Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0DE808A113F11EC8BF41D65C4F9AE02.roa
File:                     A0DE808A113F11EC8BF41D65C4F9AE02.roa (raw, json)
Hash identifier:          QwckNmAB9g/GGsljQJH0RPBg57Uq3qekImHbY/esUxk=
Subject key identifier:   C8:C0:AD:B8:D6:08:AB:BE:50:4D:22:8B:C6:10:4F:57:DB:22:2A:24
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       080D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0DE808A113F11EC8BF41D65C4F9AE02.roa
Signing time:             Wed 11 May 2022 10:11:17 +0000
ROA not before:           Wed 11 May 2022 10:11:17 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     142553
IP address blocks:        2406:840:eb00::/44 maxlen: 48
                          2406:840:fef3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 11 10:11:17 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=627b8bc5-aae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:7e:84:99:40:c7:8f:f5:9c:60:56:9b:66:
                    d8:98:76:c0:fe:eb:b2:cd:0b:25:86:68:31:c3:01:
                    6c:7b:24:d5:aa:63:8b:4f:46:47:1d:15:98:6f:22:
                    67:11:de:60:d0:2c:2f:9d:3c:6e:70:fa:8b:86:3f:
                    36:b8:5c:ef:b2:28:a2:87:1a:4b:47:26:07:91:87:
                    f5:c2:c2:61:5c:fb:e4:00:99:f7:ed:09:f3:c4:79:
                    24:f1:8e:8e:a7:b2:5f:8e:62:9b:12:cd:6f:7b:04:
                    b7:00:31:90:fa:19:64:7c:de:24:06:8d:71:5f:56:
                    59:c9:1c:31:01:ee:51:27:46:e5:12:5a:82:42:4a:
                    9e:f7:23:bd:56:cc:69:97:65:23:85:78:4a:cb:39:
                    96:e9:0e:6e:78:f8:6a:61:75:ca:8e:ba:37:1a:b0:
                    08:5c:18:dd:02:ea:d2:46:b0:ad:b5:f1:98:6a:eb:
                    44:fb:2d:b6:d0:aa:27:e7:f2:17:2a:f2:e4:78:0f:
                    b9:90:e4:b2:08:19:34:db:1d:7f:78:78:e5:54:22:
                    37:4d:68:ba:a6:ad:3f:b7:1d:7a:be:10:3e:e2:4b:
                    fa:9b:11:b1:33:c5:36:02:14:4a:a1:aa:43:0f:64:
                    de:28:5c:6f:bb:08:08:ed:95:1c:e1:ee:d9:e3:91:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C0:AD:B8:D6:08:AB:BE:50:4D:22:8B:C6:10:4F:57:DB:22:2A:24
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0DE808A113F11EC8BF41D65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:eb00::/44
                  2406:840:fef3::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:24:9c:1f:da:59:72:cb:0e:6b:e4:77:d7:ad:7c:42:a6:
         0c:68:38:62:69:7b:f6:10:3e:94:53:cc:29:00:aa:2e:4e:78:
         af:a9:21:6d:6e:95:54:ad:77:03:f5:a4:28:3c:9e:52:5d:17:
         80:4c:dc:a0:f1:7d:a4:3e:f8:8a:b8:ed:47:5f:4b:6b:ab:73:
         9d:19:5c:d9:4b:d6:42:b2:a7:56:7d:ee:c7:50:c1:49:48:fa:
         1a:c6:93:ae:02:5e:b3:52:94:5d:54:45:70:55:f8:77:7e:46:
         ee:fc:77:8d:fd:81:31:d8:d4:67:be:64:19:9d:39:30:be:92:
         03:cf:34:cd:4a:73:8a:ed:4f:19:92:80:01:9a:29:32:58:f7:
         51:09:6f:58:a6:cc:8b:1a:20:aa:75:88:0c:c2:32:3a:55:cb:
         40:e6:5f:dd:01:e4:71:0e:bf:74:8d:24:f4:80:09:9e:e3:12:
         bb:36:85:04:57:9a:00:c6:d7:5a:18:96:8c:43:ec:16:03:2b:
         82:ea:37:98:d5:01:5e:82:84:f8:b8:92:d6:df:bd:72:bf:65:
         11:d7:e7:33:9e:28:50:2d:28:b3:e5:f8:19:69:ff:4e:91:8f:
         6f:12:bf:18:b0:4e:c7:e2:2b:98:bb:6f:e7:ce:ef:30:0c:5c:
         62:b7:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----