Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a333630303a3a2f34382d3438203d3e203536323336.roa
File:                     323030313a6466353a333630303a3a2f34382d3438203d3e203536323336.roa (raw, json)
Hash identifier:          Tjlb8Oj8Ut2DrsTPttd8e7wbyIaePR0HbvQbOeb2J2Y=
Subject key identifier:   9A:33:E8:A5:E5:FA:29:52:26:0C:D1:65:A2:CC:0A:E3:D3:E1:02:34
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       053D8461CCC724A2AE203626A9D984D5FA0A73DC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a333630303a3a2f34382d3438203d3e203536323336.roa
Signing time:             Wed 06 Oct 2021 05:00:01 +0000
ROA not before:           Wed 06 Oct 2021 04:55:01 +0000
ROA not after:            Thu 06 Oct 2022 05:00:01 +0000
asID:                     56236
IP address blocks:        2001:df5:3600::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3d:84:61:cc:c7:24:a2:ae:20:36:26:a9:d9:84:d5:fa:0a:73:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  6 04:55:01 2021 GMT
            Not After : Oct  6 05:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:7c:06:e2:64:2d:79:9c:bf:b5:c2:6c:11:
                    6e:1f:c7:c7:1b:7a:3f:e8:82:22:fa:7f:52:cc:3a:
                    15:1f:1b:2c:d1:7b:02:57:1a:a2:51:f2:2d:1d:30:
                    61:cf:b5:11:57:0f:b6:29:76:85:0a:9d:36:cf:ca:
                    fb:90:27:9f:fb:55:95:84:de:7a:4e:5e:db:de:9f:
                    20:05:14:c5:ed:19:a8:f3:13:21:81:43:05:5c:23:
                    1d:3f:d9:3a:7f:d9:39:1f:35:46:96:b4:bb:db:da:
                    7a:31:ba:f9:5c:c9:54:e1:74:3b:24:e3:65:9f:0c:
                    5b:61:73:e8:ab:f8:ad:b3:0c:7c:e3:0a:3e:d7:8a:
                    12:e4:00:53:f6:f1:74:43:bb:36:92:64:38:bc:d7:
                    bb:09:ff:a9:c2:72:13:71:ec:9d:d3:05:d6:bf:34:
                    99:40:c5:ad:4b:12:d0:fc:bf:06:cf:78:4d:88:3f:
                    a7:47:48:00:d0:fb:79:02:8f:83:0c:d0:4c:30:19:
                    30:e9:6e:b7:60:ad:e9:8c:37:44:06:fc:92:14:21:
                    ae:ed:41:52:48:f0:5a:7a:6e:97:b3:15:84:67:da:
                    11:34:78:18:88:d3:90:03:7b:ce:36:45:13:86:09:
                    79:2f:0f:82:3b:f5:34:ea:90:e8:bf:c9:66:8b:d4:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:33:E8:A5:E5:FA:29:52:26:0C:D1:65:A2:CC:0A:E3:D3:E1:02:34
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a333630303a3a2f34382d3438203d3e203536323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:3600::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:ba:c1:8f:fa:5c:f4:67:18:60:10:19:eb:46:41:ac:e5:
         c4:a3:08:26:07:72:25:06:40:43:a5:8a:0b:b8:d4:85:10:4c:
         5e:46:7c:61:d0:04:f4:ce:cf:05:24:f6:6a:33:d8:49:7e:ed:
         dc:76:83:c6:82:05:9b:9a:b6:c2:13:71:fc:16:cb:49:08:dc:
         81:ed:59:3a:44:9f:81:07:50:22:49:70:91:00:7e:c6:76:8e:
         80:ff:09:62:15:b8:4f:49:88:e5:ff:7d:01:b6:8e:3d:7f:6a:
         14:27:c1:5a:e6:1f:4f:2a:47:be:52:2a:15:38:14:88:dc:8a:
         76:76:c8:ac:5b:6c:28:91:a3:3f:ec:37:7d:6c:e0:fe:e8:b9:
         ce:e2:07:9c:25:79:8a:07:60:81:a4:58:c0:75:e3:93:67:dd:
         df:21:a8:16:0e:fc:f2:c0:8a:87:b5:6a:e7:d0:c2:dd:e1:b5:
         28:f3:d6:b3:b0:f9:cb:7c:d3:ce:09:a6:2b:1c:ef:bb:72:5d:
         b0:22:63:d3:4f:89:31:14:90:a5:65:99:42:c9:c4:d8:da:28:
         7c:df:98:1f:78:c9:e4:84:79:39:32:43:59:01:59:e3:eb:5b:
         be:ab:dc:8f:1c:9d:b4:59:bf:93:e3:c4:06:df:08:ea:ea:68:
         06:cc:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----