Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a383030303a3a2f33322d3438203d3e2034383030.roa
File:                     323430303a383030303a3a2f33322d3438203d3e2034383030.roa (raw, json)
Hash identifier:          OhGzPMVBlUp4nYqnqWQvIBA5pOwoYt0nyKBgVyQWts4=
Subject key identifier:   1D:50:96:95:6F:5A:A6:14:D5:22:31:8C:8B:77:CF:3F:EC:F5:36:9D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CAE63D142B9396F8B4EC6B9B0D6BA58386F8D94
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a383030303a3a2f33322d3438203d3e2034383030.roa
Signing time:             Fri 12 Nov 2021 09:51:49 +0000
ROA not before:           Fri 12 Nov 2021 09:46:49 +0000
ROA not after:            Sat 12 Nov 2022 09:51:49 +0000
asID:                     4800
IP address blocks:        2400:8000::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ae:63:d1:42:b9:39:6f:8b:4e:c6:b9:b0:d6:ba:58:38:6f:8d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 09:46:49 2021 GMT
            Not After : Nov 12 09:51:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:c9:2f:8f:8a:f3:cf:2e:94:10:68:1d:3a:
                    09:df:cb:1e:82:a3:7c:4c:77:52:3e:e4:16:47:d4:
                    ec:4b:a2:22:08:b1:65:8f:d2:64:ba:d5:bd:f8:9d:
                    18:23:55:46:87:92:49:fe:c8:37:b3:ef:da:41:f6:
                    a5:d6:4d:5f:7a:46:6f:91:2b:0c:9f:db:cb:f3:52:
                    05:0f:66:d6:7e:2a:eb:a2:08:4b:d6:8e:42:bf:e7:
                    c7:8f:ad:db:dd:48:95:a4:d5:e5:4d:99:9b:3e:12:
                    df:41:c5:4d:1d:31:3c:81:92:11:68:1b:38:c9:cb:
                    71:8c:b8:7c:97:a9:9f:81:ba:ab:c3:90:22:4e:27:
                    e8:12:2b:1b:d4:eb:bb:4e:26:b2:38:49:cb:57:9b:
                    05:2f:87:91:90:3b:67:21:77:ac:6c:95:bf:33:7e:
                    48:11:6e:04:d5:1c:46:b7:64:98:53:de:9e:0e:76:
                    bb:34:ee:c4:13:3c:f5:8c:7d:c4:d2:b6:7f:61:32:
                    71:40:3b:57:f4:17:14:8f:e2:82:d7:50:23:56:70:
                    f8:7a:06:18:6d:8a:06:61:7a:ec:3f:56:40:27:61:
                    0e:8e:c2:16:29:0a:0b:67:b4:5a:59:50:17:2f:f6:
                    45:fb:b4:fb:05:1d:80:56:38:e0:cc:89:37:76:bd:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:96:95:6F:5A:A6:14:D5:22:31:8C:8B:77:CF:3F:EC:F5:36:9D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a383030303a3a2f33322d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:4c:93:09:f1:63:1d:e7:e8:5e:a1:04:77:44:d8:a3:e1:
         ce:83:f1:56:7c:7e:1e:fb:49:26:79:12:77:c8:9b:2a:c9:df:
         2a:8c:ba:09:aa:36:f0:d1:d3:6f:76:e9:f3:53:b5:2f:25:66:
         fa:1a:98:a2:a3:12:e8:50:c7:62:e0:f6:91:30:9e:6a:5a:15:
         0b:35:e5:50:81:f4:4e:2b:43:b6:aa:47:e8:b3:ae:e7:0e:8f:
         12:1a:8d:84:2e:7c:d8:15:15:21:11:df:83:c8:33:f3:b9:76:
         66:95:b8:36:ed:93:c8:93:ce:79:c3:34:32:bb:bb:28:85:66:
         3d:9e:d2:9f:c5:d2:c2:84:ee:e2:93:10:2d:74:7a:3c:fe:49:
         07:96:45:bb:1e:05:fd:f5:a3:b6:14:18:f5:92:7c:a8:03:57:
         b4:74:aa:89:f7:ad:f1:1d:3b:0a:aa:32:82:a5:ca:b8:8b:31:
         1a:3c:95:db:ea:f4:1e:95:6e:2d:6a:04:ba:8c:a8:10:8b:c8:
         ce:60:19:35:40:09:df:56:aa:51:f4:52:58:d4:a7:fc:d9:97:
         00:62:d6:1f:23:8b:50:21:22:b0:af:70:0e:56:59:3b:c0:b6:
         31:7c:98:51:53:0f:49:b7:4e:00:82:99:e8:b5:4d:7e:a6:0a:
         5e:24:7a:fb
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUXK5j0UK5OW+LTsa5sNa6WDhvjZQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMjA5NDY0OVoX
DTIyMTExMjA5NTE0OVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMDY0QzkyRjhGOEFGM0NGMkU5NDEwNjgxRDNBMDlERkNCMUU4MkEzN0M0
Qzc3NTIzRUU0MTY0N0Q0RUM0QkEyMjIwOEIxNjU4RkQyNjRCQUQ1QkRGODlEMTgy
MzU1NDY4NzkyNDlGRUM4MzdCM0VGREE0MUY2QTVENjRENUY3QTQ2NkY5MTJCMEM5
RkRCQ0JGMzUyMDUwRjY2RDY3RTJBRUJBMjA4NEJENjhFNDJCRkU3Qzc4RkFEREJE
RDQ4OTVBNEQ1RTU0RDk5OUIzRTEyREY0MUM1NEQxRDMxM0M4MTkyMTE2ODFCMzhD
OUNCNzE4Q0I4N0M5N0E5OUY4MUJBQUJDMzkwMjI0RTI3RTgxMjJCMUJENEVCQkI0
RTI2QjIzODQ5Q0I1NzlCMDUyRjg3OTE5MDNCNjcyMTc3QUM2Qzk1QkYzMzdFNDgx
MTZFMDRENTFDNDZCNzY0OTg1M0RFOUUwRTc2QkIzNEVFQzQxMzNDRjU4QzdEQzRE
MkI2N0Y2MTMyNzE0MDNCNTdGNDE3MTQ4RkUyODJENzUwMjM1NjcwRjg3QTA2MTg2
RDhBMDY2MTdBRUMzRjU2NDAyNzYxMEU4RUMyMTYyOTBBMEI2N0I0NUE1OTUwMTcy
RkY2NDVGQkI0RkIwNTFEODA1NjM4RTBDQzg5Mzc3NkJERDY3MTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZMkvj4rzzy6UEGgdOgnf
yx6Co3xMd1I+5BZH1OxLoiIIsWWP0mS61b34nRgjVUaHkkn+yDez79pB9qXWTV96
Rm+RKwyf28vzUgUPZtZ+KuuiCEvWjkK/58ePrdvdSJWk1eVNmZs+Et9BxU0dMTyB
khFoGzjJy3GMuHyXqZ+BuqvDkCJOJ+gSKxvU67tOJrI4SctXmwUvh5GQO2chd6xs
lb8zfkgRbgTVHEa3ZJhT3p4Odrs07sQTPPWMfcTStn9hMnFAO1f0FxSP4oLXUCNW
cPh6BhhtigZheuw/VkAnYQ6OwhYpCgtntFpZUBcv9kX7tPsFHYBWOODMiTd2vdZx
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUHVCWlW9aphTVIjGMi3fPP+z1Np0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzIzNDMwMzAzYTM4MzAzMDMwM2EzYTJmMzMzMjJk
MzQzODIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAIAAMA0GCSqGSIb3DQEB
CwUAA4IBAQAf1UyTCfFjHefoXqEEd0TYo+HOg/FWfH4e+0kmeRJ3yJsqyd8qjLoJ
qjbw0dNvdunzU7UvJWb6GpiioxLoUMdi4PaRMJ5qWhULNeVQgfROK0O2qkfos67n
Do8SGo2ELnzYFRUhEd+DyDPzuXZmlbg27ZPIk855wzQyu7sohWY9ntKfxdLChO7i
kxAtdHo8/kkHlkW7HgX99aO2FBj1knyoA1e0dKqJ963xHTsKqjKCpcq4izEaPJXb
6vQelW4tagS6jKgQi8jOYBk1QAnfVqpR9FJY1Kf82ZcAYtYfI4tQISKwr3AOVlk7
wLYxfJhRUw9Jt04AgpnotU1+pgpeJHr7
-----END CERTIFICATE-----