Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a666630303a3a2f34382d3438203d3e20313337333638.roa
File:                     323030313a6466333a666630303a3a2f34382d3438203d3e20313337333638.roa (raw, json)
Hash identifier:          QjRT6Aq2AEU/jFYZtSwn5vdqvYoTzYcZ/ToHD5K0Kuw=
Subject key identifier:   72:66:47:48:83:1D:03:4F:BF:17:4B:E1:6E:90:C9:72:C8:70:EC:F3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       59609D24D78B3EBB0AC10D32F66DAED2BC59ED13
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a666630303a3a2f34382d3438203d3e20313337333638.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     137368
IP address blocks:        2001:df3:ff00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:9d:24:d7:8b:3e:bb:0a:c1:0d:32:f6:6d:ae:d2:bc:59:ed:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:bb:41:d0:f1:46:80:fa:25:79:08:81:70:
                    e3:7a:42:e8:cf:d2:3a:4b:ec:b1:5e:4c:f2:f2:20:
                    90:f0:ce:19:74:5e:e1:00:85:ea:2b:a2:c8:0f:20:
                    73:d1:ce:84:b4:13:93:4a:c9:45:cf:30:83:3e:68:
                    3d:ab:17:e5:3f:25:9a:84:a2:58:86:b8:47:37:15:
                    4f:8d:48:d7:f0:ab:d0:bc:43:78:8b:83:5b:3c:d4:
                    d7:b1:2b:53:d7:08:1e:2b:ec:06:0d:e9:09:41:31:
                    7d:ea:a7:e6:b0:37:87:7c:5f:4d:dc:44:75:0d:5c:
                    83:a6:3a:37:a0:68:1c:32:af:b1:5c:b8:10:bf:2e:
                    2c:f8:ed:42:e9:dc:c7:54:ad:07:c3:be:5f:98:54:
                    4d:7f:a4:b8:e9:d0:b0:95:14:d2:8f:7c:cc:26:cb:
                    a3:26:bc:d6:72:1e:3f:5b:56:e4:d5:a7:88:94:20:
                    94:1b:4d:39:58:6a:65:f3:17:64:31:4b:bd:87:b9:
                    64:61:75:b6:d4:0b:8e:fe:9f:bc:e4:d6:34:b1:90:
                    8a:74:20:9f:f8:19:9b:58:86:d5:26:04:46:f6:3c:
                    ca:23:95:60:04:e7:00:15:12:12:f6:2d:58:9c:25:
                    a1:7b:03:6d:09:b0:7b:58:a8:ce:80:63:dd:03:af:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:66:47:48:83:1D:03:4F:BF:17:4B:E1:6E:90:C9:72:C8:70:EC:F3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a666630303a3a2f34382d3438203d3e20313337333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:19:09:5a:a0:a9:5b:4d:2b:18:b0:86:68:dc:1f:7d:ac:
         b9:4d:e8:39:3f:f0:f8:b0:ef:ba:e9:61:88:a8:9d:9d:55:87:
         66:0a:67:fd:38:cc:af:44:e4:ea:85:ca:62:73:1c:73:81:4a:
         7d:d2:99:03:2f:28:e5:c5:da:32:fd:8d:9b:29:91:b7:97:9d:
         24:f7:86:15:1b:da:7d:3e:5a:6f:91:5a:b4:8f:ab:b1:db:a8:
         46:53:41:d4:21:3a:dd:45:f5:5d:0a:52:eb:45:7d:39:76:17:
         0e:93:96:b3:8d:71:da:90:f2:3f:ac:37:22:96:c9:71:7b:f9:
         e0:e7:5a:53:ca:e1:57:8e:d6:2c:1d:0e:7d:4f:a9:dc:a9:2a:
         9e:88:ea:d2:c2:97:e9:b9:fd:bb:64:8b:52:03:95:b9:f1:a0:
         89:8a:a1:c3:5d:45:12:55:ad:62:80:03:af:e0:51:a6:50:0d:
         8d:0e:6c:c3:a7:64:0c:3e:c3:2d:e8:cb:f2:24:60:62:34:22:
         12:6e:0f:66:fc:2e:3d:36:48:71:d8:5d:9e:4e:6e:37:9e:e0:
         32:2a:f1:a9:fc:1e:e3:eb:83:9e:62:41:fc:5e:7a:4c:58:c2:
         bf:7f:49:a7:d1:41:c1:82:ea:fd:b7:2a:d5:be:26:b5:c1:4b:
         7b:db:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----