Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
File:                     1917361A746811EC825C5260C4F9AE02.roa (raw, json)
Hash identifier:          XVvjN3rChGk4h9oMW4to5IayJFZ085VT4xRDKZJd7NU=
Subject key identifier:   BB:C6:47:4A:AF:7F:37:53:22:9A:4B:72:C1:A1:58:B3:29:1F:1C:13
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       05F0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
Signing time:             Thu 13 Jan 2022 11:58:19 +0000
ROA not before:           Thu 13 Jan 2022 11:58:19 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     211252
IP address blocks:        115.167.0.0/22 maxlen: 24
                          115.167.4.0/24 maxlen: 24
                          115.167.5.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan 13 11:58:19 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=61e013db-fab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:df:7d:28:de:34:f9:d8:09:95:17:bf:cf:
                    ef:9e:71:6d:62:6b:9e:20:40:09:a4:c1:c8:42:5b:
                    a9:42:4e:45:39:30:65:1c:77:f5:80:9f:52:fe:c0:
                    9e:2f:df:5e:ca:59:21:f9:ca:13:2f:cd:80:c8:22:
                    09:b9:35:58:ed:96:3b:c9:86:87:cc:a7:17:34:89:
                    a9:0f:07:47:fe:97:ca:f4:2d:19:6c:66:9b:00:14:
                    3a:f9:18:c1:26:58:89:53:0c:bb:71:f9:79:ee:e3:
                    48:85:49:fc:2b:d3:e1:dd:c5:5b:61:85:d9:72:49:
                    d8:f7:79:35:9f:f0:1a:ff:f8:73:3a:99:ef:a4:30:
                    7f:e5:e8:6d:41:be:21:05:ef:f6:e5:8b:19:70:45:
                    57:a6:34:74:79:e9:d9:bf:35:b7:d2:34:b7:57:b0:
                    2c:3c:5e:e8:d0:df:43:75:19:47:68:2f:df:90:f0:
                    fa:56:0e:75:9d:92:2f:4f:b1:ca:7e:9f:2e:5b:2b:
                    8e:21:cc:99:ac:f8:37:55:93:a8:50:45:fb:31:cd:
                    3b:90:76:04:4e:38:f3:9f:d6:78:6e:91:53:82:44:
                    72:da:42:e6:8b:e5:5c:84:15:15:bd:af:0b:e4:27:
                    d4:09:d6:d3:16:cd:18:ce:01:7c:8d:69:5a:c5:20:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:47:4A:AF:7F:37:53:22:9A:4B:72:C1:A1:58:B3:29:1F:1C:13
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1917361A746811EC825C5260C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0-115.167.6.255

    Signature Algorithm: sha256WithRSAEncryption
         00:70:9b:02:fe:45:70:b3:c5:19:c9:1d:0b:1d:c3:76:76:7b:
         d7:0b:30:66:0a:49:32:16:7f:1e:a5:29:ba:32:86:21:ba:af:
         d7:99:93:1d:d7:0f:e8:81:72:19:ff:e7:66:90:62:cf:12:bf:
         73:37:7b:a1:00:3f:40:15:4a:c1:63:9e:5c:f5:95:5f:0c:05:
         6f:a3:96:8c:af:88:15:f2:7c:be:fd:d2:9b:52:6b:83:0e:a7:
         74:f2:39:5c:53:57:d3:8d:39:08:20:be:12:20:36:ec:f2:98:
         b3:c5:20:cc:9e:4a:26:12:37:66:e4:2e:05:f9:38:1c:86:84:
         fb:a8:c9:13:e9:94:2a:42:8e:7b:bf:73:3d:4a:a9:60:c3:78:
         d5:5a:a2:73:1d:62:61:d4:42:3d:d9:83:b6:d4:91:05:28:0a:
         c2:da:a0:6b:60:b0:13:b3:c1:82:06:62:7d:ea:34:f7:d5:d5:
         53:0d:bb:63:16:2b:ff:a7:c7:b1:30:aa:f1:7e:35:63:4d:7d:
         2a:1f:90:40:f8:a8:c2:a6:1d:fe:c2:cb:15:1b:ca:50:a8:99:
         c0:72:40:2b:8c:f3:9c:2d:2e:1e:b7:80:fb:56:1d:f3:09:0c:
         1e:ba:6b:e7:fb:ab:df:64:48:c9:ec:94:39:47:98:4e:de:14:
         7a:2a:69:71
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwMTEzMTE1ODE5WhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWUwMTNkYi1mYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyoHffSjeNPnYCZUXv8/vnnFtYmueIEAJpMHIQlupQk5FOTBlHHf1gJ9S/sCe
L99eylkh+coTL82AyCIJuTVY7ZY7yYaHzKcXNImpDwdH/pfK9C0ZbGabABQ6+RjB
JliJUwy7cfl57uNIhUn8K9Ph3cVbYYXZcknY93k1n/Aa//hzOpnvpDB/5ehtQb4h
Be/25YsZcEVXpjR0eenZvzW30jS3V7AsPF7o0N9DdRlHaC/fkPD6Vg51nZIvT7HK
fp8uWyuOIcyZrPg3VZOoUEX7Mc07kHYETjjzn9Z4bpFTgkRy2kLmi+VchBUVva8L
5CfUCdbTFs0YzgF8jWlaxSC49wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFLvGR0qv
fzdTIppLcsGhWLMpHxwTMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMTkxNzM2MUE3
NDY4MTFFQzgyNUM1MjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQcBAf8E
FzAVMBMEAgABMA0wCwMDAHOnAwQAc6cGMA0GCSqGSIb3DQEBCwUAA4IBAQAAcJsC
/kVws8UZyR0LHcN2dnvXCzBmCkkyFn8epSm6MoYhuq/XmZMd1w/ogXIZ/+dmkGLP
Er9zN3uhAD9AFUrBY55c9ZVfDAVvo5aMr4gV8ny+/dKbUmuDDqd08jlcU1fTjTkI
IL4SIDbs8pizxSDMnkomEjdm5C4F+TgchoT7qMkT6ZQqQo57v3M9Sqlgw3jVWqJz
HWJh1EI92YO21JEFKArC2qBrYLATs8GCBmJ96jT31dVTDbtjFiv/p8exMKrxfjVj
TX0qH5BA+KjCph3+wssVG8pQqJnAckArjPOcLS4et4D7Vh3zCQweumvn+6vfZEjJ
7JQ5R5hO3hR6Kmlx
-----END CERTIFICATE-----