Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
File:                     BB1C2F88B1AD11ECA2E52046C4F9AE02.roa (raw, json)
Hash identifier:          vQGFcuuZWnT5PncffxIEZ6UrmgDtN8Q7EwUjBxDR1RE=
Subject key identifier:   9A:10:6A:50:64:75:31:18:5C:7A:70:80:4F:84:1A:10:53:11:D4:E2
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3173
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
Signing time:             Fri 01 Apr 2022 11:20:27 +0000
ROA not before:           Fri 01 Apr 2022 11:20:27 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     17557
IP address blocks:        202.69.33.0/24 maxlen: 24
                          202.69.34.0/24 maxlen: 24
                          202.69.36.0/24 maxlen: 24
                          202.69.40.0/24 maxlen: 24
                          202.69.41.0/24 maxlen: 24
                          202.69.42.0/24 maxlen: 24
                          202.69.43.0/24 maxlen: 24
                          202.69.45.0/24 maxlen: 24
                          202.69.46.0/24 maxlen: 24
                          202.69.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12659 (0x3173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Apr  1 11:20:27 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6246dffb-6bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:b7:f8:ff:1c:3e:1f:6a:3a:4f:5f:d1:bc:
                    6a:3b:8d:01:19:c6:8a:0a:66:da:5b:88:07:5e:16:
                    65:c3:94:a0:8c:66:0f:28:1e:9b:99:03:c6:11:da:
                    b9:41:55:73:9c:bb:d7:fe:04:45:4f:fd:18:0f:6e:
                    61:31:38:7c:a9:94:a0:86:02:2f:df:87:1d:ba:9a:
                    76:2e:02:ba:fa:50:7c:2b:75:12:c6:18:b5:4f:9c:
                    da:9d:96:17:61:b4:a7:4c:fd:30:8d:2d:02:14:46:
                    2d:6c:a6:c3:bf:d7:23:95:1b:19:17:ad:af:6d:a6:
                    d3:8b:a2:20:b3:0b:6b:a0:78:b8:e8:8f:29:6c:19:
                    51:95:24:c0:90:6b:e2:c2:13:8d:fe:6e:ee:6a:aa:
                    a6:b9:71:dd:ca:08:b0:a0:7f:a9:a5:43:64:b7:0c:
                    6b:33:c2:7a:b4:7e:3b:01:63:c7:d4:b1:13:bc:e4:
                    b7:de:ea:f2:5e:1c:80:1b:57:89:85:c1:80:fe:0d:
                    16:82:e2:74:b2:01:07:a5:ab:51:de:45:42:fc:7a:
                    1a:14:6f:a0:d1:d2:0a:82:3c:36:71:7d:7d:a7:00:
                    06:d0:11:b4:45:5b:8b:27:16:4a:0c:b6:4d:c7:c1:
                    89:3d:e8:e0:09:1f:5d:42:e6:09:64:b8:f1:fa:74:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:10:6A:50:64:75:31:18:5C:7A:70:80:4F:84:1A:10:53:11:D4:E2
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/BB1C2F88B1AD11ECA2E52046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.33.0-202.69.34.255
                  202.69.36.0/24
                  202.69.40.0/22
                  202.69.45.0-202.69.47.255

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:5c:1f:af:32:75:8e:bb:16:ad:1a:8c:df:ff:4c:a9:7d:
         79:88:19:6b:8b:48:30:f3:96:71:36:7d:91:41:4b:30:e8:68:
         71:03:fc:42:1c:bf:6e:a6:15:b7:80:a7:b7:8e:d2:09:03:36:
         98:3d:8a:c5:5e:80:1c:c2:0f:9b:14:ed:97:fb:48:be:7c:df:
         42:4a:43:08:2f:17:89:1e:87:0f:59:42:a7:8e:9d:83:56:1d:
         51:3f:0b:95:21:c2:fe:4e:7a:3d:64:ee:ad:93:6b:2d:d9:b7:
         95:c9:96:2a:6c:cd:61:e5:0e:a0:94:a4:2b:29:ef:ac:67:7d:
         93:da:f0:de:3c:1f:3a:41:9c:bd:18:14:2c:1b:81:22:31:73:
         03:e0:eb:1f:49:65:19:bc:5d:bb:9f:16:59:c9:55:dd:a1:b2:
         42:25:15:41:ff:ee:59:d5:a8:09:b8:b8:c8:38:79:0d:90:62:
         6d:85:80:34:bf:e2:58:1c:97:d2:c5:5c:c7:99:1b:2a:7a:8d:
         9c:63:5e:ad:84:86:88:7a:4d:03:e4:dd:74:0c:b3:fa:37:54:
         51:bd:1c:95:e1:f0:2b:ed:a9:70:7c:8c:75:fb:d4:2c:13:03:
         34:44:d0:9c:de:e1:ed:7c:86:98:98:77:34:37:cd:de:ac:06:
         53:09:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----