Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333031.roa
File:                     323030313a6466353a376230303a3a2f34382d3438203d3e20313337333031.roa (raw, json)
Hash identifier:          4YNvAtZpalGBBJBdtveqG1UHZXQAGnLTPImWLO7pBsk=
Subject key identifier:   74:C0:D7:8D:C3:E3:2D:EF:94:E6:D6:92:B7:45:3B:1D:BB:24:B1:35
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       625DB211704A0074526DF9AB2460D7853357918A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333031.roa
Signing time:             Fri 19 Nov 2021 05:00:01 +0000
ROA not before:           Fri 19 Nov 2021 04:55:01 +0000
ROA not after:            Sat 19 Nov 2022 05:00:01 +0000
asID:                     137301
IP address blocks:        2001:df5:7b00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5d:b2:11:70:4a:00:74:52:6d:f9:ab:24:60:d7:85:33:57:91:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:01 2021 GMT
            Not After : Nov 19 05:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:d4:7a:2b:e6:fa:70:2e:1b:5b:26:4b:e4:
                    ae:21:2d:a0:db:1c:33:38:e9:f8:76:ee:a3:00:f5:
                    55:38:8a:b5:d3:05:f0:71:6e:3f:c4:a9:de:5d:91:
                    ea:8d:48:64:b5:31:e4:c6:bf:51:6d:b2:c4:9c:51:
                    27:ec:a1:a7:10:ae:ef:bd:64:36:3c:f9:c8:21:ba:
                    a6:72:80:75:1b:b2:a2:9b:70:a5:86:c4:f5:7e:2a:
                    cb:cc:b6:a4:98:ec:9f:9d:16:ba:d3:7d:96:c1:00:
                    dc:59:2e:23:30:06:66:06:ed:01:bc:5c:79:6c:32:
                    72:40:c8:0c:a6:04:b1:77:9f:df:47:6f:89:b3:96:
                    40:d7:3d:1a:c7:e4:7f:83:34:d9:b0:54:de:76:79:
                    f4:ff:2a:18:d7:39:68:a2:3f:28:b6:1e:ab:0d:06:
                    df:f7:79:da:83:85:d2:ca:8b:c9:ee:a7:2b:1a:d6:
                    d0:b0:df:68:d9:c5:50:4a:1c:9b:cd:aa:74:d8:5a:
                    eb:69:d8:e3:48:67:44:2b:36:70:59:39:91:60:64:
                    34:be:4d:09:ce:d6:cb:d4:62:14:70:ac:39:d7:5f:
                    af:e4:60:d1:70:ee:3f:6c:ab:a2:55:4b:04:19:cf:
                    de:5f:c3:12:f5:10:51:5b:ef:af:b8:64:09:96:a3:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:D7:8D:C3:E3:2D:EF:94:E6:D6:92:B7:45:3B:1D:BB:24:B1:35
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:7b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:16:96:65:fa:a6:e7:8e:af:88:07:30:fa:21:7b:46:42:
         ec:62:4e:82:e7:20:85:43:71:22:62:58:52:27:b6:9e:4e:c7:
         68:cc:a9:64:87:d8:2d:30:70:0e:d6:8d:26:f9:c1:b3:c3:10:
         07:35:4d:f7:49:ce:e8:68:74:41:98:92:c9:00:b8:81:ee:00:
         9e:b8:e1:75:23:b3:67:e5:bd:af:b0:e8:e6:75:60:82:bb:05:
         d1:39:3d:7d:df:9c:55:44:1e:b3:ab:23:97:93:2f:24:b8:73:
         6c:5c:73:9e:f4:5a:1f:76:7f:a5:70:1a:a8:f9:8d:4d:17:13:
         3e:d5:48:6d:c3:70:a5:89:61:0f:fe:c5:75:18:73:6e:02:b8:
         a1:27:0e:83:0f:c7:0b:2a:d4:f1:4d:65:e9:73:2b:b0:97:99:
         c5:f6:94:28:b8:21:79:da:ed:8c:cf:49:13:d7:ba:39:9d:3d:
         05:86:56:db:c4:7d:4a:40:91:3a:fe:6c:2f:b3:77:d6:82:fa:
         44:d1:a4:36:51:0c:67:01:6b:01:6c:cb:f1:a9:77:cf:86:2b:
         dc:ae:9f:82:27:55:58:b0:75:95:f2:9d:0f:ee:b7:2b:43:9b:
         ba:8d:b9:bf:c1:eb:9d:9d:3a:5f:3f:bf:5f:b2:4e:83:fc:31:
         06:f5:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----