Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6F5B56D4EF8711EBAF811557C4F9AE02.roa
File:                     6F5B56D4EF8711EBAF811557C4F9AE02.roa (raw, json)
Hash identifier:          NbyH3Mco//SZafyXbe4S2l7XRSURY7t8YNRn5qZt7Os=
Subject key identifier:   2B:A4:B2:2D:9E:64:3E:7E:BA:F1:D1:0C:78:27:FB:AB:05:72:9B:A4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0819
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6F5B56D4EF8711EBAF811557C4F9AE02.roa
Signing time:             Wed 11 May 2022 10:11:28 +0000
ROA not before:           Wed 11 May 2022 10:11:28 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     17920
IP address blocks:        2406:840::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 11 10:11:28 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=627b8bd0-31d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:d3:2d:f7:dc:05:85:5e:4d:e3:ae:9a:cd:
                    60:87:7f:93:51:c2:a4:f7:84:e5:cf:36:e5:1d:3d:
                    84:10:24:01:02:cf:08:9e:c5:38:2a:be:49:43:e7:
                    0f:e8:a8:ab:9c:c4:49:5b:16:52:0f:50:c5:29:4c:
                    1b:0b:31:03:38:c6:74:09:cc:4d:26:6c:b3:fd:ef:
                    55:6b:9a:12:67:61:59:14:79:97:78:0d:d4:74:ec:
                    fc:c7:e0:a2:46:2e:a0:a2:b3:57:f1:af:e3:44:4e:
                    53:98:2b:7d:d9:42:1b:f6:fb:32:5b:e4:f7:7c:33:
                    ce:05:dc:1f:e0:01:55:07:5b:83:28:73:83:7c:c0:
                    70:5a:f5:a6:0f:b5:10:8a:06:4b:fb:98:e6:91:ab:
                    27:93:7b:21:3c:26:01:b2:4c:6a:2a:fc:de:1d:3c:
                    7f:2a:ef:4c:bc:0f:26:40:ff:5e:b2:02:b2:41:98:
                    e4:19:ef:4f:47:8f:b3:15:ee:55:fc:eb:18:ee:6b:
                    14:ff:25:b8:3b:b8:c6:df:d5:d2:fe:a1:3f:f3:ab:
                    7d:0e:30:59:fe:27:a9:12:c2:7a:05:14:f9:79:19:
                    93:3d:a1:3d:0e:10:36:ec:8f:6d:66:a3:cc:e1:6d:
                    ff:e6:78:c8:13:1f:22:87:04:b1:89:b4:40:06:77:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:B2:2D:9E:64:3E:7E:BA:F1:D1:0C:78:27:FB:AB:05:72:9B:A4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6F5B56D4EF8711EBAF811557C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:2d:45:68:dd:59:99:2c:8f:ff:b0:c8:cb:bf:78:40:d8:
         24:e9:23:33:56:a4:b1:a2:75:2d:80:11:3f:cf:a0:c5:9f:5b:
         b1:c9:a3:a2:9a:35:be:a2:78:f9:66:81:4e:51:22:01:33:2e:
         2d:cd:63:75:5a:3c:68:58:96:5a:ba:23:e6:af:29:e5:d3:5b:
         c6:2c:47:f1:b8:3c:50:69:b4:44:76:5f:47:8f:64:33:37:fb:
         cd:8f:75:35:82:8e:ce:34:2f:7a:df:0b:51:3b:2a:49:12:47:
         63:21:4c:b6:ca:4f:d3:71:d6:58:ea:39:80:87:b3:6d:ca:36:
         ed:e1:18:a3:f0:66:d5:c4:96:63:ac:35:18:36:c6:75:fa:15:
         64:1c:8b:d5:4a:28:4f:33:58:c0:37:86:3d:e4:75:d8:a8:44:
         f1:a4:36:d4:05:e0:26:8a:3b:3f:1e:98:95:f2:01:0c:d1:d6:
         5b:d1:9a:15:82:b3:3d:91:77:1d:1b:0b:33:7c:00:81:da:36:
         26:69:cb:cb:0e:49:fc:60:7d:74:40:5c:f8:0a:7b:aa:7a:3b:
         52:a2:bb:e7:e3:af:91:77:b9:d9:1d:c1:1a:f7:e2:9b:aa:7b:
         23:c9:e6:2a:1e:76:ee:ae:e4:c0:da:ee:b3:55:5b:ce:a8:3c:
         7b:f2:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----