Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/6954615A686C11ECA519F460C4F9AE02.roa
File:                     6954615A686C11ECA519F460C4F9AE02.roa (raw, json)
Hash identifier:          WdlB8S0Pxcc1UdJliRQLzpADQ+BVc301LM+GvFnhDxY=
Subject key identifier:   B8:40:78:FE:68:10:DD:23:1B:89:49:AA:7B:7D:02:3E:7C:9B:BE:75
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       0636
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/6954615A686C11ECA519F460C4F9AE02.roa
Signing time:             Mon 18 Jul 2022 10:27:49 +0000
ROA not before:           Mon 18 Jul 2022 10:27:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138622
IP address blocks:        114.129.11.0/24 maxlen: 24
                          2405:eec0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Jul 18 10:27:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62d535a5-a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:9d:7f:9e:1c:10:e3:1b:8b:0b:b2:7c:e7:
                    5f:95:01:c8:a0:bb:05:e3:81:99:21:6a:0d:60:06:
                    f2:d5:c3:59:18:00:6e:7d:31:58:b4:6a:1e:c6:a6:
                    29:21:e5:14:8a:df:a2:98:ea:54:07:2d:92:54:df:
                    d1:1c:cc:e5:50:72:5c:df:84:3a:19:7b:ab:46:ce:
                    b7:bd:4a:29:b4:3e:ed:26:06:2b:b9:a4:6f:fe:3d:
                    f9:4d:14:07:f9:a2:c4:4c:bc:4d:53:9a:99:ac:d3:
                    99:2a:90:7e:f1:91:2b:28:06:ce:32:76:10:94:1d:
                    27:59:7a:85:09:f7:10:3a:2d:85:0c:cd:1a:39:0a:
                    29:e7:be:f1:1c:22:6c:b7:e7:30:89:16:9a:b9:21:
                    d4:ee:7c:aa:1e:73:11:39:49:86:69:ba:3f:7b:a7:
                    21:d4:1b:1b:0e:93:72:a9:15:9c:99:5e:2c:d2:a0:
                    58:40:ec:3b:81:06:d9:61:11:59:1d:ee:48:e1:0f:
                    47:f1:e2:7d:60:6d:c1:5a:5a:56:b3:aa:fb:18:cb:
                    00:1b:13:dd:61:44:0a:61:af:9e:f8:a3:d6:ad:3b:
                    07:96:0e:ba:6c:b1:80:49:fd:d3:27:4e:3c:80:b4:
                    7f:b5:ae:c6:ff:5f:7e:17:cd:6c:69:e9:f5:78:52:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:78:FE:68:10:DD:23:1B:89:49:AA:7B:7D:02:3E:7C:9B:BE:75
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/6954615A686C11ECA519F460C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.11.0/24
                IPv6:
                  2405:eec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:ec:5b:df:28:35:c0:11:18:89:2d:a4:82:e1:0a:4e:85:
         ed:f4:32:0c:a5:6a:dc:d9:05:04:1a:39:8e:ed:a2:5d:35:b2:
         dd:c6:7c:19:c7:39:e1:9b:1a:27:d2:fa:43:a1:a8:de:a1:dc:
         71:aa:de:fb:3e:60:19:cb:35:9d:94:10:62:7e:52:32:79:13:
         5a:bc:8c:53:e1:bf:77:f0:49:74:75:46:d4:3f:b2:46:ee:18:
         ad:40:91:a3:2c:6e:7f:da:c2:d0:af:b9:cf:a7:59:cb:bd:e3:
         7e:f9:8d:3c:8b:15:9b:08:32:51:2e:df:1a:00:83:7f:2d:20:
         a7:63:03:82:37:3f:1e:22:86:7c:45:12:48:77:a0:b8:a1:9e:
         c9:df:e8:fc:e1:9d:87:78:24:26:d4:ef:f3:76:76:55:82:32:
         13:13:0d:53:1f:e1:1b:dc:d2:77:fb:b8:4d:b6:40:4f:ce:fb:
         c2:ef:a4:a7:49:73:11:06:c3:58:c1:fb:b5:62:a2:4c:c3:8b:
         54:fa:9a:69:b4:53:eb:cc:73:f1:3b:16:f5:02:54:59:86:fe:
         0e:45:0b:74:c7:ce:41:a8:b7:25:e2:b3:b0:8b:89:fe:98:75:
         b9:e2:55:9a:34:5f:f0:45:18:db:19:5c:4c:43:b6:f5:6a:55:
         4c:ce:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----