Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a626430303a3a2f34382d3438203d3e20313338303639.roa
File:                     323030313a6466363a626430303a3a2f34382d3438203d3e20313338303639.roa (raw, json)
Hash identifier:          hriaWQKaCft+rKufIhxkmSnbP7gE/npv+6M6GtRC3ro=
Subject key identifier:   FD:A4:8D:78:68:77:A3:F9:48:0F:BF:0A:B2:BD:0F:21:4B:AB:97:21
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4FACF955C794603601C8B3E463AC0129928AE1A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a626430303a3a2f34382d3438203d3e20313338303639.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 04:55:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     138069
IP address blocks:        2001:df6:bd00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ac:f9:55:c7:94:60:36:01:c8:b3:e4:63:ac:01:29:92:8a:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:00 2021 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject: CN=3082010A0282010100C80F4293288AF78CDCA7D83F02C6BA32D2F4C72D79CD11C539398615107FE186ACE460CFC4F2B4C6349E93B8691B6B50112129F1513B0A0560EFC44586446CD5C3BEC964095ED7FCDF1C2BC86BF035B9441D6DE80ED79DFC35AD48528C160E54E7AF2722EBA77F6BEFFE4C996DF742BD9CEDD56A7276330C51351682E3C0DFA7B640FDA0F461209096503CA7715AFB0522AA659C00909C01DEFF67BE1DD5F1FEAE19E8A7B05947080845FC572D6E9B8F695676D54F195B893A1C44B0304D883649B848295C6DF26B987D8DF04593BF783B18BFDFA6B4C5C3D2D075823E784BDF03CB68DD5139013D1C53779326A6B4ACAD9FA1FBB8E1D07883CF274CFC2F06B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:42:93:28:8a:f7:8c:dc:a7:d8:3f:02:c6:
                    ba:32:d2:f4:c7:2d:79:cd:11:c5:39:39:86:15:10:
                    7f:e1:86:ac:e4:60:cf:c4:f2:b4:c6:34:9e:93:b8:
                    69:1b:6b:50:11:21:29:f1:51:3b:0a:05:60:ef:c4:
                    45:86:44:6c:d5:c3:be:c9:64:09:5e:d7:fc:df:1c:
                    2b:c8:6b:f0:35:b9:44:1d:6d:e8:0e:d7:9d:fc:35:
                    ad:48:52:8c:16:0e:54:e7:af:27:22:eb:a7:7f:6b:
                    ef:fe:4c:99:6d:f7:42:bd:9c:ed:d5:6a:72:76:33:
                    0c:51:35:16:82:e3:c0:df:a7:b6:40:fd:a0:f4:61:
                    20:90:96:50:3c:a7:71:5a:fb:05:22:aa:65:9c:00:
                    90:9c:01:de:ff:67:be:1d:d5:f1:fe:ae:19:e8:a7:
                    b0:59:47:08:08:45:fc:57:2d:6e:9b:8f:69:56:76:
                    d5:4f:19:5b:89:3a:1c:44:b0:30:4d:88:36:49:b8:
                    48:29:5c:6d:f2:6b:98:7d:8d:f0:45:93:bf:78:3b:
                    18:bf:df:a6:b4:c5:c3:d2:d0:75:82:3e:78:4b:df:
                    03:cb:68:dd:51:39:01:3d:1c:53:77:93:26:a6:b4:
                    ac:ad:9f:a1:fb:b8:e1:d0:78:83:cf:27:4c:fc:2f:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:8D:78:68:77:A3:F9:48:0F:BF:0A:B2:BD:0F:21:4B:AB:97:21
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a626430303a3a2f34382d3438203d3e20313338303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:bd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:4f:bf:12:f3:9b:ba:6f:e8:43:c8:a4:7c:60:f2:b7:57:
         da:0b:94:f6:a6:48:34:da:79:fd:d4:6a:44:24:3a:74:20:44:
         d6:5c:d8:66:c7:2a:26:e2:98:0d:cc:cc:ea:a0:9a:14:49:98:
         06:f5:ee:95:c8:4a:49:a7:d9:28:09:bf:30:14:ec:00:e7:19:
         98:b3:c9:d8:50:c3:6e:18:27:f5:a4:5d:87:69:46:75:48:63:
         4a:ff:0a:14:40:24:66:fa:7f:05:f0:b9:7a:73:37:56:51:bf:
         27:d6:e3:5b:23:47:c4:e2:b6:e6:db:8c:1e:44:f1:40:42:aa:
         97:2c:ab:81:e8:d6:0a:6d:39:c5:3a:78:47:28:98:85:06:16:
         98:4c:6b:69:4a:61:3b:42:cc:8c:09:31:57:d2:64:8a:44:14:
         5d:01:6b:8f:26:77:6f:c8:61:cd:32:9e:41:45:4c:b9:13:18:
         f6:6d:7e:9d:c4:19:0b:50:3d:7f:0c:6c:88:c4:7f:61:d8:33:
         2a:e0:2d:09:ef:a2:2e:38:2d:74:4b:c9:42:3c:c1:53:3a:a0:
         c2:c8:9b:fe:20:78:f8:08:a2:a3:a3:b2:ff:66:7c:26:71:11:
         02:44:0c:87:ef:0b:76:c3:08:b0:dd:21:44:86:d3:02:a0:d4:
         34:5f:af:c6
-----BEGIN CERTIFICATE-----
MIIHEzCCBfugAwIBAgIUT6z5VceUYDYByLPkY6wBKZKK4aAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExOTA0NTUwMFoX
DTIyMTExOTA1MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDODBGNDI5MzI4OEFGNzhDRENBN0Q4M0YwMkM2QkEzMkQyRjRDNzJENzlD
RDExQzUzOTM5ODYxNTEwN0ZFMTg2QUNFNDYwQ0ZDNEYyQjRDNjM0OUU5M0I4Njkx
QjZCNTAxMTIxMjlGMTUxM0IwQTA1NjBFRkM0NDU4NjQ0NkNENUMzQkVDOTY0MDk1
RUQ3RkNERjFDMkJDODZCRjAzNUI5NDQxRDZERTgwRUQ3OURGQzM1QUQ0ODUyOEMx
NjBFNTRFN0FGMjcyMkVCQTc3RjZCRUZGRTRDOTk2REY3NDJCRDlDRURENTZBNzI3
NjMzMEM1MTM1MTY4MkUzQzBERkE3QjY0MEZEQTBGNDYxMjA5MDk2NTAzQ0E3NzE1
QUZCMDUyMkFBNjU5QzAwOTA5QzAxREVGRjY3QkUxREQ1RjFGRUFFMTlFOEE3QjA1
OTQ3MDgwODQ1RkM1NzJENkU5QjhGNjk1Njc2RDU0RjE5NUI4OTNBMUM0NEIwMzA0
RDg4MzY0OUI4NDgyOTVDNkRGMjZCOTg3RDhERjA0NTkzQkY3ODNCMThCRkRGQTZC
NEM1QzNEMkQwNzU4MjNFNzg0QkRGMDNDQjY4REQ1MTM5MDEzRDFDNTM3NzkzMjZB
NkI0QUNBRDlGQTFGQkI4RTFEMDc4ODNDRjI3NENGQzJGMDZCOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDID0KTKIr3jNyn2D8Cxroy
0vTHLXnNEcU5OYYVEH/hhqzkYM/E8rTGNJ6TuGkba1ARISnxUTsKBWDvxEWGRGzV
w77JZAle1/zfHCvIa/A1uUQdbegO1538Na1IUowWDlTnryci66d/a+/+TJlt90K9
nO3VanJ2MwxRNRaC48Dfp7ZA/aD0YSCQllA8p3Fa+wUiqmWcAJCcAd7/Z74d1fH+
rhnop7BZRwgIRfxXLW6bj2lWdtVPGVuJOhxEsDBNiDZJuEgpXG3ya5h9jfBFk794
Oxi/36a0xcPS0HWCPnhL3wPLaN1ROQE9HFN3kyamtKytn6H7uOHQeIPPJ0z8Lwa5
AgMBAAGjggIKMIICBjAdBgNVHQ4EFgQU/aSNeGh3o/lID78Ksr0PIUurlyEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBigYIKwYB
BQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzAzMDMxM2E2NDY2MzYzYTYyNjQzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9r0AMA0GCSqGSIb3DQEBCwUAA4IBAQB9rU+/EvObum/oQ8ikfGDyt1faC5T2pkg0
2nn91GpEJDp0IETWXNhmxyom4pgNzMzqoJoUSZgG9e6VyEpJp9koCb8wFOwA5xmY
s8nYUMNuGCf1pF2HaUZ1SGNK/woUQCRm+n8F8Ll6czdWUb8n1uNbI0fE4rbm24we
RPFAQqqXLKuB6NYKbTnFOnhHKJiFBhaYTGtpSmE7QsyMCTFX0mSKRBRdAWuPJndv
yGHNMp5BRUy5Exj2bX6dxBkLUD1/DGyIxH9h2DMq4C0J76IuOC10S8lCPMFTOqDC
yJv+IHj4CKKjo7L/ZnwmcRECRAyH7wt2wwiw3SFEhtMCoNQ0X6/G
-----END CERTIFICATE-----