Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e203435333132.roa
File:                     323030313a6466373a626430303a3a2f34382d3438203d3e203435333132.roa (raw, json)
Hash identifier:          QzeDhbyOf9KmcmbTspEet4wS8LxczZSfifjVczgKm6g=
Subject key identifier:   9C:2D:4C:BE:12:3B:08:51:16:D6:2A:73:11:8E:1B:B0:6C:7E:C3:5A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       716BBB58F24F70141A549CB2739FEEDD6D6E3760
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e203435333132.roa
Signing time:             Thu 04 Nov 2021 09:00:00 +0000
ROA not before:           Thu 04 Nov 2021 08:55:00 +0000
ROA not after:            Fri 04 Nov 2022 09:00:00 +0000
asID:                     45312
IP address blocks:        2001:df7:bd00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6b:bb:58:f2:4f:70:14:1a:54:9c:b2:73:9f:ee:dd:6d:6e:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  4 08:55:00 2021 GMT
            Not After : Nov  4 09:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:10:55:fd:14:a1:9e:59:2b:bc:94:e5:78:
                    1b:06:05:75:47:bb:50:0b:39:47:e6:34:fa:6d:d6:
                    c0:5a:80:81:9c:13:02:5a:b0:34:d4:95:2b:26:87:
                    81:59:e9:25:b1:84:52:d5:0a:4f:5f:f2:9d:69:ba:
                    47:cc:0d:91:8d:0b:9b:86:47:e7:f3:ca:66:0f:a1:
                    8c:bf:22:aa:d7:8f:44:2b:d6:51:7d:ff:db:ca:46:
                    12:74:d5:9c:67:7b:a3:31:91:45:c5:cc:e1:78:9c:
                    32:c7:e2:09:81:0a:ea:86:66:f1:82:a1:04:8a:aa:
                    85:22:f3:9d:d3:46:b0:b1:a2:de:50:dd:da:ea:52:
                    24:3a:3a:53:90:c5:32:4d:36:48:15:d5:df:c3:05:
                    32:d8:a7:62:d7:f9:2a:6e:c6:0f:8a:eb:e4:45:59:
                    b8:0b:52:19:fd:8e:e0:77:aa:c5:50:1d:a0:85:b0:
                    ba:6f:62:a2:07:ab:cb:75:e2:40:c8:20:6d:57:ab:
                    6b:8e:da:0a:26:cc:f0:78:6c:5f:45:97:58:cd:76:
                    05:19:4d:2d:cd:4e:b3:bb:6c:ea:59:16:e1:b4:e2:
                    e4:13:8c:45:eb:5e:9a:5a:03:5b:ef:9a:d5:9e:f8:
                    36:52:66:d1:40:45:16:f9:ed:05:bc:cc:24:6b:35:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:4C:BE:12:3B:08:51:16:D6:2A:73:11:8E:1B:B0:6C:7E:C3:5A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a626430303a3a2f34382d3438203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:bd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:90:89:bc:11:ee:97:0b:d9:27:8b:ed:9e:7c:29:1f:1c:
         c8:e2:9e:50:61:cc:9b:ba:0e:17:90:f2:27:c3:6e:8b:0a:f4:
         9a:ea:94:eb:60:a4:2f:e4:05:b7:c4:e8:c6:fb:f3:39:70:65:
         2b:55:44:8f:50:2e:04:23:1c:88:30:95:56:03:a7:13:43:ee:
         62:ab:d9:33:82:d6:aa:e7:20:c7:d2:ad:81:83:04:02:6c:00:
         54:19:b4:da:4e:2e:a3:1a:aa:6e:10:2b:5e:5c:9e:80:8c:82:
         3d:85:28:18:67:93:95:d2:b6:2e:53:6c:37:9a:1d:d1:37:ec:
         ee:f5:12:3f:d6:09:01:51:a0:b9:da:bd:fd:90:11:95:55:8e:
         5c:54:e7:4a:d4:a5:41:96:1c:6a:d5:f3:dc:9f:28:26:c3:dd:
         fd:11:87:e4:f1:df:ff:13:0d:44:5b:4a:8c:16:94:7a:63:f2:
         a5:7f:27:1e:fa:82:09:21:f3:eb:11:16:81:a4:39:9a:56:c4:
         eb:0e:4a:f4:07:9b:ab:2d:d5:62:63:44:a7:79:5a:86:27:99:
         9d:77:d1:bb:35:16:40:b1:35:27:9b:80:2d:85:45:31:93:37:
         8b:a1:71:76:44:d7:08:19:6a:92:dc:b8:30:30:57:50:a0:0a:
         5c:4e:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----