Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
File:                     6480C664DE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier:          pkZYc0o+xFl8DM7TWOh1qoZOhkRvg5BH9RUql6YfQlo=
Subject key identifier:   FC:7F:F6:7A:EC:C4:E7:6B:9F:CB:01:38:97:5B:13:DD:BD:0D:65:78
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       02DD
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
Signing time:             Wed 13 Apr 2022 02:12:19 +0000
ROA not before:           Wed 13 Apr 2022 02:12:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399073
IP address blocks:        2403:4f40::/32 maxlen: 40
                          2403:4f40:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Apr 13 02:12:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62563183-1619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:79:07:64:d1:6d:ba:1c:e6:a4:01:71:27:
                    0f:1d:83:67:8a:82:c1:87:1f:73:23:c2:89:47:88:
                    fb:61:78:9b:fb:28:8d:7c:36:19:06:41:56:ab:3d:
                    bc:41:dc:06:fd:39:6c:eb:0b:23:b6:af:74:d3:b1:
                    59:fb:ab:dc:95:35:70:df:dc:36:e8:1b:dc:a9:63:
                    45:72:06:10:fb:bb:02:c4:fb:c8:82:60:6c:68:63:
                    cf:02:22:b3:07:e0:12:29:3e:e1:27:5e:ca:0f:41:
                    66:bd:a3:0b:3f:ec:bd:0a:a7:c8:56:1a:49:9c:96:
                    81:e2:96:d2:69:0d:b2:07:57:b2:8a:a8:29:cd:78:
                    26:da:de:11:e5:ac:01:70:7b:71:b6:aa:a2:c9:04:
                    4b:4c:96:76:7d:19:d1:c5:0f:95:fe:da:da:eb:da:
                    18:66:f6:ac:c1:69:13:fb:ae:21:52:b7:31:32:1d:
                    7a:d9:c0:95:55:bb:c7:26:f5:c2:0b:cf:23:d1:cb:
                    1f:cc:bb:64:ab:1e:71:e7:e3:6e:50:2f:7f:1b:4b:
                    7c:65:07:d5:9d:04:ae:6d:9c:d3:ce:61:53:37:f4:
                    f5:e0:ae:b0:3d:0c:e0:31:42:82:8a:d8:e2:5d:05:
                    d5:e8:7a:bf:3e:4f:f5:9a:ff:fb:af:a8:e9:ca:97:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7F:F6:7A:EC:C4:E7:6B:9F:CB:01:38:97:5B:13:DD:BD:0D:65:78
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:42:95:b0:a2:ae:11:66:3f:0a:f4:0e:fa:80:5a:a9:62:7c:
         5d:43:07:54:f1:49:9b:bf:09:95:38:81:07:00:8e:24:db:93:
         74:e8:2b:24:5b:83:8b:39:47:76:35:e9:0b:cc:2b:0d:20:20:
         4d:9f:52:4a:8f:33:e3:0f:38:1d:05:6b:d5:d8:05:2d:ff:cc:
         4f:72:36:29:b8:0d:85:ae:ba:d7:6f:7d:35:50:7f:c1:1c:33:
         c2:a9:38:fc:06:52:35:ef:2b:d1:39:e2:38:57:30:ca:03:46:
         ca:3e:b2:02:c4:70:59:82:d8:ba:97:cb:45:6a:12:bf:1f:71:
         3a:ae:a0:0b:a5:6c:b5:5d:eb:b7:5e:9f:21:0e:dd:61:fa:7b:
         c3:26:4a:5d:e3:3b:85:29:42:a3:e7:3a:54:99:11:e6:a9:1b:
         3b:b5:ed:82:be:97:00:e5:95:cd:e5:ef:a6:fa:49:db:69:7e:
         da:b2:f9:54:a5:96:b0:9a:79:68:1c:84:8b:7c:7c:6d:2f:e4:
         e6:4e:21:72:2f:b7:e1:43:7d:8f:02:a8:ec:ee:f6:aa:b8:14:
         3a:02:00:08:fa:a2:99:30:f7:5c:96:72:51:c8:5e:c0:53:0e:
         c9:3c:76:95:1a:86:1c:0a:31:bc:fb:53:b8:49:b3:43:f0:9a:
         2c:b0:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----