Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4979C0FBD111EC9DF24F3BC4F9AE02.roa
File:                     CA4979C0FBD111EC9DF24F3BC4F9AE02.roa (raw, json)
Hash identifier:          Om6n+SSTsrd+d+6sS1BKvFTr5WDxcNJOKLG2cgUt/2U=
Subject key identifier:   E4:5E:8B:40:DD:4A:F5:52:52:8C:1C:84:B4:F9:E3:B6:77:19:49:F0
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0D8A
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4979C0FBD111EC9DF24F3BC4F9AE02.roa
Signing time:             Mon 04 Jul 2022 19:45:00 +0000
ROA not before:           Mon 04 Jul 2022 19:45:00 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     206315
IP address blocks:        2404:f4c0:5000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Jul  4 19:45:00 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62c3433c-e47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:ca:3e:1e:5f:d9:ce:80:ee:56:4c:67:23:
                    24:9e:26:6c:28:11:8b:85:53:02:90:1c:22:5e:41:
                    26:bc:10:ec:33:48:23:c7:e2:1f:c9:07:35:12:c8:
                    88:b4:92:09:32:86:7a:dc:1d:a9:75:b4:c6:c4:44:
                    a9:16:3a:c5:73:50:4d:30:31:af:7e:31:f2:b3:8a:
                    35:a6:98:92:5d:f7:41:d6:f7:25:a7:36:91:46:82:
                    25:7f:84:5e:66:20:4e:9b:b4:c9:d2:85:38:31:92:
                    63:00:54:15:3e:70:7d:99:28:02:ba:2f:f2:e7:49:
                    58:5f:28:ee:86:d4:07:23:d4:53:00:f8:88:e6:f2:
                    36:a5:61:1e:14:7d:87:0e:7d:53:ac:39:9c:eb:fd:
                    59:b2:8f:76:51:42:62:e5:99:33:aa:a0:fd:22:d0:
                    d7:ad:5c:fa:67:81:8f:5e:d5:f8:1c:73:10:0b:24:
                    bf:5a:37:64:7e:27:18:67:e6:a5:bf:5d:14:a5:a4:
                    6f:52:e3:5c:6e:6d:95:5d:2f:f2:75:e7:d0:b4:9d:
                    0f:f8:8f:43:59:65:20:5a:bf:e5:be:2c:b3:ab:e6:
                    8c:d4:5f:da:0b:f6:b8:95:62:a3:9f:26:b7:5b:e4:
                    65:cc:4b:d9:cd:bb:d6:ff:75:f8:ac:09:5d:63:9d:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:8B:40:DD:4A:F5:52:52:8C:1C:84:B4:F9:E3:B6:77:19:49:F0
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/CA4979C0FBD111EC9DF24F3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:55:4a:7f:68:fd:f3:7c:5c:42:d0:08:ed:5b:1d:db:29:
         81:d8:24:c7:73:9d:9d:0f:49:3b:97:27:77:64:48:f4:94:2f:
         97:a1:b0:8d:73:1a:9c:c5:97:dd:df:e1:f8:d1:5e:e0:b8:07:
         ec:29:b7:c0:b9:29:47:ee:6d:0f:6e:6d:71:61:2f:94:35:3e:
         0f:59:83:3f:b1:18:50:c6:ef:5f:20:e2:1d:18:a8:2b:9b:75:
         be:d0:d2:14:63:dc:0f:25:d2:8c:d2:29:5e:39:b5:26:59:f5:
         aa:fc:3d:b4:b7:47:36:dd:f8:77:be:3f:d1:87:a6:9a:3b:ca:
         e2:e1:94:4f:1c:57:5a:e9:84:72:4f:8d:9c:31:cb:a1:d6:c1:
         c1:93:69:83:a9:b0:f2:a1:0c:32:c4:ef:f8:dc:5a:6a:e6:69:
         d4:19:8e:7e:94:ef:1e:02:a8:5c:98:2c:77:ae:f7:76:fe:6c:
         2b:e2:4c:69:32:f2:85:d8:44:1d:41:85:61:b9:d3:2c:61:a8:
         dd:34:5c:4a:18:8a:26:bc:e9:ca:09:5e:1d:24:9a:56:fc:0e:
         c6:d7:ad:f7:11:e2:c5:8d:75:52:b5:e7:ef:f1:fb:dc:e5:2c:
         7e:7e:90:bd:eb:da:58:bf:85:a0:b9:04:39:d6:8c:87:69:cd:
         ee:3e:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----