Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/353C63FAAF0C11EB97BE6E75C4F9AE02.roa
File:                     353C63FAAF0C11EB97BE6E75C4F9AE02.roa (raw, json)
Hash identifier:          p22zwoL8l8K3DFn7PPSf9VbfHAIklX7P2wAsdOJ/K7Q=
Subject key identifier:   EE:93:67:26:90:5B:CA:7D:6E:8E:88:BE:83:32:8B:B7:94:FA:50:4A
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0A40
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/353C63FAAF0C11EB97BE6E75C4F9AE02.roa
Signing time:             Mon 24 Jan 2022 07:36:00 +0000
ROA not before:           Mon 24 Jan 2022 07:36:00 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     17117
IP address blocks:        210.57.36.0/24 maxlen: 24
                          210.57.77.0/24 maxlen: 24
                          210.57.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624 (0xa40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Jan 24 07:36:00 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61ee56e0-bf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:c7:d1:06:1d:d9:6c:8d:5d:56:36:bb:e6:
                    c9:b3:7c:70:a0:ef:7f:7a:35:59:78:ce:b3:49:ca:
                    b1:46:1e:82:a2:1b:df:50:d5:69:66:41:8c:b1:71:
                    f5:55:8f:61:12:0d:2f:41:61:34:e6:b9:d7:ea:49:
                    67:26:ec:62:e9:f2:5f:8d:bd:98:d0:ff:1e:f0:5f:
                    19:04:98:3a:f7:70:e9:b0:40:24:db:ba:77:87:bf:
                    33:17:fa:6e:6d:08:1c:8f:87:22:a8:74:57:64:da:
                    f7:10:65:19:30:b2:80:3a:51:23:d6:0e:67:77:f2:
                    c2:5d:7b:68:73:be:2f:06:45:64:a8:25:cd:9f:e8:
                    d2:94:8b:a2:d8:ce:92:e8:32:01:93:5e:8b:9c:6f:
                    a3:a3:0b:e2:c2:42:e0:c1:57:8a:c0:3a:d6:6f:fa:
                    8d:b7:fd:1a:69:47:42:b3:0c:f4:a9:20:6b:69:6b:
                    d1:48:04:58:96:b4:ba:78:e0:2b:73:22:9b:9c:80:
                    af:6a:fe:d4:18:d5:e7:02:32:9a:0d:4c:f6:9b:2c:
                    37:2c:ca:c5:ea:c4:b7:8a:6d:7d:50:11:1a:9c:1a:
                    1b:4d:49:5a:2f:10:a0:10:2a:86:45:cd:46:77:c1:
                    e4:80:81:28:ca:1f:f4:12:98:c6:11:83:f2:06:97:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:93:67:26:90:5B:CA:7D:6E:8E:88:BE:83:32:8B:B7:94:FA:50:4A
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/353C63FAAF0C11EB97BE6E75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.36.0/24
                  210.57.77.0-210.57.78.255

    Signature Algorithm: sha256WithRSAEncryption
         61:87:9a:55:e1:97:71:d3:13:e0:2c:4c:78:cc:69:71:51:cb:
         d3:b1:41:40:f4:1e:57:40:82:42:0c:ef:9d:bd:0e:a0:d0:16:
         ea:b5:43:f2:22:52:96:d0:9c:55:fb:bc:42:0c:04:ed:8f:7b:
         fc:09:e1:4f:47:f0:a8:42:8c:d7:07:d9:07:8c:f8:41:43:52:
         57:1f:86:c6:e7:71:db:42:af:ad:68:da:81:0a:45:9d:f6:1d:
         b6:ec:34:c9:ef:40:c2:5c:f6:52:4e:52:6f:79:b2:b8:cf:9a:
         05:75:b6:03:f5:bf:4c:dd:ac:57:ba:f3:ed:ac:ae:d3:8b:8b:
         b5:97:11:77:eb:f9:d1:db:35:89:bd:f7:b4:11:4e:93:19:a7:
         d7:a6:e8:6a:c8:9e:c5:bf:5f:eb:86:da:fd:97:53:c1:61:7e:
         a0:d4:13:f9:f7:21:c8:c3:b6:e0:2b:a4:37:1e:55:70:d6:7c:
         07:4e:88:d4:31:3e:e3:e8:f7:2b:92:5e:aa:76:ce:c5:bf:ff:
         08:55:75:4d:73:f4:f0:20:0c:61:e4:58:8e:05:80:6a:0f:49:
         b7:30:d2:89:30:50:5b:bc:73:94:71:55:08:52:02:21:fb:d1:
         0b:02:67:6c:d4:01:fe:b7:00:8f:fe:fe:e7:2f:27:bd:65:d7:
         e4:de:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----