Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a653838303a3a2f34382d3438203d3e20313431303835.roa
File:                     323030313a6466343a653838303a3a2f34382d3438203d3e20313431303835.roa (raw, json)
Hash identifier:          5GYDngAQI1He4Yuw1U31tcG6m3HsQ8wpEAPTv7XpINs=
Subject key identifier:   8A:95:84:A0:FA:9D:95:BA:2E:F1:14:C6:40:8E:E2:35:59:69:FD:1F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       21BA4AAB506C44012C7B7EB4DA2DF91490A77C7D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a653838303a3a2f34382d3438203d3e20313431303835.roa
Signing time:             Fri 08 Oct 2021 08:00:01 +0000
ROA not before:           Fri 08 Oct 2021 07:55:01 +0000
ROA not after:            Sat 08 Oct 2022 08:00:01 +0000
asID:                     141085
IP address blocks:        2001:df4:e880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ba:4a:ab:50:6c:44:01:2c:7b:7e:b4:da:2d:f9:14:90:a7:7c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:01 2021 GMT
            Not After : Oct  8 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:78:88:6b:3b:5c:4c:25:6c:5a:0f:42:45:
                    c0:cd:ca:1f:0b:65:f5:3f:c3:5d:6b:fa:4a:e4:a8:
                    c1:36:3d:be:ef:28:36:0f:6e:52:a7:60:28:22:73:
                    34:94:6c:ce:5c:4b:8c:04:3a:1f:d8:b7:eb:33:5f:
                    a6:45:ee:17:c8:27:bf:95:d3:fa:41:ae:7e:a8:55:
                    82:2e:6e:5b:aa:69:1b:50:3b:7b:ad:26:cb:cd:46:
                    ad:2f:e0:ea:c3:19:11:47:ea:96:a5:8b:1b:38:4e:
                    4a:f1:f2:f2:39:26:3a:b6:33:7e:50:dd:b7:f0:83:
                    15:d2:30:e0:56:5d:c5:f3:96:31:73:40:04:62:ea:
                    c9:3c:4f:63:10:74:e6:85:73:ad:1e:72:9f:90:24:
                    de:a8:83:c7:90:8c:ec:af:a0:9b:23:db:c1:77:72:
                    7e:0d:06:a7:35:00:a7:7d:03:d4:cb:cb:16:8e:5f:
                    16:5e:04:82:61:ed:05:6c:3f:df:d6:13:18:53:c5:
                    24:b3:5a:d0:f6:7f:9b:34:7c:97:f5:45:c7:21:3a:
                    69:b5:cd:a5:df:2d:5c:6e:d9:8b:8b:bb:b0:3e:2a:
                    08:70:18:6e:58:9a:06:3e:ca:6e:50:34:d9:41:e8:
                    a1:6a:be:34:1a:ad:f0:1f:27:57:49:54:22:5f:d1:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:84:A0:FA:9D:95:BA:2E:F1:14:C6:40:8E:E2:35:59:69:FD:1F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a653838303a3a2f34382d3438203d3e20313431303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e880::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:30:ee:6c:8c:75:90:82:15:a6:dc:7b:ff:96:e7:a7:c9:
         06:7f:c6:bc:35:05:0d:1c:2e:c1:32:ee:37:e5:8f:dd:5a:2d:
         b6:e5:14:1e:82:15:d4:ca:e3:98:d0:a1:63:05:df:5d:9e:8c:
         2f:d0:80:be:ed:ff:08:61:e8:21:d6:c1:b0:59:9b:3f:8b:92:
         6b:a4:a9:b7:48:d6:77:59:35:2c:be:7b:22:1b:0d:f2:24:bf:
         70:08:2d:d6:88:df:61:0f:f5:5e:e3:c9:96:f8:91:ca:5e:97:
         c7:7c:f8:2a:96:a7:2f:9c:71:08:38:1d:5c:91:dd:7a:4a:62:
         5e:1d:2b:ae:41:4d:5a:82:e2:71:bc:9a:1c:5e:a8:e0:3f:15:
         45:69:76:86:d7:96:83:94:58:31:e9:9b:f7:f9:07:10:e3:34:
         cd:c3:86:74:bb:94:26:6b:4a:23:c6:6a:fe:79:95:51:1a:16:
         08:ef:5e:c0:7e:14:fc:58:19:d7:67:57:99:26:66:de:64:9d:
         b3:e6:5c:2b:e1:9c:97:e0:a4:80:e3:87:4d:a3:04:30:eb:31:
         ba:a1:dd:23:24:4a:20:89:60:1c:8b:81:f6:79:1e:8d:d4:b2:
         67:e1:d1:6a:8b:78:a7:4a:b5:39:80:84:e1:86:a9:aa:77:9a:
         f4:78:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----