Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/47BFF614A46111E6B0DE2050C4F9AE02.roa
File:                     47BFF614A46111E6B0DE2050C4F9AE02.roa (raw, json)
Hash identifier:          bH22fJ4p8QakaDGBedZ8SlgGLDxXdFhgNyBoREtZb5k=
Subject key identifier:   11:B8:AC:57:3A:61:1E:E7:A3:63:C9:42:2D:2E:E2:58:DF:93:7E:4A
Certificate issuer:       /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial:       25CC
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/47BFF614A46111E6B0DE2050C4F9AE02.roa
Signing time:             Sat 01 May 2021 04:11:33 +0000
ROA not before:           Sat 01 May 2021 04:11:33 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     132048
IP address blocks:        163.47.206.0/24 maxlen: 24
                          2400:7180:7::/48 maxlen: 48
                          2400:7180:8::/48 maxlen: 48
                          2401:7000:0:9a::/64 maxlen: 64
                          2401:7000:0:9d::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9676 (0x25cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
        Validity
            Not Before: May  1 04:11:33 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=608cd4f5-77a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:1d:41:ce:42:97:d3:df:64:d0:08:63:26:
                    6f:81:9c:a0:03:bc:c0:e3:cb:92:b7:1f:f5:89:2b:
                    c1:e4:c1:72:65:59:28:ea:fd:12:08:b6:32:5f:e2:
                    4c:4d:27:16:0e:33:01:ce:5b:b8:4b:bc:62:fe:0d:
                    13:3d:61:12:3f:b4:e2:4e:10:5b:71:7a:b5:34:04:
                    f4:a7:b8:8b:ca:8f:3f:e7:f8:ed:a2:5f:12:3d:f3:
                    40:1e:39:65:9b:73:da:e9:05:56:dd:6b:f4:64:a2:
                    ca:07:bb:db:3e:6e:d8:d6:be:29:16:ba:a1:d8:a6:
                    6c:8f:02:af:76:58:2d:fd:7c:f9:9e:f5:bf:d4:49:
                    77:d0:0c:39:8d:0e:89:33:a9:e7:39:b3:ba:2a:c8:
                    11:7e:3e:10:b6:10:24:41:01:a9:b2:96:27:2b:1d:
                    4a:22:7a:95:bd:46:b5:26:3d:6a:fd:5f:c2:f6:0b:
                    0d:70:2c:41:1d:71:8b:3e:70:03:d7:04:4c:64:cb:
                    1d:12:66:40:74:9e:2d:a8:f8:4e:a6:37:12:6f:a6:
                    11:83:8b:0e:6c:70:50:79:c8:91:1e:d2:6e:4b:84:
                    54:0a:22:e5:61:f1:4d:c2:4c:a6:fe:03:24:b0:fe:
                    22:69:9c:b9:c9:2b:ec:82:8c:d5:ef:c6:fb:e0:1d:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:AC:57:3A:61:1E:E7:A3:63:C9:42:2D:2E:E2:58:DF:93:7E:4A
            X509v3 Authority Key Identifier:
                keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/47BFF614A46111E6B0DE2050C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.206.0/24
                IPv6:
                  2400:7180:7::-2400:7180:8:ffff:ffff:ffff:ffff:ffff
                  2401:7000:0:9a::/64
                  2401:7000:0:9d::/64

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:ce:dc:b6:30:92:36:39:b0:ea:a6:69:6f:23:59:01:22:
         fc:81:18:ac:9e:2c:ff:62:f4:41:ac:6f:6c:3e:85:00:53:30:
         25:64:66:6b:54:c3:43:39:76:7e:7d:0c:f2:cc:08:8e:46:00:
         74:ca:9f:9a:13:af:99:1e:0b:16:05:6b:b1:b2:9e:19:d4:b1:
         14:3e:3d:43:f5:16:57:a6:9d:57:31:a9:9d:6e:81:75:9d:cb:
         7f:d3:e4:ba:1a:33:68:1f:be:63:71:37:84:dd:48:81:57:ec:
         74:3a:37:f0:f3:d7:70:75:6b:6a:29:31:3b:f6:1e:78:e5:ed:
         b2:4f:92:65:a8:d8:cb:c9:a0:8c:fd:70:0a:9c:0f:a8:9e:b7:
         15:ba:60:4b:2d:26:ab:3b:40:27:9c:dc:fa:81:cf:d1:0e:a9:
         4b:5b:53:46:de:a7:1f:0c:66:d6:66:d1:75:e5:fe:e4:d3:36:
         8b:a7:f2:bd:67:12:86:c6:a6:99:48:3a:de:31:b9:bf:90:1b:
         da:b8:45:8e:69:27:84:4d:a4:a2:4d:0b:aa:4b:fe:36:d6:4e:
         58:88:3c:dc:33:8f:f9:54:17:7e:0b:87:d8:30:46:5d:19:5d:
         11:58:8e:c8:b1:45:c5:f6:05:19:35:28:9d:f0:27:77:ed:5b:
         96:13:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----