Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/A3BF70BCF21611EC8865A00EC4F9AE02.roa
File:                     A3BF70BCF21611EC8865A00EC4F9AE02.roa (raw, json)
Hash identifier:          eUpK/5No1qquAzm9Zq+JuaCMtNzHafPLpoPtzkscFgU=
Subject key identifier:   3F:2C:31:B5:66:22:C2:42:0A:E7:26:09:B5:55:65:7D:95:3B:46:4E
Certificate issuer:       /CN=A91AC0D1/serialNumber=E93831CCD93F3CCB562D50AF383E9FDA64F7943A
Certificate serial:       0B63
Authority key identifier: E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/A3BF70BCF21611EC8865A00EC4F9AE02.roa
Signing time:             Wed 22 Jun 2022 10:32:39 +0000
ROA not before:           Wed 22 Jun 2022 10:32:39 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     7645
IP address blocks:        128.184.0.0/16 maxlen: 24
                          139.132.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2915 (0xb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0D1/serialNumber=E93831CCD93F3CCB562D50AF383E9FDA64F7943A
        Validity
            Not Before: Jun 22 10:32:39 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=62b2efc7-3ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:4a:eb:a0:0a:76:bf:63:cb:18:6a:08:78:
                    06:97:2c:d7:58:d4:27:28:72:d2:39:5a:78:bf:44:
                    a2:ab:29:cd:11:98:cc:bb:8d:b2:6e:f4:03:d8:f8:
                    89:2b:75:45:dd:2a:d5:a1:52:e3:6b:71:d8:4f:1c:
                    24:cf:36:c9:9c:8a:57:30:d5:c6:04:d4:0b:78:1c:
                    c3:aa:54:d5:45:07:db:78:94:08:80:45:2a:b9:76:
                    3a:0b:0d:b3:44:0d:1f:a8:f5:90:22:a7:a1:5b:10:
                    43:7d:08:59:94:4b:13:a0:65:47:2f:e4:9b:c9:cc:
                    95:ed:4d:59:a2:f8:36:bb:f3:c1:6a:a5:31:b1:18:
                    aa:45:55:d9:c4:aa:ad:3d:57:42:21:46:89:6c:af:
                    40:1f:d1:d7:84:38:16:c0:e9:ec:00:fe:91:ba:f3:
                    06:e8:ad:97:ae:86:98:e6:05:b0:f4:b6:5c:57:04:
                    01:24:16:9d:a6:8a:5d:b2:4d:7f:7e:f1:7d:8b:28:
                    5e:56:f5:85:e7:f1:67:74:af:c9:07:5c:60:af:a2:
                    1f:9e:11:69:51:8c:e3:70:2a:e1:f5:8f:b2:f1:6c:
                    8b:23:0a:0d:40:b5:9c:2e:b8:55:41:5d:0f:ab:56:
                    51:f9:87:10:17:7a:35:27:11:c3:f7:43:11:0c:7a:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:31:B5:66:22:C2:42:0A:E7:26:09:B5:55:65:7D:95:3B:46:4E
            X509v3 Authority Key Identifier:
                keyid:E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/6TgxzNk_PMtWLVCvOD6f2mT3lDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/A3BF70BCF21611EC8865A00EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.184.0.0/16
                  139.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:b3:94:df:e7:6e:01:a7:ba:fb:e3:f4:c7:84:08:2f:60:39:
         45:73:45:77:81:95:b4:b0:ec:19:ce:79:65:2c:a0:3f:37:8a:
         71:16:2b:8e:84:ac:bf:70:ef:9f:ef:a7:88:95:b3:3e:b0:71:
         84:e9:61:cb:9b:c0:e3:4b:d3:a6:4d:12:15:f9:90:9f:e6:6f:
         11:b5:c7:be:92:c5:ef:aa:7c:ac:6f:c9:8f:d3:fe:71:64:68:
         d1:f7:8a:ba:0d:8f:c1:0e:31:f9:06:92:95:8d:bc:50:d1:e8:
         8a:9d:f3:fd:e3:d3:3f:dc:5e:73:77:92:6b:22:68:07:f0:cc:
         4b:c6:97:81:8c:3f:bf:60:3c:90:b8:c8:c0:69:c4:26:69:d2:
         8e:41:40:62:33:5f:9e:c1:42:4e:4b:6b:26:6d:31:00:bd:cf:
         de:e2:90:11:52:2c:9f:b9:ee:4f:f9:96:b0:d0:4b:e2:d0:ca:
         1e:59:86:d5:7b:94:8c:f0:dd:a0:ce:22:fb:f2:1c:e1:d7:3d:
         84:be:30:12:2d:98:1d:ff:92:70:3f:0b:ee:91:cb:a3:a9:4b:
         b0:3f:e1:77:6b:3b:57:01:9e:e4:f8:89:00:44:e0:2d:89:4d:
         47:07:6b:1e:6a:a5:8a:4f:ee:c8:a3:1e:af:b4:9f:21:23:07:
         1f:5d:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----