Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7262B056CA7711EAA7EF2F10C4F9AE02.roa
File:                     7262B056CA7711EAA7EF2F10C4F9AE02.roa (raw, json)
Hash identifier:          ogQNdrvhW7hwTb8UVzDAjbrvHFc5+VnOtXlZBTQWz6c=
Subject key identifier:   69:35:3A:39:E3:02:75:D7:06:E9:8A:A9:60:05:6C:C4:B5:90:8C:92
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       07EE
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7262B056CA7711EAA7EF2F10C4F9AE02.roa
Signing time:             Wed 11 May 2022 10:10:44 +0000
ROA not before:           Wed 11 May 2022 10:10:44 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     135395
IP address blocks:        2406:840:e020::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 11 10:10:44 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=627b8ba4-72c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:74:4f:9e:5c:29:af:00:5d:df:e0:39:71:
                    0b:0e:f0:59:6e:98:60:7a:71:c8:87:2f:40:8d:4e:
                    9f:25:7c:31:be:aa:8d:30:c1:9f:70:be:f7:30:60:
                    40:41:6a:e3:c4:16:34:7b:c0:d6:53:aa:ba:0d:af:
                    49:b8:81:2d:61:1b:7d:a2:0e:8c:7a:67:1f:7b:d0:
                    96:41:f1:04:e4:5a:8d:86:4a:04:87:31:fe:0a:07:
                    ca:39:29:72:e6:c0:a6:a8:c5:1f:39:12:37:62:df:
                    b7:0d:79:a2:6a:06:0f:07:a5:11:81:68:c4:44:1d:
                    d1:85:2b:4c:79:6e:6d:c5:3a:2a:1d:29:37:1e:98:
                    1f:ab:df:00:ab:82:8c:e5:de:89:b8:ed:30:88:23:
                    65:56:a8:bf:e5:ce:3a:43:11:b4:d0:31:e3:3f:8b:
                    74:75:50:ff:e6:7a:c7:4e:b5:63:08:df:28:e9:f2:
                    68:91:8e:d3:4b:8c:aa:76:ea:3f:28:ee:82:19:43:
                    45:86:d8:29:b7:4a:1f:16:a8:d1:ca:36:8b:f8:51:
                    d9:64:41:85:1a:8a:2e:01:70:fa:aa:ce:46:fa:ee:
                    ff:0b:99:72:32:5c:c7:79:cc:b3:5d:f0:1a:a3:b0:
                    65:a5:b0:9d:9a:8b:94:c2:11:60:63:79:18:aa:a7:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:35:3A:39:E3:02:75:D7:06:E9:8A:A9:60:05:6C:C4:B5:90:8C:92
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7262B056CA7711EAA7EF2F10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e020::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:eb:48:64:f5:d0:0f:9c:8d:e7:30:8c:80:09:07:44:76:
         d2:48:7c:35:ae:f3:a7:21:28:a3:68:59:93:14:e7:a6:32:a8:
         35:c3:e8:df:3e:5d:28:e0:2b:78:32:48:9e:c9:10:69:9e:31:
         6d:86:b7:55:78:27:84:12:17:a4:49:e3:b1:93:a1:95:85:44:
         6b:ba:d7:3e:14:7a:df:b7:7f:5e:2e:7c:8e:ec:cd:99:3a:9b:
         69:3c:80:a5:9f:dd:bc:57:e1:98:6e:50:52:40:7c:40:4d:44:
         4a:e2:ad:92:b5:14:cc:28:11:52:43:e6:68:a4:db:2d:20:b0:
         7e:89:e4:04:6a:f8:e3:83:dd:8f:3e:e5:e2:ff:87:6e:40:08:
         5a:da:18:92:2d:2e:0f:68:06:bd:a3:ef:2e:bf:78:f2:2c:28:
         21:eb:14:47:01:cb:b5:0c:c0:27:08:38:d0:b8:04:4f:6f:fc:
         c5:4b:e6:02:51:3d:38:1f:d4:cf:fe:19:4c:36:db:85:b1:aa:
         7b:49:c0:33:4f:7e:ae:74:52:36:f9:31:3f:ba:17:48:e1:33:
         97:2b:3c:e9:5f:94:74:cc:38:aa:85:af:92:73:55:09:ee:cc:
         3d:44:da:28:06:ad:e6:e4:e4:a7:ec:48:75:29:d8:eb:22:ef:
         41:9e:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----