Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9AC46540E14E11EC808B4F72C4F9AE02.roa
File:                     9AC46540E14E11EC808B4F72C4F9AE02.roa (raw, json)
Hash identifier:          4ZRGCFGpA3bn9htqfqguj1MFwflf/cdDEsjhgdRSNq8=
Subject key identifier:   72:DD:64:A0:49:12:F9:92:3B:BB:84:17:63:9F:33:F9:B9:78:F8:F4
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       0182
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9AC46540E14E11EC808B4F72C4F9AE02.roa
Signing time:             Tue 15 Nov 2022 23:13:09 +0000
ROA not before:           Tue 15 Nov 2022 23:13:09 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     137549
IP address blocks:        125.254.124.0/22 maxlen: 22
                          202.169.16.0/21 maxlen: 21
                          202.169.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Nov 15 23:13:09 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=63741d04-f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:25:bb:e5:a0:57:51:89:22:1c:59:e3:a6:
                    e0:9c:45:fc:b3:ac:3c:da:ac:3a:7d:4e:e6:f8:f0:
                    33:9d:db:f2:0f:65:8c:92:d3:15:41:f3:12:d2:47:
                    c2:44:09:ac:b1:13:39:0f:d1:50:dc:41:5b:e9:02:
                    14:8f:38:04:c3:2c:5b:09:7f:0e:89:eb:1f:02:f0:
                    49:a3:3a:b8:ec:6e:8c:4f:c5:5e:91:28:4a:b2:16:
                    7b:19:e5:9f:8e:1e:37:a8:25:f4:d6:90:6a:49:14:
                    87:e1:42:32:04:5d:87:93:4a:21:69:ad:09:37:bf:
                    c9:fa:60:5e:3e:2c:a8:1d:4f:48:c6:06:0d:30:88:
                    35:74:4b:05:a0:c1:60:bf:a5:99:0e:9e:ad:3f:5a:
                    64:56:af:8d:0c:32:84:44:bc:eb:a4:6e:bc:1d:0a:
                    bb:87:f8:9f:e0:9c:10:32:d6:82:09:88:e7:56:3a:
                    09:24:cf:3b:cb:5a:2e:df:9f:73:75:b0:2a:0d:ea:
                    eb:c5:87:82:5d:77:01:23:fd:9b:a4:5c:37:bd:82:
                    85:32:5e:31:e3:f2:35:2e:f1:35:71:d8:87:2f:6f:
                    cd:a9:19:9d:40:8f:ac:da:2a:a8:d8:bb:78:16:4c:
                    d8:a5:c1:fd:13:ad:31:5b:22:b8:1a:b1:92:43:52:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DD:64:A0:49:12:F9:92:3B:BB:84:17:63:9F:33:F9:B9:78:F8:F4
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9AC46540E14E11EC808B4F72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.254.124.0/22
                  202.169.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:09:12:1d:8d:3c:7b:af:e5:59:51:d0:e7:bb:7f:6b:40:c8:
         c9:d9:06:70:14:3c:91:e9:0a:6e:11:d2:e5:75:97:73:2c:eb:
         a3:bb:ca:38:76:66:23:f5:da:ec:ce:3b:a8:84:1e:4e:58:e9:
         76:18:96:a1:a4:2a:65:f4:e1:66:cd:04:2d:75:0c:2e:6a:8e:
         d4:84:7b:98:a3:40:61:55:e5:1f:ad:27:cf:54:c5:ca:36:e0:
         9e:15:3a:db:ec:88:62:66:c1:fe:35:f3:e8:67:04:99:a1:60:
         1c:19:bd:8d:f7:12:c1:ca:26:b2:08:31:a7:bf:5e:84:fa:d6:
         8b:3d:28:70:c9:8b:fd:04:1d:bc:37:c6:09:49:49:9a:10:3b:
         db:82:00:c7:49:54:02:7d:f9:82:7d:5a:6f:41:92:e1:2d:c0:
         6d:41:31:42:87:27:ff:2c:0b:10:7d:64:79:3a:18:c9:a5:38:
         4f:fa:a3:a5:09:ef:4d:ed:49:59:2c:42:94:4d:6c:1c:18:99:
         56:ab:9a:60:fa:aa:18:95:43:58:16:b7:78:d5:af:d9:44:47:
         96:a9:bf:85:80:e1:30:9d:9a:2d:45:16:08:7e:2a:57:61:6b:
         93:f0:fe:27:f9:27:df:ba:68:7f:54:f1:6e:a7:8f:41:a5:e5:
         62:0b:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----