Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A195F9CEA13911EC992FF474C4F9AE02.roa
File:                     A195F9CEA13911EC992FF474C4F9AE02.roa (raw, json)
Hash identifier:          Mr5LTxvzLzWstat3D+VZ7gCkxraBOSt9DDEdZaBG9PI=
Subject key identifier:   04:97:D8:D7:78:AB:8A:5B:E6:24:78:CD:41:CC:E0:69:BC:BA:D7:B4
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0684
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A195F9CEA13911EC992FF474C4F9AE02.roa
Signing time:             Fri 11 Mar 2022 12:49:04 +0000
ROA not before:           Fri 11 Mar 2022 12:49:04 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     1239
IP address blocks:        175.110.64.0/22 maxlen: 24
                          175.110.68.0/22 maxlen: 22
                          175.110.76.0/22 maxlen: 22
                          175.110.92.0/22 maxlen: 22
                          175.110.96.0/24 maxlen: 24
                          175.110.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 11 12:49:04 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=622b4540-924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:fc:07:5f:3c:74:0a:1e:87:bb:cb:c3:cf:
                    d9:ac:23:47:0c:76:86:2a:92:7d:c3:37:99:78:d6:
                    59:00:f1:95:a7:68:9c:c9:17:53:a0:15:3e:d6:a2:
                    f3:19:49:05:4e:89:b6:c2:ec:45:ca:30:d6:b0:49:
                    11:2b:4f:ba:1b:10:66:e8:e6:50:a3:da:70:b6:23:
                    b0:55:ef:94:27:90:71:95:a0:bd:09:e9:f8:e2:58:
                    ea:65:50:79:db:d7:ba:75:9e:56:3b:cf:f2:1e:a4:
                    59:bd:d9:f5:a4:70:64:34:dc:38:d0:75:5e:a4:e3:
                    ad:f7:f9:81:00:d3:4b:cf:e5:55:12:6d:5b:49:81:
                    6a:5d:30:05:9b:71:06:ac:b6:f1:e4:92:d8:47:19:
                    2c:ee:95:b0:37:27:dd:00:c2:7f:aa:ea:2f:67:46:
                    96:bd:e6:39:9b:5c:4a:fb:b5:d4:b0:3e:55:3f:89:
                    1a:5c:59:12:18:2e:df:7b:14:a8:de:44:a6:12:fb:
                    4d:f6:a5:a5:3f:c6:9e:c3:4f:69:3b:72:e8:29:9e:
                    17:18:7b:a6:8a:93:82:ce:d2:6b:3a:5f:64:63:86:
                    80:41:6c:30:74:d5:b3:bb:d2:46:8f:48:a4:2f:0f:
                    80:a4:32:8c:7e:5f:15:83:89:1d:3b:dd:a7:06:91:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:D8:D7:78:AB:8A:5B:E6:24:78:CD:41:CC:E0:69:BC:BA:D7:B4
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A195F9CEA13911EC992FF474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.64.0/21
                  175.110.76.0/22
                  175.110.92.0-175.110.96.255
                  175.110.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:63:67:18:09:3c:73:65:1f:c2:dc:b2:84:20:bd:b0:a4:
         e8:ca:c3:c0:1c:07:10:fe:61:46:4f:7a:f7:11:b8:96:fb:bd:
         89:f7:4b:15:2c:b6:7c:8b:b7:c1:d8:00:9a:5b:8a:a8:a0:0f:
         a3:e1:59:6c:e7:6f:f7:21:5e:0a:29:76:a0:93:3c:9c:28:0b:
         87:96:0b:7d:34:0a:27:d2:66:c8:6d:8c:16:cc:81:65:4c:c2:
         44:86:63:38:1e:5b:25:a7:95:fc:57:81:bb:15:5f:9f:a1:46:
         a9:69:63:55:7f:57:df:64:0f:ad:ff:48:e2:11:fa:26:a4:77:
         f0:b6:f8:e1:fc:19:1d:46:dd:dc:39:7f:8b:ca:03:e3:f2:5a:
         d8:c0:08:da:52:bc:45:a2:2e:2a:71:66:99:54:b3:2f:ec:4b:
         72:24:91:3d:35:7f:2b:41:1d:e1:55:74:df:36:a1:78:ca:0a:
         af:c4:54:d4:9a:0f:8f:b3:a1:8d:c5:0a:6b:b5:a3:f7:0e:4e:
         6e:fa:52:79:b2:d5:36:19:9f:63:17:86:4b:a6:20:e0:46:41:
         67:8a:90:18:69:f5:83:d0:d7:92:bb:20:9b:2c:5a:45:0f:06:
         56:49:0d:53:56:f4:e3:6a:2e:0a:e1:34:cc:c3:d7:38:24:4b:
         03:77:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----