Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/35AC3C9ACCF011EC903FBB1DC4F9AE02.roa
File:                     35AC3C9ACCF011EC903FBB1DC4F9AE02.roa (raw, json)
Hash identifier:          hBEuZwfxhUvRfPdyd3r3EVe1oGdYF/9roWMRPUfLrwM=
Subject key identifier:   EA:92:6A:13:70:3C:79:44:21:C2:2B:73:EF:81:1C:CF:E5:FD:88:62
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       02
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/35AC3C9ACCF011EC903FBB1DC4F9AE02.roa
Signing time:             Fri 06 May 2022 03:54:21 +0000
ROA not before:           Fri 06 May 2022 03:54:21 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     668800
IP address blocks:        2400:7660:ffff::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: May  6 03:54:21 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62749bec-5cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:4c:02:a0:9e:fe:d2:c5:96:f8:27:af:41:
                    1e:16:55:27:49:f6:04:3a:7b:19:23:39:03:20:99:
                    f9:d8:40:56:35:39:a8:26:8a:df:c0:9f:be:6a:66:
                    74:d0:7d:f0:37:f5:06:68:40:27:3f:af:09:fc:02:
                    52:4d:6e:f1:e9:36:8f:3b:46:a7:21:82:d7:af:84:
                    78:73:43:92:94:4a:ed:3e:fa:f4:fd:88:28:9a:8f:
                    53:c1:f5:78:13:98:4a:c9:9c:a8:4a:6d:4f:a5:0c:
                    8c:c5:15:af:c3:03:37:f3:74:a8:ec:61:7a:5b:de:
                    30:b6:a0:f0:5b:bd:43:db:2b:ea:c8:a5:c0:5e:93:
                    86:30:47:22:e1:ce:61:45:9b:94:62:4d:da:89:94:
                    2f:56:83:e5:67:cf:26:5c:1c:c2:98:8f:8c:40:7f:
                    f8:87:c9:8f:1e:95:b6:5c:47:01:04:2a:08:43:f9:
                    9d:26:d9:d7:ef:d4:be:01:b8:81:f9:15:89:35:ac:
                    ff:96:1c:47:e2:0d:e8:cf:e2:90:ea:e1:b8:a1:ec:
                    fd:1b:66:ca:d9:a1:44:ce:e1:35:39:a9:56:62:c9:
                    aa:4a:99:fe:06:80:1c:e6:54:54:b1:8a:85:51:fa:
                    a4:8c:5b:58:6f:57:44:bc:7b:3b:9c:76:53:5b:47:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:6A:13:70:3C:79:44:21:C2:2B:73:EF:81:1C:CF:E5:FD:88:62
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/35AC3C9ACCF011EC903FBB1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7660:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:43:92:24:22:39:9b:f8:57:aa:2e:60:1c:29:f2:94:da:62:
         59:a0:2d:cc:52:1d:af:29:06:18:3c:a0:b1:ab:4c:b3:60:a1:
         5a:79:89:fd:a4:eb:a5:05:35:35:8f:2c:39:26:bd:a7:da:94:
         96:1c:a1:f3:c2:06:b2:5c:4b:8e:2d:3d:f0:7f:92:84:c5:52:
         fc:75:d1:d7:27:cd:6c:1a:88:29:08:c7:09:ea:57:9d:f7:94:
         d6:40:d7:eb:af:ca:16:34:69:d5:b5:cb:ff:7f:c5:ec:84:3a:
         a3:16:4e:46:15:e3:4e:b8:88:b5:8a:05:a5:9d:1e:79:fd:9e:
         39:30:45:08:77:62:74:14:66:3d:5b:6e:d9:58:8f:a2:da:8d:
         5c:c9:25:94:a8:7d:49:59:e3:5f:6c:5e:cf:33:ba:77:22:9b:
         9c:39:45:c8:f3:dc:c6:46:16:c0:77:96:06:10:38:7c:ad:81:
         42:e9:93:02:a3:44:4f:51:7b:e9:74:7b:e9:1e:0f:cb:68:f4:
         5c:bb:52:49:d2:d9:b0:61:07:39:65:7b:c9:1f:a8:48:30:bc:
         d2:28:a1:26:64:c0:d3:93:d4:c9:4b:10:5c:a0:4b:c9:23:d8:
         e3:4f:c3:20:35:66:44:0b:8e:c9:13:83:f5:0a:cc:60:9b:42:
         d9:0b:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----