Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4AF29DE6F0EC11EB9D0B176AC4F9AE02.roa
File:                     4AF29DE6F0EC11EB9D0B176AC4F9AE02.roa (raw, json)
Hash identifier:          nYpPogowGVNoKA6QVcb+AZMSuEDkSJnd2GsX0CJaJFQ=
Subject key identifier:   83:7F:E8:B6:B0:A7:00:69:D6:9A:97:60:93:A3:D9:17:D8:B3:E4:56
Certificate issuer:       /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial:       291C
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4AF29DE6F0EC11EB9D0B176AC4F9AE02.roa
Signing time:             Tue 07 Jun 2022 04:22:33 +0000
ROA not before:           Tue 07 Jun 2022 04:22:33 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     9727
IP address blocks:        202.74.192.0/22 maxlen: 24
                          2401:7000:69::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10524 (0x291c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
        Validity
            Not Before: Jun  7 04:22:33 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=629ed288-7032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:3d:a4:55:1f:32:46:24:73:d2:b2:5f:46:
                    20:ed:2d:4e:5f:5a:80:59:c8:6e:2a:88:5c:98:9e:
                    66:de:86:39:eb:55:61:a8:87:79:9c:6c:3b:65:7b:
                    35:62:78:d6:02:3b:59:bc:5c:5e:94:50:15:fe:23:
                    c6:b0:ce:f0:16:ce:16:55:a8:1a:88:84:ca:e6:30:
                    01:f1:56:48:cf:85:9d:f1:a6:d4:70:ac:42:4e:67:
                    4a:ae:11:73:86:2e:63:4a:50:c1:ba:3c:58:de:79:
                    12:4b:bb:e8:70:c2:04:75:e8:e3:ff:1f:26:09:79:
                    a2:aa:3d:a6:c3:4a:6d:5f:60:a2:02:28:42:cc:15:
                    ec:a8:11:3b:89:a5:6b:6c:24:a1:81:47:a3:0b:bd:
                    ae:d9:b2:a4:e2:e3:97:0c:a5:fe:9f:61:f1:9b:9a:
                    56:13:71:4d:b6:10:70:29:77:f7:b0:c1:c1:cc:08:
                    b2:c4:5d:77:78:1b:65:14:0f:10:cb:1a:e1:42:37:
                    31:bd:65:de:d9:1a:cd:97:47:a2:f8:2f:ba:95:c1:
                    66:a5:c8:f9:ed:13:4e:07:8e:58:81:d9:98:3a:df:
                    2c:78:2e:60:4d:03:96:d2:a0:d0:00:31:4f:61:76:
                    b1:25:3d:80:64:d7:2d:76:b3:a8:a3:7e:fa:c8:50:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:E8:B6:B0:A7:00:69:D6:9A:97:60:93:A3:D9:17:D8:B3:E4:56
            X509v3 Authority Key Identifier:
                keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4AF29DE6F0EC11EB9D0B176AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.192.0/22
                IPv6:
                  2401:7000:69::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:78:cf:ad:0c:e2:89:fa:ea:f0:f1:fe:b2:ae:73:2c:ee:
         5d:f9:f4:52:48:86:c6:1c:4e:33:35:5a:f0:47:a4:a3:0f:79:
         bd:00:24:85:5e:58:8d:ee:95:a0:98:8b:25:6a:54:e9:9d:36:
         fb:ea:f9:84:21:6c:b2:49:98:e1:e5:cd:79:cd:ad:8b:8d:05:
         dd:93:83:47:48:fe:0d:15:7e:83:a1:5b:b5:e4:ad:9b:17:02:
         85:a9:c6:08:34:00:02:b4:c9:6e:56:8b:36:5b:16:c0:5d:9c:
         02:3a:db:09:2e:e5:7c:7b:1a:3e:31:11:84:05:a0:cf:21:ce:
         01:b6:d3:24:c8:9e:88:25:46:70:eb:96:c3:50:12:1d:ea:54:
         df:e7:54:ba:8a:55:9e:19:3d:20:c9:3a:36:12:d9:dd:ae:e1:
         b0:d8:30:a6:9f:e7:97:71:64:35:55:a9:ce:97:5d:df:a8:ad:
         21:57:e7:74:e4:4e:0d:db:c7:ee:22:6a:1f:04:5a:9c:b6:9a:
         05:22:4a:c6:af:3b:32:4a:04:59:f0:69:94:0d:b0:fa:55:fe:
         32:84:f4:19:d3:ce:40:9d:0a:f6:cc:90:91:53:55:43:65:85:
         4e:41:cf:5a:80:80:49:3b:79:cc:66:d0:29:d0:bb:c8:bc:cf:
         59:05:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----