Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/BC5F9796212611EAA2FE8A19C4F9AE02.roa
File:                     BC5F9796212611EAA2FE8A19C4F9AE02.roa (raw, json)
Hash identifier:          x2rGylYN64h0dXNhEdgbO8rq6XQxvvtFpoxDSdeiS8A=
Subject key identifier:   52:3A:47:8B:25:72:EF:7F:39:F1:66:4C:D0:03:C8:00:3F:00:E4:5C
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1B28
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/BC5F9796212611EAA2FE8A19C4F9AE02.roa
Signing time:             Sat 16 Apr 2022 17:03:10 +0000
ROA not before:           Sat 16 Apr 2022 17:03:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9297
IP address blocks:        43.248.44.0/22 maxlen: 22
                          103.74.188.0/22 maxlen: 22
                          119.252.0.0/19 maxlen: 19
                          2401:1400::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6952 (0x1b28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: Apr 16 17:03:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=625af6ce-e8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:96:6c:1e:d0:b9:c7:e4:8f:a4:d6:03:04:
                    07:38:fa:c7:f3:55:4e:13:2b:1a:3b:fc:58:de:4d:
                    ab:ac:c3:bd:42:4a:95:bd:6a:68:f0:56:25:d0:af:
                    6d:ba:b4:49:76:2a:3f:a8:4c:6b:3b:96:34:c2:83:
                    03:9b:6e:a9:27:79:fa:08:e4:8d:79:c9:72:70:92:
                    cf:e2:be:96:c3:ac:97:f6:56:c0:c3:57:07:ae:29:
                    1c:09:1b:bd:b0:3c:9b:b8:44:8a:79:dd:52:80:9c:
                    77:56:e4:6d:98:2a:26:01:bb:e6:d1:2e:f4:80:fe:
                    92:f5:44:77:08:13:fa:95:37:9f:4f:df:98:30:8e:
                    b7:8d:da:46:dd:ba:49:36:45:22:a7:c9:27:79:1f:
                    d8:13:b8:b1:2c:60:0c:55:93:e7:dc:11:71:6b:ce:
                    f8:0e:82:0b:24:68:0f:18:5e:cd:13:f9:28:6c:95:
                    e4:c3:05:b2:34:02:d8:2d:aa:76:fe:25:7a:c0:0d:
                    48:0e:c7:8a:b2:82:8f:a6:aa:96:6a:0a:a5:77:2f:
                    98:13:93:12:f0:10:fc:d6:86:60:4c:c1:5b:68:c3:
                    66:8b:d8:1a:af:b2:fe:4f:33:11:fd:66:14:18:b8:
                    2e:fd:da:ef:76:76:d6:3f:7c:d2:7e:b3:b8:b4:91:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3A:47:8B:25:72:EF:7F:39:F1:66:4C:D0:03:C8:00:3F:00:E4:5C
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/BC5F9796212611EAA2FE8A19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.44.0/22
                  103.74.188.0/22
                  119.252.0.0/19
                IPv6:
                  2401:1400::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:d7:b1:3f:02:52:ba:52:ba:30:95:0d:69:78:33:e6:1b:
         40:a5:8b:b3:da:88:fc:20:0f:22:84:47:e0:a3:64:c1:f9:6b:
         6d:18:58:c9:c1:9f:72:3b:5b:fd:04:7f:53:98:2b:33:fa:63:
         af:d7:8f:16:ff:4b:93:66:75:c3:74:83:42:ff:90:9f:3d:d0:
         73:04:77:f5:44:4b:e6:98:2d:39:4b:02:c8:5f:76:9e:b8:87:
         d8:d6:85:00:92:a7:89:31:2b:ea:b4:d5:6f:dd:a3:bd:16:9e:
         b5:e9:d0:84:b1:6b:58:9c:f4:72:a1:39:0f:fe:f0:1b:f0:d2:
         ed:20:95:ca:03:b7:35:9f:c9:0c:91:7b:a0:36:e4:0a:ff:bd:
         86:0c:4e:f6:49:1a:ee:66:01:ab:3f:05:a5:10:ea:27:bd:08:
         ac:9e:9d:23:d8:40:4e:80:1c:35:fe:ed:2c:20:69:65:96:d4:
         17:eb:b8:7a:6f:a5:12:bd:5f:c7:4b:6c:03:4e:ec:8e:d2:7e:
         eb:48:6c:9f:9b:b0:12:b1:9c:da:f4:f6:86:ca:92:a9:34:5d:
         af:a9:92:17:35:86:e7:e6:1e:7c:24:8a:97:f1:8b:c7:9f:fc:
         f8:04:85:97:ce:5c:c2:ff:f6:be:19:f6:e4:01:03:6d:ab:53:
         1d:32:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----