Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
File:                     362A6268EC2411EA8B0DDA2CC4F9AE02.roa (raw, json)
Hash identifier:          15otegqJXdL+zG24Lw3gvreLhIcbPXoYOuIbH2PbHW0=
Subject key identifier:   E1:CF:EF:D4:CA:7B:54:6D:02:EE:53:8C:1B:74:56:40:14:D5:D6:DF
Certificate issuer:       /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial:       04F2
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
Signing time:             Wed 04 May 2022 11:49:29 +0000
ROA not before:           Wed 04 May 2022 11:49:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23712
IP address blocks:        202.41.146.0/24 maxlen: 24
                          2001:dd8:22::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
        Validity
            Not Before: May  4 11:49:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62726848-462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4d:bd:bf:09:cd:10:07:3d:3f:66:73:78:61:
                    df:a9:55:84:b8:4e:b7:49:fe:70:43:3e:bb:b0:30:
                    76:ee:ac:33:a8:11:04:f4:af:94:fe:6c:b9:2c:25:
                    55:cc:ec:b9:48:96:84:92:62:7a:cc:92:e7:74:9f:
                    36:e1:40:17:a6:d4:56:1e:cb:30:92:d4:0e:36:7d:
                    19:65:b8:63:b1:40:a5:c3:51:e5:97:9d:e4:85:d6:
                    d2:be:23:91:7b:87:4c:cd:2b:94:41:2d:4b:13:a6:
                    29:b4:c4:3e:bd:19:ff:bb:72:06:99:18:5b:f3:f9:
                    87:0d:1d:b9:78:a6:83:3d:db:2f:83:f0:48:bf:51:
                    5a:57:14:02:03:df:8d:ab:8a:4a:8a:43:a2:c8:e8:
                    a3:45:61:7d:e3:b9:db:0a:b8:70:65:09:25:e7:6d:
                    c1:94:80:e3:8b:5f:4f:94:1a:29:22:65:67:14:de:
                    e6:76:56:dd:29:58:67:ab:ad:e8:77:9b:d0:25:6a:
                    33:81:a5:b9:d6:86:6c:ec:53:07:09:9e:8d:91:78:
                    53:27:b7:d6:93:4a:ba:c9:fa:6e:cd:5c:28:b8:18:
                    37:22:9c:52:46:6b:96:3a:ca:91:c1:2c:d4:88:42:
                    05:a4:9b:ca:02:40:3b:6a:89:79:59:83:84:95:df:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CF:EF:D4:CA:7B:54:6D:02:EE:53:8C:1B:74:56:40:14:D5:D6:DF
            X509v3 Authority Key Identifier:
                keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/362A6268EC2411EA8B0DDA2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.146.0/24
                IPv6:
                  2001:dd8:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:a8:82:ae:1d:23:1c:6c:0b:8d:81:13:f7:e0:df:84:82:
         d9:74:b0:6d:22:2c:ab:75:5c:cb:86:f7:8d:24:b2:36:b1:4d:
         dc:70:69:69:df:72:95:03:21:87:64:32:2b:f9:a9:25:0e:dc:
         b9:e1:2f:b7:01:c4:37:9c:eb:cb:11:32:15:5c:0e:27:6e:5b:
         b6:42:3a:43:b9:a1:e4:ab:16:54:1a:e4:97:75:f4:c0:1b:ff:
         93:1b:28:6a:0d:cd:79:81:d4:b2:24:75:fd:bf:3c:23:f6:02:
         b8:b8:ab:39:b4:8d:68:58:35:da:dd:d3:4b:6c:b8:f5:ee:e5:
         ab:e8:dc:a5:26:23:93:89:e4:a9:3c:f8:ad:b5:6d:10:89:0a:
         11:1a:72:4e:54:5c:0c:f1:2c:db:9e:4b:d7:68:fe:a0:31:c5:
         27:d9:7a:06:c4:95:f7:21:a5:2e:6b:5d:56:24:d1:41:8a:39:
         20:0c:19:05:fc:9f:f0:66:6c:d0:2a:c0:ec:9f:97:0b:60:7c:
         73:87:ec:2b:bd:f8:d1:67:02:0c:f8:b6:9d:65:ea:29:c6:cf:
         86:2b:41:bf:46:9b:7c:dd:e9:64:34:9b:8a:fc:3e:be:c2:0e:
         d3:49:67:1d:ff:3d:bc:dd:28:06:e5:93:62:d3:ec:be:16:fd:
         00:c0:9f:2d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB
NzhCNzhDNDcwHhcNMjIwNTA0MTE0OTI5WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjcyNjg0OC00NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6k29vwnNEAc9P2ZzeGHfqVWEuE63Sf5wQz67sDB27qwzqBEE9K+U/my5LCVV
zOy5SJaEkmJ6zJLndJ824UAXptRWHsswktQONn0ZZbhjsUClw1Hll53khdbSviOR
e4dMzSuUQS1LE6YptMQ+vRn/u3IGmRhb8/mHDR25eKaDPdsvg/BIv1FaVxQCA9+N
q4pKikOiyOijRWF947nbCrhwZQkl523BlIDji19PlBopImVnFN7mdlbdKVhnq63o
d5vQJWozgaW51oZs7FMHCZ6NkXhTJ7fWk0q6yfpuzVwouBg3IpxSRmuWOsqRwSzU
iEIFpJvKAkA7aol5WYOEld+GGQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOHP79TK
e1RtAu5TjBt0VkAU1dbfMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC
NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI1MzYvRTRDODg5NzJFQjc0MTFFQUJBMEE5RTQ4QzRGOUFFMDIvMzYyQTYyNjhF
QzI0MTFFQThCMEREQTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKKZIwDwQCAAIwCQMHACABDdgAIjANBgkqhkiG9w0BAQsF
AAOCAQEAO2Wogq4dIxxsC42BE/fg34SC2XSwbSIsq3Vcy4b3jSSyNrFN3HBpad9y
lQMhh2QyK/mpJQ7cueEvtwHEN5zryxEyFVwOJ25btkI6Q7mh5KsWVBrkl3X0wBv/
kxsoag3NeYHUsiR1/b88I/YCuLirObSNaFg12t3TS2y49e7lq+jcpSYjk4nkqTz4
rbVtEIkKERpyTlRcDPEs255L12j+oDHFJ9l6BsSV9yGlLmtdViTRQYo5IAwZBfyf
8GZs0CrA7J+XC2B8c4fsK7340WcCDPi2nWXqKcbPhitBv0abfN3pZDSbivw+vsIO
00lnHf89vN0oBuWTYtPsvhb9AMCfLQ==
-----END CERTIFICATE-----