Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a623330303a3a2f34382d3438203d3e20313336313233.roa
File:                     323030313a6466313a623330303a3a2f34382d3438203d3e20313336313233.roa (raw, json)
Hash identifier:          KxxdxeG5aW4ek47Zvg+UOzRDuTNjVuYq2yFxR4G8LTw=
Subject key identifier:   CA:15:CA:66:91:1B:5E:C6:23:BB:3F:09:85:C8:10:85:29:08:57:10
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1CDA776DA11D16DF97D86E9907D90AC856A0F1C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a623330303a3a2f34382d3438203d3e20313336313233.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 04:55:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     136123
IP address blocks:        2001:df1:b300::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:da:77:6d:a1:1d:16:df:97:d8:6e:99:07:d9:0a:c8:56:a0:f1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:00 2021 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:36:75:22:12:1f:74:2b:76:e4:f7:5d:0a:
                    cd:52:14:aa:50:32:99:39:15:72:56:09:d6:b6:c9:
                    3f:3a:37:99:75:03:2b:24:fa:22:b2:c3:14:68:19:
                    71:4b:21:67:ee:8d:5e:f1:ac:b6:88:f2:b3:3c:fc:
                    61:84:0a:49:24:d0:26:bd:98:b1:3e:6b:dc:75:cc:
                    73:6f:8a:6e:da:57:8b:2d:d3:0d:f6:a1:c7:d5:22:
                    43:2c:da:b7:96:45:6a:27:43:60:5b:84:81:95:92:
                    f5:b8:7e:0f:0f:ef:8b:15:9b:79:ce:51:03:04:f6:
                    23:32:4a:bd:d2:68:26:81:9a:82:8c:0a:97:5f:84:
                    c0:b6:1e:ae:c2:59:1d:43:35:35:c1:d4:89:5b:35:
                    be:2e:ff:14:ac:9d:25:f5:7f:c8:c7:11:01:bb:a6:
                    df:ae:7f:0b:27:06:73:70:b9:ea:17:6a:81:51:1f:
                    a6:59:d6:d7:99:d6:08:c8:5b:a1:6e:90:13:21:70:
                    68:c8:c1:67:fd:df:95:8f:2e:2c:98:03:ad:99:0d:
                    20:a6:a5:c3:cb:96:ef:98:03:6e:49:30:17:70:20:
                    62:c6:a3:6c:38:9f:fe:a7:c7:10:d4:5e:59:70:14:
                    2e:05:59:b7:43:bb:0b:70:77:f0:cc:2b:75:67:29:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:CA:66:91:1B:5E:C6:23:BB:3F:09:85:C8:10:85:29:08:57:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a623330303a3a2f34382d3438203d3e20313336313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:b300::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:72:2d:3b:02:1c:ca:5d:9b:2f:6f:b2:7d:60:34:d4:89:
         5a:c5:28:82:67:34:85:53:2d:c8:29:03:e6:ee:7f:76:c6:72:
         33:33:01:2a:98:a0:aa:06:00:74:f3:1c:a1:e0:67:aa:a2:4b:
         b3:b0:d3:57:3b:12:48:f9:b8:a3:eb:7a:9c:11:07:8c:58:34:
         a2:a1:23:66:b2:75:2d:b5:50:c7:90:c7:8d:1f:39:5b:81:33:
         49:38:3d:29:41:7f:e3:de:37:b4:89:04:2e:04:ec:0c:6a:77:
         ab:60:ff:21:e0:1c:6a:b9:74:f1:6e:3d:a3:cc:eb:bf:3b:7f:
         4f:5b:64:67:b4:b1:55:25:99:d7:c6:9e:f9:b9:61:26:c5:40:
         1c:1e:5b:77:be:55:f9:52:24:89:a1:55:eb:80:96:a2:be:5b:
         c5:c0:7e:f4:32:ea:87:b7:16:96:2e:d7:ce:9d:75:81:c3:6f:
         57:18:ba:88:0c:0c:ad:dd:35:48:41:61:07:ff:21:84:25:88:
         14:f4:33:79:7d:95:5b:79:5b:6e:72:77:c5:3b:79:0f:58:6a:
         89:7e:dd:69:d5:df:6b:b2:2a:60:24:99:48:52:c8:d2:79:56:
         a8:3b:18:8b:f2:04:94:e9:50:a3:53:8f:fe:87:0c:e5:5e:4c:
         7f:af:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----