Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0E22E53C444611EAB52D0259C4F9AE02.roa
File:                     0E22E53C444611EAB52D0259C4F9AE02.roa (raw, json)
Hash identifier:          yDNw10+fRa3EtLIQDOzpn0Nl/UaoiTVuqfUg03xtsSQ=
Subject key identifier:   77:FB:D7:6D:52:06:EB:D3:58:C0:2F:63:7F:23:8F:D8:14:48:FF:CF
Certificate issuer:       /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F
Certificate serial:       07FC
Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0E22E53C444611EAB52D0259C4F9AE02.roa
Signing time:             Wed 12 Jan 2022 08:57:44 +0000
ROA not before:           Wed 12 Jan 2022 08:57:44 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     3908
IP address blocks:        116.251.204.0/24 maxlen: 24
                          116.251.205.0/24 maxlen: 24
                          116.251.206.0/24 maxlen: 24
                          116.251.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F
        Validity
            Not Before: Jan 12 08:57:44 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61de9808-9b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:5f:f6:e0:33:72:f6:50:42:0d:4a:27:03:
                    cd:19:f3:12:1c:46:a4:e8:16:8c:8a:12:66:cc:7e:
                    2c:b1:a2:85:19:92:89:2a:f8:03:75:aa:ce:d8:b1:
                    9a:22:a8:16:72:ad:cf:ec:75:c4:05:6f:e3:69:08:
                    dc:0e:24:02:87:b0:aa:9c:db:0d:5c:72:ee:9b:8b:
                    58:41:e5:33:7d:b1:52:05:66:e5:e3:0b:28:32:89:
                    9f:87:aa:7b:68:0c:05:ed:c5:05:17:02:71:15:4f:
                    4c:51:b4:cc:29:d8:dc:c3:97:4e:36:0b:1c:a8:59:
                    07:88:00:72:37:5e:79:97:b9:01:b0:1a:df:bb:d2:
                    16:75:12:b7:4f:fe:6f:1f:aa:bf:ee:22:21:1d:c2:
                    65:2c:16:a9:ed:54:02:9e:5c:bb:67:1b:12:32:07:
                    f4:a1:a0:f7:50:1b:3a:18:cb:e3:47:9c:50:23:49:
                    99:5a:c0:cc:89:b0:45:ed:fb:a4:a4:03:00:2d:0c:
                    df:b7:47:75:8d:7c:35:58:c6:7e:d3:c4:36:e2:1f:
                    a0:4a:83:5b:17:02:e7:4a:8f:f5:3e:cb:e9:95:8d:
                    0c:37:0f:b3:1b:b5:07:b0:dd:fc:96:f0:3f:d3:1d:
                    3b:fc:72:98:63:95:56:e6:40:6e:89:66:fa:34:ef:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:D7:6D:52:06:EB:D3:58:C0:2F:63:7F:23:8F:D8:14:48:FF:CF
            X509v3 Authority Key Identifier:
                keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0E22E53C444611EAB52D0259C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.251.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:60:8d:5c:53:e5:49:61:33:cf:5d:9d:e2:76:73:e3:21:e9:
         d9:f1:60:4e:92:cc:f5:31:ba:d6:a3:19:42:45:65:b0:84:5a:
         66:24:7b:fc:a2:ca:10:03:8e:f6:26:80:09:9d:26:e0:11:f4:
         4a:60:33:b4:ef:eb:4c:18:16:0a:76:ee:88:53:51:ff:d1:f3:
         a0:6b:45:20:71:f3:4b:29:11:dd:a5:0a:22:4e:99:16:80:22:
         a1:e7:2d:ed:f2:1f:54:d9:66:08:d6:5f:f4:2f:8c:5a:8e:f3:
         3f:73:5f:94:f8:a2:15:3e:41:ce:33:e9:e4:e6:31:56:8c:c9:
         47:cf:4b:86:1c:a0:89:90:96:54:22:f0:69:40:53:73:f6:9d:
         27:67:92:b6:35:3e:b7:d5:85:e4:61:d0:4f:ea:99:91:3e:bb:
         ed:aa:07:9b:9a:a2:59:1c:f6:cd:5b:a4:23:06:36:d1:b6:63:
         c7:7a:89:f8:a1:32:db:e3:63:20:51:e5:67:48:e4:9c:d5:15:
         a4:63:c2:c3:9a:cf:73:df:10:83:97:13:ba:52:f7:54:87:18:
         61:9a:d3:35:fb:85:0e:e1:08:00:ec:a4:dd:8f:20:fa:7c:22:
         34:20:bd:d9:be:be:b3:3d:00:a3:f6:07:4f:8b:4b:7b:0b:7f:
         e6:b5:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----