Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9E22A98E63BF11ECA25A4782C4F9AE02.roa
File:                     9E22A98E63BF11ECA25A4782C4F9AE02.roa (raw, json)
Hash identifier:          +EtZtTKOTRaiqSYucJALlJw7rcirkDaezJ6gkcKkeXQ=
Subject key identifier:   4E:EB:F3:DC:FA:C9:0D:F2:70:B9:A7:B5:46:37:88:FA:CD:15:AE:4A
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       2441
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9E22A98E63BF11ECA25A4782C4F9AE02.roa
Signing time:             Thu 23 Dec 2021 07:11:59 +0000
ROA not before:           Thu 23 Dec 2021 07:11:58 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     136050
IP address blocks:        122.254.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9281 (0x2441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Dec 23 07:11:58 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=61c4213e-abc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:45:2d:d5:f0:e0:ef:40:24:e6:4a:26:20:
                    a1:11:18:62:fc:b7:05:e4:3b:9f:89:a8:08:f3:ae:
                    12:ec:a9:69:ea:75:47:d3:57:b0:9f:51:ea:25:0d:
                    b4:5a:74:b0:35:3f:5f:48:72:d3:7f:99:a4:4d:68:
                    90:34:34:85:eb:1c:68:24:6b:f3:d5:d2:3a:1f:f1:
                    83:f0:d0:b7:82:e9:a1:1f:fe:67:22:ad:a5:8f:aa:
                    98:55:1d:61:6d:0d:03:60:68:05:0c:04:4f:4f:51:
                    4e:b2:e6:08:ec:9c:48:f0:96:1a:b2:9a:3e:6e:78:
                    c6:10:de:03:ca:96:f5:7f:83:d6:01:85:04:65:08:
                    87:58:f1:04:91:79:3c:ad:7d:f2:0c:4d:ae:78:9b:
                    0e:55:ce:43:4c:11:98:39:ab:58:3f:db:0b:55:3f:
                    4e:57:3c:d5:42:5a:a3:ba:b0:55:3a:49:c0:1b:da:
                    dc:e4:fb:10:13:33:75:7e:01:92:9f:88:a1:42:af:
                    86:02:81:4f:a8:99:69:6a:63:82:37:08:89:4c:8f:
                    fa:de:a1:41:3b:7f:d6:ea:5a:c6:d6:98:a4:0d:77:
                    b5:e8:fc:d3:f6:c9:e7:75:48:f9:8a:f9:3e:24:6c:
                    07:76:a1:f1:12:f5:c0:f8:7f:bd:50:f4:d9:7e:cb:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:F3:DC:FA:C9:0D:F2:70:B9:A7:B5:46:37:88:FA:CD:15:AE:4A
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9E22A98E63BF11ECA25A4782C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:ed:75:b1:ca:4f:6d:dc:67:1b:f3:e1:6f:5d:cd:1f:50:
         a2:ea:4b:60:cb:bc:db:d3:35:b1:3f:d0:4f:24:06:70:5f:59:
         cc:02:bd:76:ce:69:c5:9e:3b:da:51:16:d1:c7:41:ac:0c:5f:
         13:b9:a8:4e:a9:fe:e5:13:83:fd:45:41:b6:b9:11:c4:c2:f9:
         4a:98:2d:21:ae:8a:e9:9d:41:af:16:e2:ff:bb:43:f9:59:c3:
         cd:38:c0:c6:9f:51:22:28:ca:81:25:0b:83:b1:8f:7b:d4:87:
         4e:c8:ab:07:d8:ce:2d:44:ad:a1:a1:c3:36:05:18:bf:ea:40:
         17:54:e7:71:c4:56:e0:fb:fb:cb:b1:48:14:88:84:66:20:f4:
         35:2d:fa:d1:d9:a4:50:62:f5:b0:21:bf:8a:66:ee:9d:ac:91:
         93:5a:b4:70:f1:47:80:2a:db:5f:75:49:0d:9b:0d:02:c0:3d:
         74:ae:4f:12:b8:02:a1:1b:0b:8e:c4:bb:36:01:ec:41:fb:c2:
         59:f4:87:8b:f3:87:e0:35:9c:ef:c0:7a:1c:57:9e:44:1b:b6:
         b2:bb:22:38:2c:1c:08:54:47:02:a0:55:18:ff:25:00:a4:a6:
         0c:b3:6d:e5:53:99:e3:22:c3:46:88:cb:cc:4a:33:0a:84:c9:
         93:65:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----