Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323330303a3a2f34382d3438203d3e20313336313239.roa
File:                     323030313a6466333a323330303a3a2f34382d3438203d3e20313336313239.roa (raw, json)
Hash identifier:          srD1c9em1CnXiTnW1xogdJvZB350ntX7e5iv5FC+HGg=
Subject key identifier:   2A:E2:F0:47:33:DB:7F:78:52:B7:06:6E:48:F6:E7:78:06:68:12:15
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C5FD6D7220FEE5977930FACA869647F2D12D03A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323330303a3a2f34382d3438203d3e20313336313239.roa
Signing time:             Tue 05 Oct 2021 04:24:25 +0000
ROA not before:           Tue 05 Oct 2021 04:19:25 +0000
ROA not after:            Wed 05 Oct 2022 04:24:25 +0000
asID:                     136129
IP address blocks:        2001:df3:2300::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5f:d6:d7:22:0f:ee:59:77:93:0f:ac:a8:69:64:7f:2d:12:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  5 04:19:25 2021 GMT
            Not After : Oct  5 04:24:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:b9:fe:58:ad:2b:47:62:a6:61:5a:fe:46:
                    6e:51:1c:80:e1:fe:6d:24:ad:cc:67:05:b3:45:af:
                    f9:b9:e6:31:c6:4d:da:ea:aa:35:00:83:79:3c:f0:
                    47:be:e7:33:24:33:ad:09:c3:76:63:e7:ad:55:34:
                    fe:54:d8:c7:b5:20:ad:4f:09:52:e1:9c:15:d2:ff:
                    38:84:16:56:57:f3:71:43:d4:e2:76:7f:54:e0:8c:
                    05:ed:c5:11:17:af:56:88:e5:ff:48:d5:4f:6e:08:
                    c7:a0:cc:b4:36:70:ae:d5:e8:5e:8c:b2:6d:da:fb:
                    b8:27:31:e3:7f:81:bc:74:87:7a:c8:79:44:20:0b:
                    9d:de:8d:8e:10:33:ae:2f:85:b0:05:a2:0e:c8:62:
                    21:c5:cf:a7:b7:85:cc:10:74:8e:4e:40:5c:4b:f9:
                    14:8d:f5:72:df:9a:98:0b:3b:49:51:98:a9:65:f5:
                    87:d6:31:ff:8d:c2:b1:3c:33:3b:6d:dd:27:dd:81:
                    95:3d:a4:c8:73:49:55:4e:ea:34:0a:b8:0d:b2:dc:
                    a2:fa:ec:80:c5:d5:cf:53:37:0f:e3:fe:ac:e0:36:
                    95:07:f9:da:55:33:8c:88:66:67:31:0f:55:ca:eb:
                    9e:48:1f:3f:99:ad:e6:33:25:6d:18:4a:0d:4f:3a:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E2:F0:47:33:DB:7F:78:52:B7:06:6E:48:F6:E7:78:06:68:12:15
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323330303a3a2f34382d3438203d3e20313336313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2300::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:04:00:02:0f:68:c7:84:83:ab:a1:ff:fd:91:46:22:d2:
         b5:ca:5e:cd:fc:1c:b1:37:2d:7b:27:9a:ad:b9:fb:06:6a:0d:
         d4:6e:bf:df:5f:73:30:cf:3a:f8:9f:92:cb:c7:a3:2d:48:6d:
         bd:6c:76:63:20:01:23:e2:23:e5:a4:1f:45:c8:d2:99:0e:15:
         ef:df:b9:fd:49:72:b6:f9:2c:16:26:90:e5:f2:3e:cc:cb:45:
         0b:8e:37:d1:7d:2a:7d:2f:db:27:14:2b:42:5a:22:bd:03:96:
         23:43:0e:23:5a:29:76:70:ec:4d:9d:87:20:42:09:59:3a:ab:
         c2:4d:02:16:a4:dc:ee:69:ef:4c:a4:a4:05:e8:25:56:77:b9:
         09:f9:e5:05:29:d7:a8:30:16:7e:08:6e:de:19:2d:d1:fe:07:
         60:49:94:cc:1e:c6:bc:88:48:66:b7:32:26:bb:72:8d:c7:56:
         b7:05:e1:ff:ba:d7:dc:e9:31:e2:33:4c:95:8d:0c:b0:27:e2:
         8d:54:22:e2:21:cc:89:b0:75:8a:26:59:88:a3:12:79:71:12:
         13:0b:63:c5:72:d5:3a:c1:4b:81:f8:ce:ba:d1:c5:ab:a9:1f:
         4a:64:76:6c:7a:b9:84:27:bd:01:0b:8d:9a:72:fe:31:b3:ba:
         f6:c8:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----