Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e20313331373237.roa
File:                     323030313a6466373a626430303a3a2f34382d3438203d3e20313331373237.roa (raw, json)
Hash identifier:          LRKPhV5Tw8Xa+b4l+YgOgDezc3BfdTXQro2k+7jaeNY=
Subject key identifier:   15:4C:D9:ED:F0:DD:CA:F5:6B:05:24:75:BB:D4:07:43:E2:92:E7:CF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       07AD461CF3A5E07B36A243D25885AE906E24CC74
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e20313331373237.roa
Signing time:             Wed 03 Nov 2021 07:00:00 +0000
ROA not before:           Wed 03 Nov 2021 06:55:00 +0000
ROA not after:            Thu 03 Nov 2022 07:00:00 +0000
asID:                     131727
IP address blocks:        2001:df7:bd00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:46:1c:f3:a5:e0:7b:36:a2:43:d2:58:85:ae:90:6e:24:cc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  3 06:55:00 2021 GMT
            Not After : Nov  3 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:f9:b0:93:22:59:99:0a:81:56:fe:81:f1:
                    17:cf:2f:63:fc:e4:e1:48:71:25:b8:27:ef:c6:1f:
                    e5:e2:e4:66:5d:5c:23:be:9a:2c:08:2f:a5:f4:02:
                    86:1d:9c:78:f7:2f:57:dc:23:54:87:22:93:f0:fd:
                    3d:0f:f1:f0:66:75:ec:1f:fb:67:49:f4:5c:34:9e:
                    48:37:40:73:c1:a6:b8:a8:52:ab:ed:29:50:4a:59:
                    36:ed:05:7d:f2:38:26:56:44:d6:6b:c5:70:47:82:
                    2d:07:fe:4c:b2:54:dd:fe:bc:75:90:9f:61:bd:da:
                    27:67:29:3f:79:59:92:92:8f:54:b5:17:cf:bc:ff:
                    af:c8:05:93:d7:8d:ee:84:58:1e:ba:92:da:6f:b7:
                    d9:81:fb:3f:b2:f4:b1:39:56:b5:3a:43:8d:ce:aa:
                    dc:b8:06:2b:28:47:e9:76:27:55:bf:75:e6:76:ee:
                    b0:65:77:21:3d:d9:79:6f:42:d3:06:ef:5f:57:ac:
                    05:4e:3a:04:c0:67:b2:02:df:01:6f:0b:97:15:68:
                    a1:42:1d:4b:bc:0a:89:25:3d:31:1f:eb:85:ee:54:
                    59:9a:63:a9:a3:6d:c3:a6:09:28:fd:92:34:55:3b:
                    b2:07:7a:7e:8a:68:fd:59:49:5f:e8:f7:fe:33:04:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:D9:ED:F0:DD:CA:F5:6B:05:24:75:BB:D4:07:43:E2:92:E7:CF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e20313331373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:bd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:9a:19:5e:aa:bf:df:96:14:ba:30:42:18:6d:14:29:84:
         a4:1a:3a:b1:f7:75:17:f1:84:46:2a:8c:bc:ac:23:62:09:43:
         d2:72:14:7d:e8:12:9c:73:52:17:92:f1:db:11:5a:62:df:c7:
         4f:bc:41:7c:f6:3e:02:5e:ff:04:4d:bf:51:37:d9:89:8c:a7:
         d3:10:98:33:17:9a:3d:c8:11:e3:91:62:17:30:06:06:8b:5e:
         6a:28:ea:e9:35:79:a7:a6:98:57:47:14:ed:16:56:13:bf:ba:
         1f:6d:6a:31:3f:8e:83:a0:56:b9:f1:4d:5c:14:a2:61:50:e5:
         2b:15:7e:15:17:8f:70:2a:3c:97:0c:1d:7a:cc:33:49:26:15:
         b4:47:ba:12:49:a2:61:6d:55:14:46:38:41:b9:bc:2f:f5:02:
         4a:be:ae:8a:b7:a8:f1:8d:35:af:d2:ce:a5:5b:a6:87:10:17:
         47:5a:b4:10:cd:a6:41:38:57:5b:80:45:38:07:89:f3:b6:ef:
         69:38:da:9d:06:dc:e7:77:3e:aa:43:2d:78:93:ff:09:c5:c0:
         c0:02:85:c4:a0:a4:35:bb:74:99:bd:8b:26:08:45:fa:9f:3c:
         57:b1:b4:e2:c4:bc:5a:99:28:60:1b:25:c9:8b:65:b2:a7:f5:
         c2:ae:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----