Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a313130303a3a2f34382d3438203d3e20313336313239.roa
File:                     323030313a6466323a313130303a3a2f34382d3438203d3e20313336313239.roa (raw, json)
Hash identifier:          udz358iQnXqaF+eviF0FCQRMN7gRet/1pqwS37pqMMQ=
Subject key identifier:   CB:44:E7:9B:83:03:2A:53:E8:15:48:72:9D:41:9F:5F:3F:39:1B:8A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A0A9A186FFBB2332041DCC364BB535641D054B6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a313130303a3a2f34382d3438203d3e20313336313239.roa
Signing time:             Tue 05 Oct 2021 04:24:25 +0000
ROA not before:           Tue 05 Oct 2021 04:19:25 +0000
ROA not after:            Wed 05 Oct 2022 04:24:25 +0000
asID:                     136129
IP address blocks:        2001:df2:1100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0a:9a:18:6f:fb:b2:33:20:41:dc:c3:64:bb:53:56:41:d0:54:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  5 04:19:25 2021 GMT
            Not After : Oct  5 04:24:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:aa:d8:a7:48:2e:89:46:7e:c6:66:f1:64:
                    31:ee:87:a0:d2:ce:0a:a7:3e:86:7a:fd:42:97:85:
                    3c:60:70:15:e4:8e:af:63:9b:0a:13:96:2c:8f:00:
                    7e:75:91:ff:fc:1f:d6:ad:96:39:7c:2d:de:f1:f7:
                    2f:25:20:4a:7c:b2:d0:9a:36:54:28:b3:ad:7c:7f:
                    c2:f0:fd:3d:6f:5b:ce:8b:23:30:5f:fd:51:01:6b:
                    e3:3c:cb:99:6b:cb:d7:97:f0:12:1d:53:6d:af:5b:
                    36:95:88:44:a1:a7:9e:3f:c5:50:d7:98:54:2d:37:
                    55:07:f6:54:f4:82:e6:22:fb:18:0a:d3:f4:c8:af:
                    41:5e:6c:ca:59:aa:73:5e:39:f2:05:89:18:48:f6:
                    32:8a:36:b6:e9:bb:df:af:58:74:7c:dc:5e:7e:4f:
                    39:a4:c1:2b:96:bf:2d:c1:7a:31:36:4a:d9:a6:bb:
                    d1:7f:47:2a:60:42:f3:d3:14:d0:20:6b:0f:4f:81:
                    0c:48:86:43:85:b9:c5:d0:8c:e1:0a:8d:6b:ff:9d:
                    1c:39:f0:3f:ff:0f:da:7c:2d:41:a8:dc:c3:3b:de:
                    d3:a3:9c:da:9f:3c:82:c4:f8:51:0b:ac:9c:30:5f:
                    cc:27:bc:f3:e7:a9:52:17:7a:ac:81:a6:af:98:aa:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:E7:9B:83:03:2A:53:E8:15:48:72:9D:41:9F:5F:3F:39:1B:8A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a313130303a3a2f34382d3438203d3e20313336313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:1100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:e7:b8:06:35:45:c1:63:8a:93:3d:ff:be:fb:0d:97:a0:
         46:fa:07:15:d1:24:9f:56:e4:2b:96:84:a2:1a:7d:bb:76:75:
         75:0b:c5:af:12:d3:c7:ac:dc:ae:80:8e:87:0f:aa:5c:dd:76:
         bd:6b:65:44:f3:3a:88:c4:b8:42:c7:7a:fd:2e:45:3c:dc:0f:
         93:df:8d:87:93:d1:cd:02:9a:01:fe:60:de:09:bf:e4:17:27:
         bd:0f:62:8e:f1:a6:6c:ab:13:d3:71:e1:f4:4c:03:b9:bf:7c:
         de:00:55:3d:6f:d6:96:56:2f:e3:c6:ca:62:57:a4:81:9f:9a:
         f6:1b:53:30:db:5d:ad:08:64:96:7f:3c:b7:71:b8:1a:6b:cd:
         77:2c:10:16:98:1d:78:61:27:8a:7a:bb:db:0d:87:f4:25:7e:
         bc:15:20:ee:6a:45:7a:5d:e8:e9:e2:65:5a:05:27:50:30:eb:
         22:10:fa:5c:fa:ed:4f:cf:90:c3:73:57:bd:8f:e9:5a:92:70:
         37:1c:9b:40:6d:a3:21:3c:01:6c:d6:5a:82:3a:40:73:e6:ab:
         f1:26:3a:75:de:81:e3:d7:34:7d:d8:78:bd:ad:65:2a:7d:b7:
         a6:ea:f9:1b:5c:59:3c:26:50:47:55:5b:95:78:07:4f:1c:d4:
         27:e0:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----