Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/kxXzo7DeTa4YOjodVwd9tRe2j_g.roa
File:                     kxXzo7DeTa4YOjodVwd9tRe2j_g.roa (raw, json)
Hash identifier:          fbc3E1YwXrPhwycczCcUL0OeyA6NayL2VSlYRtp0aj4=
Subject key identifier:   93:15:F3:A3:B0:DE:4D:AE:18:3A:3A:1D:57:07:7D:B5:17:B6:8F:F8
Certificate issuer:       /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial:       18
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/kxXzo7DeTa4YOjodVwd9tRe2j_g.roa
Signing time:             Fri 25 Feb 2022 15:53:00 +0000
ROA not before:           Fri 25 Feb 2022 15:53:00 +0000
ROA not after:            Fri 24 Feb 2023 02:38:33 +0000
asID:                     37963
IP address blocks:        47.112.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
        Validity
            Not Before: Feb 25 15:53:00 2022 GMT
            Not After : Feb 24 02:38:33 2023 GMT
        Subject: CN=9315F3A3B0DE4DAE183A3A1D57077DB517B68FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:2d:f4:5e:07:f6:08:51:57:e7:1a:6d:e8:
                    ba:64:97:23:30:42:0e:14:f4:70:63:c9:17:94:a4:
                    e0:8d:7d:3a:6a:2b:71:3d:89:a7:f5:dc:15:79:97:
                    2a:32:ec:68:f3:ad:b2:57:d3:2d:eb:52:98:ac:a6:
                    b9:75:06:af:0f:9c:b0:b5:10:1b:dc:72:9c:aa:a0:
                    95:88:90:e7:75:39:b9:0d:b2:26:57:00:60:32:9b:
                    b6:06:d1:33:de:2a:ba:31:1f:25:e9:9a:34:0e:e8:
                    15:4d:ec:3d:49:e9:97:32:e6:1a:35:55:d1:4d:b3:
                    ef:a1:73:57:91:55:69:92:16:95:01:25:06:f0:14:
                    da:99:e3:6c:3e:dd:1a:c7:24:6d:51:43:c6:f4:88:
                    a0:d1:83:ab:b8:f3:3c:ca:9b:52:75:da:2e:3b:7c:
                    95:04:53:c3:35:27:c1:59:d2:78:fe:a8:01:c1:11:
                    a1:23:17:9a:00:cd:14:aa:b3:fc:34:d0:fa:4f:4d:
                    7c:a7:ac:b2:2c:e9:08:1a:5c:97:10:8d:bd:e9:f0:
                    44:55:95:dc:30:44:a1:a5:97:32:05:04:cf:b0:06:
                    6d:0f:3a:3a:36:df:38:6a:84:6e:c9:63:b2:53:3d:
                    1e:88:af:a5:2b:21:fd:82:e7:a2:84:89:29:bd:64:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:F3:A3:B0:DE:4D:AE:18:3A:3A:1D:57:07:7D:B5:17:B6:8F:F8
            X509v3 Authority Key Identifier:
                keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/kxXzo7DeTa4YOjodVwd9tRe2j_g.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:2c:bb:8e:53:73:63:ea:83:06:41:f7:ab:a9:fc:69:58:
         4c:69:7c:ed:a5:3c:94:b5:b2:03:dc:de:41:cb:30:3b:96:dd:
         45:33:49:60:e1:3d:87:c0:44:c1:01:22:e6:72:c9:98:e6:4f:
         07:c9:e1:cc:b6:64:e9:79:21:cd:89:b3:39:ee:79:75:4e:b6:
         82:45:11:23:19:c5:ba:9d:6c:d6:8a:f8:2f:10:8f:7e:c8:6c:
         ca:2e:a2:13:8c:c5:f3:d4:bd:93:e0:60:cc:c4:d9:db:2d:da:
         04:6b:89:15:5c:69:81:37:bd:04:4a:5c:4f:54:d2:59:8f:2d:
         ff:bb:d4:db:2e:11:68:ef:41:7b:97:95:b2:3a:56:3b:9a:c9:
         c4:2f:d7:24:ad:bb:70:06:f9:c2:88:69:9d:f8:d7:ce:bc:ca:
         93:dc:8c:25:68:c9:f4:e2:2f:4c:bb:6b:cc:07:5f:c1:7f:83:
         bc:01:fe:c2:19:37:c1:3d:4a:ee:5c:6b:7b:8c:a5:3c:f6:06:
         a6:9b:f2:49:e8:06:11:91:ce:8d:e9:69:71:63:bc:d4:83:1b:
         28:73:03:92:60:ee:79:31:f4:0a:9e:1b:6c:ac:d4:9f:66:4d:
         89:4b:e0:e2:8f:39:98:00:16:8e:39:00:0d:1f:93:62:13:f9:
         88:0d:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----