Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F9A8DCEA13C11EC83D59B7EC4F9AE02.roa
File:                     6F9A8DCEA13C11EC83D59B7EC4F9AE02.roa (raw, json)
Hash identifier:          955wpOJJoPf9NG9G32Fa4uahb1t0JaCTX3daoITGSE4=
Subject key identifier:   B2:23:70:1A:4F:E8:B4:D3:FE:98:29:ED:75:A5:EE:13:D2:3E:6C:24
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       068B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F9A8DCEA13C11EC83D59B7EC4F9AE02.roa
Signing time:             Fri 11 Mar 2022 13:09:08 +0000
ROA not before:           Fri 11 Mar 2022 13:09:08 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     46664
IP address blocks:        115.167.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 11 13:09:08 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=622b49f4-4e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:74:cb:af:55:30:64:12:c3:3d:6a:da:43:
                    46:e9:4b:80:64:58:53:57:68:2a:2e:3a:11:35:ae:
                    13:88:af:17:cd:80:56:b5:ee:a9:f3:8e:3a:cb:a5:
                    d2:a2:05:ad:a4:dd:6a:5c:4d:73:5d:05:43:c0:47:
                    24:b2:99:27:61:ec:8b:3b:b0:6b:b9:64:6f:13:67:
                    ad:d9:04:e4:1b:04:b1:86:2b:f5:61:81:67:9d:0e:
                    70:a4:54:7b:a6:32:10:89:91:d8:da:4c:d4:ec:f9:
                    69:49:ce:71:98:f2:d8:16:cf:59:8e:35:91:e2:16:
                    8b:a8:f8:e5:5e:45:75:1e:f5:fc:83:6d:b0:66:fa:
                    aa:69:f6:d5:13:6c:01:fd:a9:cd:4d:74:10:2d:ad:
                    d7:ac:c3:ef:8a:d9:63:0e:e9:96:3c:f5:7d:28:f1:
                    35:13:d9:d9:a9:1b:78:3b:85:69:5f:ce:a5:c2:64:
                    36:f0:78:ce:84:9c:0a:1d:5f:ee:e7:68:d6:cf:a7:
                    fe:6e:4a:d5:d8:b6:70:16:02:9d:12:84:4d:c4:fa:
                    f8:93:1d:65:74:ce:2a:52:1a:f0:b1:d6:9f:52:5a:
                    3e:a2:69:32:a8:2d:7d:89:1d:d4:03:a2:d5:fc:50:
                    b7:7f:b9:b3:1a:14:5f:8f:e9:1b:fb:92:ca:22:18:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:70:1A:4F:E8:B4:D3:FE:98:29:ED:75:A5:EE:13:D2:3E:6C:24
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F9A8DCEA13C11EC83D59B7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:84:38:7e:dc:b4:a3:1f:c8:9d:46:dd:04:04:f2:e3:2b:b3:
         1b:9f:e6:69:7a:ff:4e:bd:0b:5f:0f:71:4e:73:01:8f:87:be:
         8f:66:a3:57:4d:6c:4f:97:2c:9a:80:76:88:a0:a2:68:34:90:
         3b:6d:b0:e1:9d:26:5b:8d:07:29:36:ee:f8:9f:55:72:b7:4c:
         44:ec:71:6b:05:9c:25:09:c0:f2:f5:67:7f:14:0b:02:78:43:
         6e:0b:42:f0:9e:65:6b:cd:4a:c3:2f:4c:79:c1:80:bd:55:99:
         e0:eb:5a:3d:63:84:e7:26:72:54:cc:8e:e8:8c:c9:e7:62:f3:
         0a:eb:91:ef:f0:0b:51:af:a2:83:dd:1e:f9:15:48:27:08:56:
         96:d7:69:d1:3e:35:a0:3c:b4:70:8c:dd:7c:7e:ed:2e:17:99:
         e0:c2:ea:4b:c2:53:fb:48:fc:eb:b8:e4:78:a2:ab:a5:16:d7:
         c2:5f:05:e4:45:1b:74:cb:64:b0:ba:0e:64:84:a9:b9:ce:e3:
         93:fd:56:61:78:69:e6:db:22:70:c4:9a:40:05:61:c4:af:12:
         85:04:bd:c2:37:ae:b9:d7:66:28:15:1f:56:25:25:e5:fa:12:
         81:1a:f4:fa:96:84:7a:99:d3:f7:71:6d:c1:1d:2f:ec:57:dd:
         fe:f5:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----