Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa
File:                     323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (raw, json)
Hash identifier:          p8b+yvNZFqd+n91qU19Kryn9nKX6OONxgzgsyQ1ewrU=
Subject key identifier:   D4:24:E4:A7:E7:11:FB:91:9E:A4:6F:41:55:49:97:61:3E:34:6F:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30592462025F70ADAE1B02A0A6A32C424339FBA4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa
Signing time:             Fri 08 Oct 2021 08:00:00 +0000
ROA not before:           Fri 08 Oct 2021 07:55:00 +0000
ROA not after:            Sat 08 Oct 2022 08:00:00 +0000
asID:                     140421
IP address blocks:        2001:df2:c980::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:59:24:62:02:5f:70:ad:ae:1b:02:a0:a6:a3:2c:42:43:39:fb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:00 2021 GMT
            Not After : Oct  8 08:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d8:9d:43:13:3a:cd:39:8a:ca:78:4d:df:a2:
                    98:ab:ff:30:c0:5e:65:b1:be:36:06:0d:90:b9:01:
                    0a:ab:78:72:84:7b:3e:96:57:03:b9:d1:af:a3:b3:
                    11:be:90:4c:bc:fc:d2:ab:b9:16:22:ff:6f:e0:ab:
                    66:20:ae:11:e7:c6:7a:03:2e:9a:22:af:a7:f2:18:
                    ca:07:c6:75:f7:aa:50:24:85:eb:c2:42:c2:dd:f7:
                    8f:eb:65:55:7a:e6:4a:30:72:bc:04:4d:06:16:75:
                    5f:f6:5f:e7:99:26:79:3b:a0:86:55:ec:42:f0:33:
                    79:40:6c:5b:6f:c6:af:04:23:8f:32:2b:7a:3e:fd:
                    23:26:2e:c9:83:ae:f4:52:2e:70:45:9a:f5:a9:ad:
                    e9:f7:61:53:24:4c:fb:9b:a0:9b:f7:9b:d5:83:61:
                    59:d6:ea:49:4c:20:0b:05:e3:87:7a:d1:52:f8:ca:
                    62:12:eb:df:12:17:b6:b5:64:cf:73:91:4d:3c:df:
                    b8:91:7e:70:e1:80:ae:a7:1d:e9:23:0e:58:a1:96:
                    0f:74:5f:b0:f5:cf:78:e0:cd:01:9b:90:1d:07:b9:
                    e0:a4:35:de:87:6c:e6:6a:31:0a:3d:b9:ac:12:6b:
                    51:fc:34:5f:f9:42:ee:72:4d:01:ac:0c:e8:96:1e:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:E4:A7:E7:11:FB:91:9E:A4:6F:41:55:49:97:61:3E:34:6F:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c980::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:01:5d:7a:37:ba:16:9d:02:d5:31:8f:f0:84:77:e7:ab:
         d0:53:5e:25:04:50:54:ff:3f:d7:0d:dc:cd:a0:8e:b8:e2:af:
         4e:27:fa:4e:e7:3c:a1:03:58:32:bb:ca:d3:90:50:83:08:ca:
         de:83:1a:be:0e:b7:c8:e6:7d:60:0d:d0:e2:c9:5b:6f:9d:11:
         45:14:48:7d:f6:5e:c2:2e:91:8d:9e:99:cf:34:74:1c:ef:54:
         ea:b5:8a:2f:d8:a9:eb:6b:ab:6a:60:93:23:bb:db:a6:fb:42:
         64:f6:86:61:c1:0b:26:8d:5e:af:ac:e3:52:f4:66:f2:a9:a5:
         d6:e9:6c:24:56:bc:6c:a6:77:f7:3d:80:33:dc:66:72:56:ef:
         ee:b7:9b:2d:68:bc:f2:16:da:6c:d8:96:50:e5:43:a9:27:97:
         e0:2e:66:76:59:30:4a:17:70:44:16:b1:17:d9:43:db:20:fa:
         2a:80:34:88:d1:67:21:c6:42:ee:f2:97:99:a3:48:fd:c6:1a:
         1b:d3:ef:12:26:aa:ce:22:4b:50:40:01:43:01:ee:31:ef:dc:
         54:ee:7b:2d:f3:fd:80:78:8e:82:3a:55:d0:02:32:2b:80:84:
         fc:15:02:8c:fd:d0:ee:30:fa:27:1d:aa:a3:2a:03:43:aa:3d:
         b2:c4:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----