Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/6E18561AF49D11EDBE511425C4F9AE02.roa
File:                     6E18561AF49D11EDBE511425C4F9AE02.roa (raw, json)
Hash identifier:          P3VFPvfsjgzCWkIrgCW5FBhy8VKwrYmNOWr29ZdMfXA=
Subject key identifier:   E5:EB:52:1B:49:E3:E3:CA:AD:3C:E6:D4:FC:25:4F:3C:BA:DB:73:44
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       01D0
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/6E18561AF49D11EDBE511425C4F9AE02.roa
Signing time:             Wed 17 May 2023 10:27:31 +0000
ROA not before:           Wed 17 May 2023 10:27:31 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     151338
IP address blocks:        2400:70e0:bab::/48 maxlen: 48
                          2400:70e0:a000::/44 maxlen: 48
                          2400:70e0:b000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: May 17 10:27:31 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6464ac13-9a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:66:c3:f5:6e:b9:35:92:8d:5f:11:5c:23:
                    0e:4b:69:99:f3:6a:0e:04:70:54:f5:34:05:2c:e1:
                    19:4c:5b:e5:e9:94:ec:e5:a9:4e:c9:38:c2:78:73:
                    b6:a1:f5:ee:e0:68:6f:05:58:df:68:86:3e:f2:7e:
                    fd:b9:b0:1e:d7:a2:83:88:df:c4:68:63:91:24:d3:
                    5f:92:a5:07:04:71:6e:35:9c:6a:a6:29:ae:49:16:
                    34:84:83:a7:2a:fb:8a:08:74:d3:c4:7a:1f:67:05:
                    7f:8a:e9:cb:e3:85:e4:03:a9:ba:38:3e:f8:ad:fb:
                    b4:ad:fc:0c:49:ec:34:7f:1d:89:19:ac:63:50:8e:
                    70:0d:f8:a5:b1:2e:e9:ad:3c:b6:35:45:25:13:e6:
                    fa:f3:bd:86:7f:e4:b1:85:94:c6:b2:6c:b6:e3:90:
                    7b:31:57:ef:0e:f5:cb:71:24:35:8e:2a:33:87:56:
                    25:8d:7c:68:d7:89:bc:02:ca:b8:39:ba:d9:30:18:
                    cd:e0:3b:6d:86:b6:e3:45:44:84:61:eb:17:ef:d2:
                    4f:c0:c1:b9:9d:ba:5f:2e:a4:f0:03:54:98:66:9b:
                    54:c2:00:b1:bd:12:c0:5a:4b:c7:eb:3d:44:a5:e1:
                    a5:3e:5f:50:64:bb:46:1d:8a:8a:36:38:e7:b0:b9:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:52:1B:49:E3:E3:CA:AD:3C:E6:D4:FC:25:4F:3C:BA:DB:73:44
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/6E18561AF49D11EDBE511425C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:70e0:bab::/48
                  2400:70e0:a000::/44
                  2400:70e0:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:54:59:ce:58:3b:73:7d:0a:8a:1e:3c:b3:54:f8:68:41:48:
         48:eb:be:6e:38:30:df:2e:b4:11:42:7a:c4:7f:17:f8:42:32:
         d2:84:8a:d3:69:23:6e:f6:94:f4:36:23:c3:8d:37:27:33:ef:
         94:1d:aa:b4:59:cb:e4:48:57:a3:30:93:58:96:6c:d0:4f:62:
         9e:f0:f7:06:05:55:dd:8d:87:cd:5b:b7:ac:35:20:5a:7d:dc:
         db:6a:02:d9:61:cc:e8:57:04:8d:42:26:0c:be:03:f7:22:80:
         e1:30:ba:7a:97:de:6a:d3:70:29:b5:d0:1c:56:e2:29:c8:ef:
         7e:16:36:5c:e4:a0:01:3d:6b:1e:ec:50:61:cd:1f:9d:b1:fa:
         0b:91:c3:75:62:22:86:b4:3b:9b:ec:6c:ff:6b:28:82:3a:23:
         0c:90:13:ff:95:38:58:e6:22:b5:60:b8:6f:35:bd:0a:1c:7e:
         55:76:22:c3:27:6a:02:91:0c:fc:f8:2f:db:00:a1:ba:e6:b1:
         61:f2:e7:e9:6b:49:b9:5e:72:2e:d9:25:89:61:f1:d3:74:49:
         3d:06:e4:35:7e:a3:2a:e7:e2:9e:7d:e5:39:13:5c:37:34:28:
         39:bf:cc:8b:ab:b4:57:c1:30:01:3e:d2:40:f6:28:0c:57:48:
         23:d9:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----