Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1B7D900606D11EDA7658C30C4F9AE02.roa
File:                     B1B7D900606D11EDA7658C30C4F9AE02.roa (raw, json)
Hash identifier:          HRZuVPTUQG9Lzifo60n3Xcs8Y2JtSgURed26H82BNh0=
Subject key identifier:   2A:8B:A8:15:0E:D3:F0:82:47:94:84:A2:34:B7:A8:5E:3D:1C:97:47
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       0169
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1B7D900606D11EDA7658C30C4F9AE02.roa
Signing time:             Wed 09 Nov 2022 20:32:57 +0000
ROA not before:           Wed 09 Nov 2022 20:32:57 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     18041
IP address blocks:        2400:70e0::/32 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: Nov  9 20:32:57 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=636c0e79-ab33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:0f:2a:e9:4f:e6:bd:7e:17:75:3e:1d:e7:
                    a1:d1:5d:e9:07:7b:3a:11:d1:06:d2:76:9d:bd:26:
                    6c:f2:39:3f:54:a4:0a:5f:2d:d8:79:a9:8b:e7:0b:
                    d9:5a:d2:ad:90:28:3e:de:d4:04:f4:d6:6e:a5:d5:
                    6c:90:0b:62:1d:fa:bf:ef:79:bb:87:22:71:37:61:
                    21:49:64:4a:1a:b0:00:7e:54:19:a9:0f:ab:5a:22:
                    b0:56:5d:a7:ed:33:7f:bd:1c:e6:a4:3f:45:24:b4:
                    64:2a:1f:67:c5:03:27:a8:11:98:1c:be:1d:c9:c0:
                    c4:b1:53:2d:f5:24:1a:77:50:73:ee:e6:4b:35:9f:
                    67:c5:74:4c:aa:df:c6:7a:62:e8:fe:46:32:8a:23:
                    d9:7b:63:c5:d7:05:e9:13:2f:57:8d:ac:cb:5d:26:
                    ff:40:66:26:c0:66:be:73:2b:de:38:41:d4:9b:80:
                    75:b7:0f:81:66:8f:20:74:87:06:f1:12:5b:37:0a:
                    3b:90:ca:d1:fc:93:ad:8d:33:1b:11:c3:e5:61:32:
                    4c:eb:a9:4d:7e:e4:20:a6:33:1a:ea:0e:9e:36:93:
                    2d:bb:b1:0e:4f:d9:0e:8b:e7:8a:90:d0:ed:0c:89:
                    9f:d8:1b:74:1d:ba:4a:54:55:fc:bb:ae:31:e3:7a:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:A8:15:0E:D3:F0:82:47:94:84:A2:34:B7:A8:5E:3D:1C:97:47
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/B1B7D900606D11EDA7658C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:df:24:65:ab:62:05:54:36:86:60:0e:56:9f:09:61:0b:
         41:47:0f:f0:97:6b:1a:f1:f5:0c:90:13:7b:af:ea:4b:61:8c:
         d4:9b:c5:02:c4:03:f7:d3:42:1c:0d:51:58:04:36:cd:e7:81:
         dc:6a:37:ec:88:00:75:39:47:c9:e6:2b:eb:08:57:3c:62:fa:
         6f:db:21:27:67:bf:b3:38:7b:2e:cd:eb:d6:4b:40:c6:b3:05:
         bc:0c:ae:49:e5:f5:28:ec:c0:5b:63:dc:f1:05:a8:0c:59:3a:
         40:38:8a:17:f1:b8:4f:11:d2:37:a5:7e:df:66:45:76:b1:81:
         a7:0a:e3:ec:67:81:3f:28:fb:05:8b:f5:89:5b:96:17:35:dc:
         6d:79:4a:13:a9:6b:c2:79:0f:43:ca:01:52:e8:7f:01:fc:0d:
         53:5b:58:8c:a6:12:86:e5:81:8c:35:86:7d:4b:ab:01:7d:49:
         7c:1d:a8:cb:9f:7c:2a:a1:6c:23:d8:f0:21:26:b2:c8:bb:df:
         be:a8:14:f5:d1:69:e6:8f:9c:c4:f7:23:f2:64:0a:22:74:b3:
         73:f7:2d:49:57:be:07:fb:e9:4a:c3:16:e4:15:dd:fd:9d:26:
         f0:9e:90:b4:f2:59:26:6b:33:09:68:d6:4f:9a:0e:23:9f:1c:
         35:d3:69:57
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC
RTJBQTBBRDUwHhcNMjIxMTA5MjAzMjU3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZjMGU3OS1hYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSkPKulP5r1+F3U+Heeh0V3pB3s6EdEG0nadvSZs8jk/VKQKXy3YeamL5wvZ
WtKtkCg+3tQE9NZupdVskAtiHfq/73m7hyJxN2EhSWRKGrAAflQZqQ+rWiKwVl2n
7TN/vRzmpD9FJLRkKh9nxQMnqBGYHL4dycDEsVMt9SQad1Bz7uZLNZ9nxXRMqt/G
emLo/kYyiiPZe2PF1wXpEy9XjazLXSb/QGYmwGa+cyveOEHUm4B1tw+BZo8gdIcG
8RJbNwo7kMrR/JOtjTMbEcPlYTJM66lNfuQgpjMa6g6eNpMtu7EOT9kOi+eKkNDt
DImf2Bt0HbpKVFX8u64x43ribwIDAQABo4ICljCCApIwHQYDVR0OBBYEFCqLqBUO
0/CCR5SEojS3qF49HJdHMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx
NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvQjFCN0Q5MDA2
MDZEMTFFREE3NjU4QzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAHDgMA0GCSqGSIb3DQEBCwUAA4IBAQBam98kZatiBVQ2
hmAOVp8JYQtBRw/wl2sa8fUMkBN7r+pLYYzUm8UCxAP300IcDVFYBDbN54Hcajfs
iAB1OUfJ5ivrCFc8Yvpv2yEnZ7+zOHsuzevWS0DGswW8DK5J5fUo7MBbY9zxBagM
WTpAOIoX8bhPEdI3pX7fZkV2sYGnCuPsZ4E/KPsFi/WJW5YXNdxteUoTqWvCeQ9D
ygFS6H8B/A1TW1iMphKG5YGMNYZ9S6sBfUl8HajLn3wqoWwj2PAhJrLIu9++qBT1
0Wnmj5zE9yPyZAoidLNz9y1JV74H++lKwxbkFd39nSbwnpC08lkmazMJaNZPmg4j
nxw102lX
-----END CERTIFICATE-----