Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
File:                     93E68E1CDB0C11ECB433A842C4F9AE02.roa (raw, json)
Hash identifier:          Gjll4P8hnwXn6rOhXZQX9z4VK44OiD9OpwnvSowW6jE=
Subject key identifier:   9B:C2:38:8B:E8:D2:D3:3F:47:16:E0:6A:50:97:59:32:3C:08:FC:73
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       02
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
Signing time:             Tue 24 May 2022 02:52:41 +0000
ROA not before:           Tue 24 May 2022 02:52:41 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     16509
IP address blocks:        2407:30c0:100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: May 24 02:52:41 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=628c4879-52e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:a6:01:3d:fa:3b:a7:af:be:2b:b8:d9:44:
                    78:4d:34:d1:25:20:9c:e9:17:89:f1:7e:e7:00:3e:
                    e1:b0:e4:da:3d:be:2e:f0:c4:2a:cb:97:b3:68:6b:
                    ac:e2:f1:75:82:cb:9d:b3:7f:0b:c8:84:cb:8e:20:
                    7f:3e:b6:12:9a:85:27:f6:ef:92:5a:2f:85:52:98:
                    ff:fb:b3:dc:a0:bc:b6:e0:5a:2b:ec:54:74:40:81:
                    29:ea:aa:35:de:f8:0a:35:c8:1b:a3:72:82:04:3e:
                    b2:24:ba:68:92:69:ee:81:d4:40:42:59:c2:09:b5:
                    a3:c2:af:63:b3:41:cb:82:ed:01:af:e0:3e:a9:bb:
                    26:4a:83:95:c3:f8:52:05:46:32:76:c7:bb:cf:7c:
                    a8:a5:ef:c8:93:21:b9:0b:83:f4:6a:15:a6:21:ae:
                    3f:cb:c2:cf:12:8e:4a:fe:04:f0:2a:20:f4:a5:fa:
                    63:a3:e2:92:97:3a:fa:0b:ab:5d:a9:07:17:b1:95:
                    2a:b1:f8:55:fc:14:20:1b:0a:55:56:53:f8:25:a8:
                    8d:54:7f:45:62:9b:bc:1c:73:8b:de:ef:eb:c4:a1:
                    24:a2:f4:cc:70:82:99:97:69:a9:ef:8d:c3:54:97:
                    18:ee:40:f6:02:e1:12:d7:18:10:f5:e1:f9:1f:b0:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:38:8B:E8:D2:D3:3F:47:16:E0:6A:50:97:59:32:3C:08:FC:73
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/93E68E1CDB0C11ECB433A842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:60:a8:40:93:be:66:60:04:33:5c:fa:ba:9a:f6:5a:f3:
         a9:18:1e:a5:dd:80:ce:e7:c3:59:7f:19:b3:ee:bc:c3:18:a5:
         21:66:e3:6c:71:a0:72:31:85:c4:01:70:a3:12:00:c5:4f:93:
         0f:00:71:a6:f7:a0:bd:3d:3d:28:71:d2:36:c3:41:26:44:71:
         a5:36:48:ac:04:e4:d4:4a:01:7b:ce:87:2a:5d:b0:fc:ef:0b:
         4a:f3:09:f5:48:b0:bf:7f:71:b8:19:8c:e7:4d:d0:2e:00:ff:
         c9:a5:26:4f:07:f8:62:41:ad:d4:e0:05:7e:5e:2e:4d:82:46:
         ed:50:6c:e6:f5:3d:42:fc:ed:5b:bf:b4:58:4c:63:85:87:69:
         de:62:eb:59:9e:47:02:07:e1:4e:3d:f9:a9:7d:4c:b5:a2:e3:
         69:ad:10:a7:f7:0d:f7:49:60:13:99:15:8d:4d:7a:67:11:ba:
         1d:75:c7:d4:75:fb:59:c0:47:a8:70:f0:c1:a9:1e:38:84:0c:
         91:60:f0:a8:a7:48:af:d5:9b:00:98:37:9b:85:37:2c:0e:79:
         8a:3a:41:9c:d5:68:8c:37:01:84:59:98:82:24:90:b9:bc:48:
         53:cb:9f:ac:ff:ef:ce:db:4f:07:0d:51:00:54:ba:39:e2:4e:
         8d:54:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----