Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4909BE965711E9B8F19269C4F9AE02.roa
File:                     CA4909BE965711E9B8F19269C4F9AE02.roa (raw, json)
Hash identifier:          bAyPz7M28evqjpzq88FxEUGmdskaV7pvVZvpIzA89ZY=
Subject key identifier:   3A:62:98:A1:C7:03:A8:70:96:D5:18:42:A4:D1:0C:4B:53:A8:A9:6E
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0A8B
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4909BE965711E9B8F19269C4F9AE02.roa
Signing time:             Sun 08 Aug 2021 07:15:10 +0000
ROA not before:           Sun 08 Aug 2021 07:15:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     139248
IP address blocks:        2404:f4c0:5000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  8 07:15:10 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=610f847e-c21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:f2:f3:f5:89:28:3e:24:09:70:ee:31:cc:
                    ec:f6:8a:c9:2a:48:39:48:78:7e:1a:c4:62:77:63:
                    b5:77:ec:70:fe:0a:28:c9:09:e1:24:dc:6e:6e:68:
                    ea:a8:d2:f1:c9:6f:5f:80:10:c7:23:61:7f:2a:66:
                    98:af:ae:21:c1:51:d2:c2:d8:ea:5f:57:fa:51:eb:
                    1d:8a:38:2a:cf:0a:77:a1:9e:9a:b6:79:18:69:c9:
                    90:3e:ab:82:cb:2f:1c:93:51:c6:0d:40:4d:a0:1f:
                    cf:a1:96:0d:2c:18:6b:9e:c7:50:30:bb:3a:bd:e7:
                    73:f5:45:1d:79:c8:50:c5:3d:86:7a:2f:13:50:f6:
                    93:65:3e:75:e0:13:a6:b8:bc:70:5b:86:b0:b7:33:
                    59:fa:a1:2f:9f:c4:18:d6:33:41:cc:55:02:f6:6c:
                    f3:11:de:5d:60:80:bb:73:0d:32:2e:77:1d:ff:9c:
                    1d:30:56:ef:44:45:02:09:ea:e0:3c:43:f7:0f:80:
                    46:4a:31:47:96:7b:0d:35:93:a7:cf:af:7b:4d:31:
                    bb:01:23:9d:15:0b:08:5d:31:cf:1a:3f:75:b4:39:
                    b9:8c:2a:fe:43:8c:7d:df:90:0f:fc:df:fd:ef:c4:
                    a0:20:d3:40:c4:a3:62:86:2a:ab:22:42:1a:66:2e:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:98:A1:C7:03:A8:70:96:D5:18:42:A4:D1:0C:4B:53:A8:A9:6E
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4909BE965711E9B8F19269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:03:0b:ae:b3:04:3c:1b:c4:a8:69:ca:db:4b:cc:b1:3b:69:
         a7:4b:c3:48:02:1a:12:19:e7:6a:14:f4:fd:fc:6f:76:2c:05:
         64:2e:3e:d6:a5:13:34:6e:9b:c0:bf:34:b3:af:17:d2:b0:c0:
         1b:30:3b:ae:db:8f:00:79:b1:dd:75:01:11:9c:f2:88:a2:91:
         28:53:05:9b:b5:45:bd:5a:cd:f8:eb:5d:55:14:5c:ac:34:c8:
         71:7c:f9:f6:24:3d:8a:7e:01:e0:f8:35:fc:7f:dd:01:bf:08:
         84:a7:3f:1f:83:10:2d:48:60:fe:c4:12:2a:f8:dc:6d:0a:fc:
         1e:50:7f:fe:b6:fd:1d:e6:82:af:90:dd:63:cc:27:ee:cc:0d:
         25:5d:f7:77:e9:cd:75:36:41:69:a7:32:8d:de:4c:7c:ca:26:
         ec:c1:5a:6b:3a:5b:79:c1:e6:dd:4c:d4:df:bd:88:fa:4d:8d:
         97:c5:41:0d:75:01:9a:5f:42:d7:11:15:62:8f:38:7a:79:65:
         f6:f5:e1:f1:ee:eb:99:e2:30:fc:6d:9f:b5:31:1f:3d:9e:4e:
         88:04:a7:a4:9a:7b:e6:9c:b8:15:f7:4a:bb:63:07:d8:df:b2:
         d4:bc:45:5f:12:09:fe:1a:aa:45:9b:cc:9f:fd:7a:8f:62:fc:
         b0:d3:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----