29:a4:06:77:0a:1b:b5:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:52:14:81:CC:E7:B5:C1:C8:82:4B:3C:FC:DC:6A:17:AE:D0:6D:8F
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/C27ADD98E4A011EDB46E7983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.16.0/22
                  122.8.28.0/22
                  122.8.40.0/22
                  122.8.48.0/22
                  122.8.64.0/22
                  122.8.80.0/22
                  122.8.92.0-122.8.111.255

    Signature Algorithm: sha256WithRSAEncryption
         34:53:d2:84:ff:e3:b9:49:22:e5:c0:2b:1b:f8:26:94:01:36:
         d8:65:79:87:f2:16:ff:93:63:07:00:5a:d3:86:01:b2:1b:a4:
         b7:07:e4:63:7c:7d:76:9b:08:7b:30:60:25:10:ad:3e:dd:6d:
         08:e4:84:8f:57:89:56:30:bb:37:8a:52:a1:75:6d:24:a1:41:
         51:3c:8c:91:0f:a4:63:4f:20:60:e8:9e:ce:6f:20:34:af:2d:
         b2:08:51:09:f6:13:db:57:d4:21:14:91:ab:7e:9d:d5:33:aa:
         04:1d:ca:b4:c7:0c:ec:c0:68:bf:d5:d0:7a:0d:06:f6:ea:93:
         9e:fa:49:ab:1e:da:70:39:c8:ee:d0:46:93:f1:96:9b:98:b3:
         7f:7d:28:3b:5f:94:56:6e:8d:4b:8c:3e:be:c8:e3:f5:a3:d2:
         cb:9a:93:35:ce:9a:91:52:16:cf:ea:7d:3f:65:8f:bb:e0:c7:
         a7:e7:5b:cb:3b:3d:9f:f9:fb:b0:b4:9b:35:79:d0:cd:62:de:
         6d:24:56:6d:75:64:39:35:84:69:91:ea:cd:5c:c4:b3:d3:00:
         4d:16:a0:d3:10:70:1d:14:c9:bd:c5:ef:cd:16:3c:a7:28:1b:
         b0:34:b1:9c:56:c4:20:51:a9:fa:0a:78:87:09:9e:0b:e3:2c:
         59:eb:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----