Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E626F77499FE11ECBF90F582C4F9AE02.roa
File:                     E626F77499FE11ECBF90F582C4F9AE02.roa (raw, json)
Hash identifier:          VZLJ/8tvOv3WMmn/fR9Np+ZqRwDwsXnX1HH1vreC0bw=
Subject key identifier:   8C:BA:C2:4A:B9:36:70:96:EF:1A:41:5D:11:8A:61:3A:B7:BA:B4:1C
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       2FC5
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E626F77499FE11ECBF90F582C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 08:01:00 +0000
ROA not before:           Wed 02 Mar 2022 08:01:00 +0000
ROA not after:            Sat 28 May 2022 00:00:00 +0000
asID:                     7029
IP address blocks:        118.188.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12229 (0x2fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar  2 08:01:00 2022 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=621f243c-c368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:10:83:45:f5:39:02:d2:86:7f:31:a5:08:
                    45:95:1a:c5:bb:58:2a:ab:b3:46:e1:b4:e3:25:a5:
                    dc:26:8e:d4:fa:32:5d:ce:70:4d:13:42:b2:6e:72:
                    91:38:0b:52:71:54:b4:d1:0f:95:38:a4:46:a6:a9:
                    09:88:34:61:04:21:ec:16:c0:7c:b0:ee:a3:6e:35:
                    64:b7:99:f1:2b:08:b8:66:00:1c:1b:40:c7:e3:76:
                    d2:5b:c7:0d:a6:10:cd:fd:2f:f6:a9:cc:4e:e1:87:
                    89:4d:6c:6e:78:4d:10:30:70:54:3f:43:ec:e3:b8:
                    2c:50:44:e7:65:2c:50:10:f9:a8:97:13:ab:29:b0:
                    c0:b8:27:0b:b7:4b:43:55:12:2b:44:2f:ea:1f:a9:
                    a0:3d:2f:51:2c:a9:c5:be:c7:03:04:25:e0:b3:bd:
                    d8:27:68:4f:9b:a3:ca:b7:10:10:60:57:fc:f1:48:
                    ef:c4:51:b2:07:a1:4c:95:8e:fd:f8:45:ea:26:43:
                    f4:ed:c0:20:82:e5:98:1f:80:e4:54:b9:f5:e4:fd:
                    6f:be:81:53:4f:a5:1d:38:a6:a8:d6:c0:de:a3:a2:
                    1d:72:91:d7:e9:7e:3d:19:5e:4f:6c:89:c5:8e:d9:
                    47:a5:ec:52:6e:82:25:df:40:d1:38:58:74:58:34:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:C2:4A:B9:36:70:96:EF:1A:41:5D:11:8A:61:3A:B7:BA:B4:1C
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/E626F77499FE11ECBF90F582C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.188.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:5c:f2:5c:6a:08:99:ef:4e:c8:9b:66:62:47:77:6c:cf:
         a5:f1:d6:3a:1a:58:76:b6:61:84:3a:ce:27:84:86:b0:4a:c8:
         1d:fe:df:e0:b5:cd:de:53:8d:6e:e8:c5:46:00:b3:dd:bd:18:
         a3:07:fa:88:57:df:10:50:5f:04:5b:45:9b:19:c0:6c:ef:86:
         cf:86:dc:60:9d:38:85:22:b2:8b:05:f0:99:9d:c5:47:2d:c1:
         dd:fd:76:f2:73:75:4b:5b:1b:ac:73:1a:a1:4b:7e:3e:14:ad:
         8e:38:d2:67:61:8c:f4:f8:9a:b3:17:3e:2d:71:6c:c8:f7:df:
         34:46:54:91:aa:2c:b4:ab:3a:3f:ed:6f:5c:d1:d2:70:7c:6c:
         07:93:dc:90:3c:b5:8d:38:77:f0:31:73:c3:59:75:9d:06:e2:
         76:54:2e:12:ff:90:81:e0:45:f6:13:65:e8:e3:58:2a:6b:57:
         e6:d9:51:24:b2:ac:04:59:f1:53:48:c9:ec:44:10:82:35:a2:
         5c:78:fd:b1:48:7c:e3:bc:de:c9:1f:6c:43:16:06:dc:e6:de:
         24:ea:86:f2:88:cb:dd:03:4a:41:f2:71:c4:ae:ee:01:ec:72:
         41:e1:13:15:ea:52:d6:a6:38:de:5b:31:01:d4:1f:4f:97:42:
         eb:3c:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----