Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32332d3233203d3e20333937373236.roa
File:                     3137302e31302e3135362e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          SFJIvVokVOFfUR5Pb4O2Mpdt1jwRJVs5XpRz965/UdY=
Subject key identifier:   F8:A7:FB:6E:D3:6D:19:A9:48:2B:38:41:D3:D6:83:B1:C1:96:12:C2
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4ACF817CAD455CBDAF25AFADFC967C6A5CD2B5F5
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 30 Sep 2022 10:58:41 +0000
ROA not before:           Fri 30 Sep 2022 10:53:41 +0000
ROA not after:            Fri 29 Sep 2023 10:58:41 +0000
asID:                     397726
IP address blocks:        170.10.156.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cf:81:7c:ad:45:5c:bd:af:25:af:ad:fc:96:7c:6a:5c:d2:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep 30 10:53:41 2022 GMT
            Not After : Sep 29 10:58:41 2023 GMT
        Subject: CN=F8A7FB6ED36D19A9482B3841D3D683B1C19612C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:cf:f3:a9:c7:46:96:b2:de:c1:e3:6f:57:
                    95:83:8c:9f:f3:69:fb:2c:6d:e1:3f:a5:45:09:92:
                    0d:5b:a7:0a:6a:8a:ca:94:4c:a0:62:2d:15:bf:1c:
                    23:f9:ac:52:7d:f1:8c:b7:c9:3a:3a:a6:1b:64:f4:
                    8d:a8:8a:e6:98:7e:9b:c6:80:f2:16:37:6f:00:6d:
                    98:45:33:54:07:57:88:9a:93:f4:96:13:5b:55:44:
                    5f:c9:76:2c:bc:17:f3:68:ed:ab:86:c0:d6:2f:5d:
                    13:8a:ba:c0:6d:78:0f:d7:17:b5:04:56:1b:c8:53:
                    ae:de:ef:0b:30:1a:77:35:db:75:3a:02:a2:e3:30:
                    4c:f6:2d:69:ac:7b:b7:8d:e5:99:60:d6:ae:9c:f1:
                    c0:0d:72:cd:af:fe:19:bf:c7:34:27:ec:8a:7a:40:
                    f3:99:d1:57:49:5f:28:98:43:0c:aa:11:cf:61:f3:
                    30:84:b2:5f:78:59:f4:3e:e1:cd:b3:89:d2:c3:eb:
                    ac:5e:a1:7d:e0:18:d7:e1:3c:da:d7:12:7c:64:fc:
                    db:a3:71:12:dc:ac:67:76:9d:eb:71:91:77:79:9a:
                    b8:22:45:ba:7c:0f:ec:4f:db:1e:16:db:0c:8b:90:
                    90:b2:bf:d7:de:26:b1:82:c0:8d:42:34:9a:3a:0c:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:FB:6E:D3:6D:19:A9:48:2B:38:41:D3:D6:83:B1:C1:96:12:C2
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135362e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:db:69:ce:10:cb:55:f1:ff:86:91:dc:5f:58:f5:3c:cd:
         f0:ce:dc:2d:8b:d6:d8:e8:6a:92:67:4b:c2:f3:ed:d3:15:f3:
         e4:74:b2:7b:ee:be:e4:d8:ea:12:a3:85:4b:4a:9c:a8:6d:a4:
         40:b2:94:11:88:ea:ee:66:a2:dc:d3:f3:21:87:63:eb:ae:ab:
         3b:92:e2:f9:7a:9a:ac:82:65:5e:45:68:32:26:bf:1e:87:92:
         02:fc:38:8c:8a:64:0a:8f:5f:10:8e:71:f4:d4:45:b1:01:dd:
         c8:cd:c7:b5:06:a9:60:81:0a:7f:6e:47:ff:a2:97:3a:ca:55:
         d5:88:da:61:09:3b:0f:d1:a9:32:42:19:4c:08:f0:16:79:8a:
         12:3f:2f:65:24:0b:8d:ef:23:70:4d:c9:9b:7c:9f:bf:49:e5:
         86:d4:1f:b6:d4:dd:92:d9:26:96:03:f3:79:cf:47:97:13:97:
         01:96:d7:05:a5:8d:da:b3:06:71:9a:7c:67:73:5e:d6:d8:ef:
         13:6f:ad:11:67:19:06:0e:be:b8:ad:2a:bd:fe:83:ca:7c:83:
         ad:f1:1a:03:82:e3:97:70:68:3f:c8:d9:21:98:6d:1a:15:7e:
         47:65:61:3b:ec:99:3e:68:04:db:6e:1e:6b:40:af:31:38:04:
         ee:0b:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----