Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
File:                     A52F6354A13911EC992FF474C4F9AE02.roa (raw, json)
Hash identifier:          6k3vd+bW3rOnfD3SduikLwojxqpRxmnEfcfe5vfsAVg=
Subject key identifier:   33:61:15:0C:7C:64:03:05:6E:A8:26:89:94:AE:10:33:38:76:3A:E1
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0687
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
Signing time:             Fri 11 Mar 2022 12:49:10 +0000
ROA not before:           Fri 11 Mar 2022 12:49:10 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     42831
IP address blocks:        115.167.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 11 12:49:10 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=622b4546-a497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:18:f1:d2:87:0c:4f:83:c9:4d:e1:d6:50:
                    9c:7e:b8:b7:f9:ad:5f:fc:4c:df:05:ac:bf:7b:cc:
                    88:56:54:a5:63:03:6e:49:8e:5a:00:a7:4c:ac:42:
                    66:e3:98:cd:d6:b1:07:20:41:82:72:24:f4:2c:37:
                    c2:36:0b:89:35:b9:73:3b:4d:c5:67:85:ba:7a:60:
                    e4:02:7c:bd:86:84:1e:db:25:dc:a3:ac:28:64:fd:
                    60:1e:bc:a3:d2:20:f9:b4:6b:48:4d:38:9f:c8:d7:
                    25:42:bf:a3:be:1e:aa:c6:71:da:be:48:da:a3:41:
                    4d:7c:c3:2b:51:5f:85:96:13:57:39:0e:9f:fd:29:
                    61:98:f7:be:e3:c0:73:8a:49:e5:43:84:69:76:ef:
                    51:86:fb:dc:bc:56:eb:6e:fe:00:e2:b1:ed:49:63:
                    45:86:86:04:23:57:7c:09:8b:19:e5:53:2f:60:d3:
                    68:ef:45:34:90:1a:fd:52:fb:c3:dc:44:bc:ae:56:
                    49:e8:e4:9e:72:6e:f6:16:95:90:b6:93:d9:d6:c1:
                    ec:3e:ea:94:d5:2d:26:f0:25:69:78:b5:a3:12:8d:
                    e0:c8:e6:69:9c:bf:db:06:50:e5:12:3f:3a:50:ac:
                    ed:86:69:b2:ec:db:0b:c2:ce:2f:b8:34:b0:dc:76:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:15:0C:7C:64:03:05:6E:A8:26:89:94:AE:10:33:38:76:3A:E1
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A52F6354A13911EC992FF474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:53:64:1f:6f:cf:be:42:f3:54:1c:1a:50:85:1d:9a:3a:68:
         5b:fc:b1:bb:b4:3a:3a:1e:27:37:70:64:20:ef:24:e0:9c:7a:
         00:f6:49:4e:40:63:27:9d:d5:54:3f:bf:ef:75:1b:09:c4:dd:
         c7:ec:e2:0b:ae:f8:e3:40:86:d3:28:a3:9c:c1:5f:93:6b:db:
         0f:50:8f:bc:20:93:a3:a6:bd:4f:b1:ab:e7:51:81:35:19:63:
         d7:f3:f7:4e:e7:16:34:80:ef:17:49:11:50:ef:6b:0b:35:0d:
         99:e3:a0:9f:8d:a8:e6:07:3a:83:82:46:bf:ed:e0:7e:89:ee:
         de:03:24:c7:7a:d5:da:19:ed:4c:b7:c2:35:50:96:5c:e9:e7:
         0c:4f:23:36:a6:e6:b3:47:68:d5:8e:56:34:bc:82:47:94:d1:
         26:2b:4c:0f:86:5c:b1:d5:26:92:b3:f4:58:30:7e:b7:60:79:
         c8:f9:68:dc:fd:c8:d6:96:2e:5a:52:1b:13:62:14:2d:16:83:
         0a:30:6a:3b:49:d3:dc:5e:4e:5a:c5:b4:f6:fb:7f:60:9e:9d:
         f8:3c:f1:52:df:af:31:5f:0e:da:0b:49:d8:32:22:a5:cc:62:
         9d:17:39:94:47:8e:aa:7d:87:16:96:ed:fc:51:11:05:78:bf:
         7f:20:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----