Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02709A904A2A11EC9070EE7AC4F9AE02.roa
File:                     02709A904A2A11EC9070EE7AC4F9AE02.roa (raw, json)
Hash identifier:          yflpSkEOY3aUo6bKtuAJmzCLcJEL6l95krcdU/l/G04=
Subject key identifier:   75:C9:63:AA:FC:D3:AE:72:24:7A:D4:9E:4F:4C:C8:18:39:87:5E:DF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0553
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02709A904A2A11EC9070EE7AC4F9AE02.roa
Signing time:             Sat 20 Nov 2021 17:48:03 +0000
ROA not before:           Sat 20 Nov 2021 17:48:03 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     399471
IP address blocks:        175.110.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 20 17:48:03 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=619934d3-2bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a5:c9:a2:58:a2:53:6b:02:ab:a2:9c:56:24:
                    bf:b7:db:00:37:c6:2f:9e:8b:d3:8d:29:d6:e4:ec:
                    03:85:55:0e:f7:2c:50:dc:0e:a6:ce:86:b0:cb:b2:
                    ca:5b:c1:5d:a6:b7:ea:18:d0:2a:e6:d1:8d:31:7b:
                    38:45:d5:cb:07:98:21:a3:98:d4:04:5a:92:9f:2d:
                    82:1c:6c:3f:70:00:82:57:d7:da:ae:a2:f6:6d:73:
                    c5:19:1c:76:bd:a9:a0:50:eb:50:cb:1a:f3:a7:5e:
                    c0:ac:65:e6:cc:4c:ab:6c:ca:15:0a:64:c4:8c:d8:
                    9b:3b:9c:00:72:9a:1b:d6:5c:3c:b9:22:65:e0:0c:
                    e6:c6:97:fc:68:63:b9:a6:58:98:d7:58:bb:4f:fe:
                    07:0c:a4:ea:df:73:a5:36:97:59:d5:c0:55:bd:f1:
                    94:a9:cc:b8:1d:eb:f3:c2:af:49:0e:9d:e6:77:c3:
                    b9:a8:c1:67:0b:13:2c:8d:56:7f:e6:98:0e:d4:ea:
                    e0:35:47:93:87:5d:c1:42:e7:7b:28:10:4e:37:5e:
                    ea:a0:cd:a9:97:20:dd:8a:55:2a:30:5b:eb:98:14:
                    ad:4b:01:07:02:4c:8a:bf:12:3b:8a:4a:7f:e7:17:
                    20:58:77:89:09:a1:58:3f:94:4f:4d:54:13:39:68:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C9:63:AA:FC:D3:AE:72:24:7A:D4:9E:4F:4C:C8:18:39:87:5E:DF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/02709A904A2A11EC9070EE7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:c2:b4:24:95:7d:d6:b7:33:d9:86:13:e6:f8:9a:79:82:
         fe:ba:63:ac:4b:c3:39:1e:5b:82:05:e6:7f:85:ac:e0:e5:4b:
         57:ab:d2:2a:f2:ad:74:10:dc:d3:a5:f2:eb:ca:09:22:9a:ba:
         84:c3:3c:c1:18:a8:33:b7:9f:be:e1:9f:26:3b:44:ba:08:b2:
         84:07:77:02:50:07:b5:3b:69:8e:61:8f:5e:dd:be:a5:2d:2b:
         d0:1c:22:29:c8:c5:9c:4e:e9:5d:18:c4:92:1a:7e:df:e3:e1:
         14:c3:5b:0b:a3:2f:6e:81:1c:2c:af:29:b2:56:39:75:f4:89:
         0c:9b:8c:bc:2e:94:40:8b:b7:72:56:0a:78:99:cb:5b:c0:7b:
         9a:29:1f:7e:d1:cc:17:b3:5f:bf:74:bd:25:63:ca:50:c6:f3:
         55:54:6e:31:a0:e4:6b:1c:a1:b1:44:a5:ad:68:2f:ac:18:dc:
         c7:e3:c8:15:c1:28:42:81:d8:05:92:53:bb:34:ab:7d:ab:d1:
         96:fd:2e:e5:09:c6:d3:64:7b:3d:1d:37:68:4d:d9:e2:9e:83:
         84:1e:50:4f:b6:30:68:55:5c:d3:3c:10:99:1e:8e:03:66:26:
         ed:cb:db:3c:d8:89:45:02:48:47:56:5f:6b:4e:01:a0:85:e8:
         d9:12:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----