Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/7849EA763E0011ED84628D7EC4F9AE02.roa
File:                     7849EA763E0011ED84628D7EC4F9AE02.roa (raw, json)
Hash identifier:          rn8Y+d/TQEkWfJt4s5P1Asz8rIB1XSwpYDIoFTy72dk=
Subject key identifier:   08:3B:C3:98:F4:14:C0:F2:7C:6E:95:93:BD:3B:D9:5F:E7:FC:46:09
Certificate issuer:       /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial:       69
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/7849EA763E0011ED84628D7EC4F9AE02.roa
Signing time:             Tue 27 Sep 2022 08:26:16 +0000
ROA not before:           Tue 27 Sep 2022 08:26:16 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     9824
IP address blocks:        110.134.114.0/23 maxlen: 24
                          2001:ff0:7fe::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
        Validity
            Not Before: Sep 27 08:26:16 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6332b3a8-1a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:e1:fd:95:20:d3:e1:ef:85:6a:11:a1:bc:
                    36:5c:14:8c:c5:86:ea:21:be:c9:7e:c9:16:0c:74:
                    65:3c:3c:01:8f:86:c3:18:14:f9:54:3f:7d:f1:20:
                    b5:10:e0:9c:3e:94:82:8e:b5:e6:ae:22:8a:2a:d7:
                    e3:82:1d:fb:6e:f8:7e:c0:c0:5e:d4:0f:d9:96:3a:
                    ca:3c:23:28:12:46:d1:70:79:2f:5a:d5:63:ac:5b:
                    73:e4:63:ee:76:89:e7:78:fc:80:fe:a0:07:96:e1:
                    0b:67:30:34:f4:1e:84:59:7c:cd:1b:0a:eb:41:8f:
                    dd:2d:df:84:5d:33:68:7e:18:af:5e:71:9b:d0:09:
                    3d:fc:6b:48:7a:87:b3:96:2f:d5:ba:43:fa:03:c3:
                    45:f8:80:d7:f9:b6:a3:f9:27:2b:4c:c7:95:65:b1:
                    d4:8e:59:51:05:b1:db:4e:b9:bf:e0:fd:0f:d5:3e:
                    9e:84:13:58:38:a0:65:cf:26:32:e3:e9:37:e9:57:
                    98:51:8a:53:1a:17:b3:d5:a1:13:97:f6:ba:88:74:
                    66:c3:13:04:c3:b2:78:88:f2:0e:b0:bb:6f:7d:10:
                    d5:0c:19:7f:3d:ad:6a:d2:01:14:56:3e:3e:31:a9:
                    4e:05:fd:07:2c:f1:9e:d2:15:35:91:8f:4b:6b:84:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:C3:98:F4:14:C0:F2:7C:6E:95:93:BD:3B:D9:5F:E7:FC:46:09
            X509v3 Authority Key Identifier:
                keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/7849EA763E0011ED84628D7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.134.114.0/23
                IPv6:
                  2001:ff0:7fe::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:13:28:f3:cd:44:22:d4:36:cc:56:13:57:93:c3:79:2a:de:
         de:d2:e8:28:02:8d:cc:74:03:ba:d1:00:f0:dc:da:3b:ec:88:
         b9:6b:e0:64:3b:f8:d2:04:9a:a8:0d:30:ff:97:b5:ee:3a:17:
         af:4d:95:48:98:1c:a2:c8:73:f4:5d:90:08:d2:5d:18:45:dd:
         fa:4c:90:ed:1f:76:ca:ed:c2:79:d1:e1:b7:5f:4f:f1:05:e2:
         e4:dc:ff:05:36:1d:d2:df:b6:83:d9:72:8e:0a:93:95:3b:b7:
         f4:a0:da:75:1d:f7:5d:a0:f3:7b:c9:4c:fb:d3:2c:4b:e8:08:
         43:f7:3d:82:b9:6b:0f:f0:10:c6:74:c1:31:7b:78:51:aa:3f:
         25:6a:56:b0:3d:f2:9e:68:91:6c:07:68:07:2f:86:c3:12:e5:
         16:e1:5a:b3:64:16:86:59:14:4f:67:b0:02:c2:a6:c3:b6:57:
         ac:67:5a:60:e8:c7:e8:b5:29:57:05:45:ee:3b:48:37:75:58:
         8e:49:83:ee:80:e5:0a:2e:a0:10:bc:de:e4:bd:59:d6:cf:fc:
         78:cd:1d:b5:83:d4:3f:fc:32:bd:9d:2e:ba:b9:89:e3:1b:d5:
         fd:65:e0:ff:3f:c8:a8:92:b0:13:7e:39:fa:c3:68:4f:28:db:
         ba:e8:53:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RUI0MTExMC8GA1UEBRMoOUY0M0IyNkFCQTcyOEU4MkY2MjYzMzdGQTI2NTIxRjhF
NjlGQkJDQjAeFw0yMjA5MjcwODI2MTZaFw0yMzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzMzJiM2E4LTFhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/yeH9lSDT4e+FahGhvDZcFIzFhuohvsl+yRYMdGU8PAGPhsMYFPlUP33xILUQ
4Jw+lIKOteauIooq1+OCHftu+H7AwF7UD9mWOso8IygSRtFweS9a1WOsW3PkY+52
ied4/ID+oAeW4QtnMDT0HoRZfM0bCutBj90t34RdM2h+GK9ecZvQCT38a0h6h7OW
L9W6Q/oDw0X4gNf5tqP5JytMx5VlsdSOWVEFsdtOub/g/Q/VPp6EE1g4oGXPJjLj
6TfpV5hRilMaF7PVoROX9rqIdGbDEwTDsniI8g6wu299ENUMGX89rWrSARRWPj4x
qU4F/Qcs8Z7SFTWRj0trhH43AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUCDvDmPQU
wPJ8bpWTvTvZX+f8RgkwHwYDVR0jBBgwFoAUn0OyarpyjoL2JjN/omUh+Oafu8sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQjQxLzE4RDc5NTU2MTdC
RTExRUQ4QjMyNTkzOEM0RjlBRTAyL24wT3lhcnB5am9MMkpqTl9vbVVoLU9hZnU4
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbjBPeWFycHlqb0wySmpOX29tVWgtT2FmdThzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUI0MS8xOEQ3OTU1NjE3QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi83ODQ5RUE3NjNF
MDAxMUVEODQ2MjhEN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAW6GcjAPBAIAAjAJAwcBIAEP8Af+MA0GCSqGSIb3DQEBCwUA
A4IBAQASEyjzzUQi1DbMVhNXk8N5Kt7e0ugoAo3MdAO60QDw3No77Ii5a+BkO/jS
BJqoDTD/l7XuOhevTZVImByiyHP0XZAI0l0YRd36TJDtH3bK7cJ50eG3X0/xBeLk
3P8FNh3S37aD2XKOCpOVO7f0oNp1HfddoPN7yUz70yxL6AhD9z2CuWsP8BDGdMEx
e3hRqj8lalawPfKeaJFsB2gHL4bDEuUW4VqzZBaGWRRPZ7ACwqbDtlesZ1pg6Mfo
tSlXBUXuO0g3dViOSYPugOUKLqAQvN7kvVnWz/x4zR21g9Q//DK9nS66uYnjG9X9
ZeD/P8iokrATfjn6w2hPKNu66FMb
-----END CERTIFICATE-----