Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
File:                     658B0B701B8911ED8E01341FC4F9AE02.roa (raw, json)
Hash identifier:          hWPHyicjgL5+m5k7ZQUG2ecYorrjae5LKQXp2ntWwOs=
Subject key identifier:   D5:9C:0C:BF:93:B2:90:71:AB:5D:17:55:42:0D:13:3F:0B:45:6D:90
Certificate issuer:       /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial:       0871
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
Signing time:             Sun 14 Aug 2022 04:27:25 +0000
ROA not before:           Sun 14 Aug 2022 04:27:25 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     14618
IP address blocks:        2001:df1:6c80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
        Validity
            Not Before: Aug 14 04:27:25 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62f879ac-e436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:bb:02:aa:86:06:21:62:b2:86:df:c5:9c:
                    34:20:b3:ab:db:cb:dc:9a:bd:40:87:58:95:21:01:
                    cd:a9:4d:7d:4d:75:eb:f3:3e:f7:4f:ec:1b:68:60:
                    75:c6:74:3d:30:ba:5d:80:da:1d:65:91:18:34:55:
                    1e:90:bc:9f:2e:1d:09:8e:10:29:c6:2f:61:34:f6:
                    31:a6:ab:5e:bc:20:1a:23:45:86:43:cc:a2:6c:0f:
                    d5:f5:f8:4e:0e:3e:23:78:6d:82:c5:68:b1:47:df:
                    84:19:09:17:9d:0d:b4:80:32:bc:d5:d6:57:18:80:
                    b2:22:ba:72:e2:9d:a6:1a:16:c7:64:bb:a7:53:3c:
                    60:00:cc:d6:cc:8b:2e:f1:05:60:98:4c:a1:f9:e3:
                    90:30:43:4b:9e:8b:7d:65:fc:b4:d5:59:12:10:ec:
                    3b:7e:fb:d8:4b:7b:b0:38:d0:d8:77:8b:a7:8e:60:
                    01:92:ff:46:ea:65:74:e4:94:06:da:08:de:80:d3:
                    53:f0:7b:b3:db:5d:8e:e2:2a:88:de:b3:36:b5:f6:
                    fd:ce:07:2f:94:fc:1f:dc:59:65:2e:35:58:06:52:
                    97:24:3a:32:7f:9b:84:8c:0f:79:28:56:98:0b:70:
                    ca:af:ea:3e:46:cb:a7:79:84:66:6b:f4:7c:5c:8a:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:0C:BF:93:B2:90:71:AB:5D:17:55:42:0D:13:3F:0B:45:6D:90
            X509v3 Authority Key Identifier:
                keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/658B0B701B8911ED8E01341FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:47:63:51:ba:ef:94:01:51:52:ca:95:8b:88:61:9f:15:
         dc:aa:99:90:d4:0b:9e:86:9d:c4:1c:80:9b:cf:2c:52:88:08:
         b9:f8:eb:37:78:24:b7:d0:d0:c6:02:9f:bd:38:e7:68:54:b7:
         5f:b4:ef:85:19:ea:7c:1b:70:b7:5a:db:c7:41:23:d8:c5:ea:
         5e:f6:1d:d1:9e:0c:9b:a1:7b:86:fe:43:33:db:98:8b:a6:32:
         f4:fd:13:0c:25:13:99:9c:ea:a6:7e:d8:cf:f1:fd:d8:2b:48:
         08:0e:ae:ce:e1:98:ad:84:14:bc:0a:a1:dd:38:35:71:a1:1a:
         46:6c:16:be:78:1b:63:dc:a4:1b:5f:39:ae:f5:11:83:3d:47:
         d7:c0:40:4a:2e:e5:fd:be:46:b2:44:93:b0:9c:1d:d2:00:20:
         88:17:88:aa:c5:ec:37:3b:85:fc:6b:ee:88:ac:88:67:2e:47:
         60:b6:3c:4d:d5:f9:12:81:3e:3b:ac:7b:12:c6:06:cf:b7:56:
         28:26:7a:87:9b:b5:a9:20:f5:52:55:d2:ef:8c:52:d3:26:62:
         d6:db:53:f3:1a:02:02:57:22:ea:6c:82:0b:62:b4:1a:ba:08:
         37:39:5a:8a:6d:bd:a1:11:f7:18:19:6e:4d:0d:fa:d6:b0:a2:
         f0:e2:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----