Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
File:                     B9B8C514408011EC8E4A7983C4F9AE02.roa (raw, json)
Hash identifier:          QfNVb9D9HuT/0gKZ1/IzmmxsyIKT8/3FMs49IpDu8cg=
Subject key identifier:   FD:9F:CA:B2:06:83:39:A8:B5:A6:A2:D1:07:0B:7A:BB:D6:C0:A5:68
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       23E6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
Signing time:             Wed 10 Nov 2021 10:41:51 +0000
ROA not before:           Wed 10 Nov 2021 10:41:51 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     55933
IP address blocks:        122.254.92.0/22 maxlen: 22
                          122.254.96.0/22 maxlen: 22
                          122.254.100.0/22 maxlen: 22
                          122.254.104.0/22 maxlen: 22
                          122.254.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9190 (0x23e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Nov 10 10:41:51 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=618ba1ef-bb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:fd:9c:83:d9:95:8d:d3:dc:45:f9:86:a1:
                    20:43:58:12:7c:e6:8e:0b:48:f9:46:41:e9:45:73:
                    2a:35:d3:77:30:a6:24:01:2b:03:ee:57:14:08:84:
                    b9:c6:45:ca:93:73:fe:27:33:51:be:0e:33:91:f9:
                    53:c7:ac:a7:ad:ab:ef:66:b4:40:6b:37:5e:b1:01:
                    80:96:83:46:20:d3:f7:11:fc:2d:2d:3b:f9:76:d9:
                    fe:5a:d6:ca:1a:99:90:5f:68:01:30:86:cb:ef:26:
                    dc:5f:02:40:02:da:9c:79:3d:dd:4e:73:b7:c6:6e:
                    6f:64:04:d7:7d:6f:de:ec:97:00:b4:c7:7c:81:58:
                    ff:75:3c:3a:32:a9:83:71:23:15:e4:b9:f9:c9:5c:
                    7f:70:67:5c:43:94:21:d5:ef:7f:ee:63:60:8c:92:
                    64:70:6c:0c:4e:43:ba:b1:bc:e9:d3:d2:65:d7:1b:
                    21:1a:5f:3c:d4:35:f7:bc:56:db:85:17:eb:ce:d4:
                    d5:22:cb:70:8f:bf:f8:1e:bc:9e:f2:d2:7b:57:c9:
                    f6:d1:89:b2:3d:92:67:04:fb:66:a3:dc:a7:1f:ce:
                    80:f2:2c:24:3a:8e:da:b7:b7:41:6a:a1:4d:70:98:
                    68:11:fe:ae:46:86:45:e3:66:29:7c:bd:d7:f9:10:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:CA:B2:06:83:39:A8:B5:A6:A2:D1:07:0B:7A:BB:D6:C0:A5:68
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.92.0-122.254.107.255

    Signature Algorithm: sha256WithRSAEncryption
         20:60:d9:8b:5f:7f:40:54:18:62:89:58:1e:70:0f:d5:38:7b:
         a2:ed:19:ed:23:65:ad:af:65:68:92:79:d0:2b:69:e7:11:2f:
         37:3c:2b:c8:7a:5f:85:a3:11:ad:4f:90:65:c7:25:2c:ea:6e:
         70:59:82:8b:85:b3:52:63:a9:ec:cc:75:75:9d:40:44:3a:1b:
         92:db:b3:82:12:b5:07:65:38:6e:66:ce:59:06:8e:1c:1e:91:
         09:fd:de:18:c5:29:6f:4f:f5:28:0d:75:b5:56:f3:df:fd:18:
         8e:24:1b:2b:6f:80:36:ba:80:28:a4:29:56:00:da:69:c6:cc:
         a6:b9:82:de:fd:c7:c1:f7:19:40:65:75:39:6b:7a:23:27:6c:
         5f:9a:a2:6f:c8:97:78:b5:5a:34:f5:68:ba:0b:4f:66:2d:e8:
         7e:2e:9c:d8:87:87:30:fb:cb:e6:00:a7:a2:09:0c:a3:5d:4f:
         85:6f:88:4a:00:72:6f:01:fd:29:a2:2f:21:19:58:93:8c:9e:
         60:6d:20:44:2a:d6:12:39:23:02:a8:e4:65:28:22:81:a1:e7:
         ae:b1:1f:a9:f6:76:be:90:77:11:99:07:d3:72:e5:69:48:9c:
         2e:08:14:47:48:40:0c:59:e8:d7:45:78:89:0a:d8:8d:7c:53:
         8f:aa:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----