Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613034303a666630313a3a2f34382d3438203d3e203535363838.roa
File:                     323430363a613034303a666630313a3a2f34382d3438203d3e203535363838.roa (raw, json)
Hash identifier:          d4sYa4NdWnYqOR+rhWPCBUcYCW2ONYIEZJGhCzrRPO8=
Subject key identifier:   93:F1:11:2F:B8:A1:F4:67:7A:E7:41:04:D5:19:EE:DE:36:61:2F:FD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       33DE449DC103C5C7E139EF048DD2F1AC854784D2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613034303a666630313a3a2f34382d3438203d3e203535363838.roa
Signing time:             Fri 22 Oct 2021 04:00:00 +0000
ROA not before:           Fri 22 Oct 2021 03:55:00 +0000
ROA not after:            Sat 22 Oct 2022 04:00:00 +0000
asID:                     55688
IP address blocks:        2406:a040:ff01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:de:44:9d:c1:03:c5:c7:e1:39:ef:04:8d:d2:f1:ac:85:47:84:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 22 03:55:00 2021 GMT
            Not After : Oct 22 04:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:67:38:40:7f:cc:22:c9:f6:fa:1c:1a:75:
                    00:3d:7e:26:1d:c1:b0:fc:7e:29:33:56:4e:db:d9:
                    4a:96:12:99:21:9a:ff:81:72:6f:24:16:43:02:9b:
                    b1:0f:ca:32:db:31:ff:34:93:9e:fa:b7:3b:41:4b:
                    c1:16:2f:e6:8c:24:e0:89:2c:bd:92:aa:b2:b2:03:
                    24:52:62:b4:7d:b1:21:24:e4:a7:eb:92:29:dd:0e:
                    6e:bd:53:0b:73:c0:ef:87:d2:b9:20:f3:9e:59:3c:
                    a3:c1:2f:91:55:45:7b:86:3c:f5:f9:5c:43:57:3f:
                    73:70:03:d9:61:ea:2d:9a:87:ed:cf:57:ef:98:6c:
                    0e:c5:71:88:d9:81:a0:12:9b:8d:08:6e:1e:7d:03:
                    6d:46:ae:f2:ab:7b:a4:ff:13:2a:5a:48:aa:d3:99:
                    0a:bb:b0:76:23:9b:7b:0b:8a:81:51:b8:d3:c5:98:
                    6c:f3:79:36:99:f4:02:ec:c8:e1:44:77:0f:41:f5:
                    f4:6e:a1:4f:3b:ff:84:71:f1:80:c9:13:27:12:bc:
                    85:ff:68:9a:0b:f0:47:89:0a:39:35:c3:cd:f2:06:
                    15:ac:a0:ea:3b:01:f2:4b:5d:e8:e7:22:f0:88:fb:
                    7f:b6:a7:7f:ef:1c:d3:1c:67:11:67:f4:c3:94:a3:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F1:11:2F:B8:A1:F4:67:7A:E7:41:04:D5:19:EE:DE:36:61:2F:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613034303a666630313a3a2f34382d3438203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a040:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:ee:97:54:1a:55:56:9b:47:74:16:2b:22:11:dd:b7:0a:
         8d:83:c9:17:45:2e:01:f0:0c:cd:c5:13:b0:37:9d:bd:f7:93:
         2d:c0:0f:7b:8c:25:90:ff:a9:0a:11:56:92:2b:c1:a4:62:c2:
         0f:51:dc:b7:28:5a:5e:63:42:6a:fc:5a:92:03:05:1b:7b:39:
         b9:66:f5:32:b8:1f:22:ab:7c:6f:98:44:d1:00:01:b5:cf:2e:
         ad:87:7a:c7:d4:49:a0:6a:f8:d3:7b:de:6f:9c:c5:66:59:3b:
         ce:28:bc:02:40:fe:45:90:3a:af:95:4c:f5:59:5b:58:d6:1a:
         cb:db:fe:f4:ff:db:a5:62:0a:55:40:d3:bf:32:62:76:4b:b3:
         c8:d8:8e:ec:ad:94:73:cd:32:3a:8f:c9:c6:81:31:f4:fa:d2:
         78:fb:7c:f7:13:a6:8d:e5:60:42:46:82:d0:b7:af:44:a6:71:
         5f:22:69:53:d3:a3:e5:6b:d0:25:0f:fd:08:53:d3:ce:42:b3:
         d0:2c:6a:c6:42:8a:dc:95:05:85:b9:12:24:95:8d:25:6c:83:
         3d:1d:38:95:0a:4a:8b:05:2a:aa:1a:62:eb:03:71:86:9e:e1:
         76:10:e3:76:7d:d4:8b:17:ff:0d:76:79:fc:ea:25:35:8b:f4:
         9a:83:54:a4
-----BEGIN CERTIFICATE-----
MIIHEzCCBfugAwIBAgIUM95EncEDxcfhOe8EjdLxrIVHhNIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAyMjAzNTUwMFoX
DTIyMTAyMjA0MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMDA3NjczODQwN0ZDQzIyQzlGNkZBMUMxQTc1MDAzRDdFMjYxREMxQjBG
QzdFMjkzMzU2NEVEQkQ5NEE5NjEyOTkyMTlBRkY4MTcyNkYyNDE2NDMwMjlCQjEw
RkNBMzJEQjMxRkYzNDkzOUVGQUI3M0I0MTRCQzExNjJGRTY4QzI0RTA4OTJDQkQ5
MkFBQjJCMjAzMjQ1MjYyQjQ3REIxMjEyNEU0QTdFQjkyMjlERDBFNkVCRDUzMEI3
M0MwRUY4N0QyQjkyMEYzOUU1OTNDQTNDMTJGOTE1NTQ1N0I4NjNDRjVGOTVDNDM1
NzNGNzM3MDAzRDk2MUVBMkQ5QTg3RURDRjU3RUY5ODZDMEVDNTcxODhEOTgxQTAx
MjlCOEQwODZFMUU3RDAzNkQ0NkFFRjJBQjdCQTRGRjEzMkE1QTQ4QUFEMzk5MEFC
QkIwNzYyMzlCN0IwQjhBODE1MUI4RDNDNTk4NkNGMzc5MzY5OUY0MDJFQ0M4RTE0
NDc3MEY0MUY1RjQ2RUExNEYzQkZGODQ3MUYxODBDOTEzMjcxMkJDODVGRjY4OUEw
QkYwNDc4OTBBMzkzNUMzQ0RGMjA2MTVBQ0EwRUEzQjAxRjI0QjVERThFNzIyRjA4
OEZCN0ZCNkE3N0ZFRjFDRDMxQzY3MTE2N0Y0QzM5NEEzNjUyRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAB2c4QH/MIsn2+hwadQA9
fiYdwbD8fikzVk7b2UqWEpkhmv+Bcm8kFkMCm7EPyjLbMf80k576tztBS8EWL+aM
JOCJLL2SqrKyAyRSYrR9sSEk5KfrkindDm69UwtzwO+H0rkg855ZPKPBL5FVRXuG
PPX5XENXP3NwA9lh6i2ah+3PV++YbA7FcYjZgaASm40Ibh59A21GrvKre6T/Eypa
SKrTmQq7sHYjm3sLioFRuNPFmGzzeTaZ9ALsyOFEdw9B9fRuoU87/4Rx8YDJEycS
vIX/aJoL8EeJCjk1w83yBhWsoOo7AfJLXejnIvCI+3+2p3/vHNMcZxFn9MOUo2Ut
AgMBAAGjggIKMIICBjAdBgNVHQ4EFgQUk/ERL7ih9Gd650EE1Rnu3jZhL/0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBigYIKwYB
BQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzQzMDM2M2E2MTMwMzQzMDNhNjY2NjMwMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAag
QP8BMA0GCSqGSIb3DQEBCwUAA4IBAQANce6XVBpVVptHdBYrIhHdtwqNg8kXRS4B
8AzNxROwN52995MtwA97jCWQ/6kKEVaSK8GkYsIPUdy3KFpeY0Jq/FqSAwUbezm5
ZvUyuB8iq3xvmETRAAG1zy6th3rH1EmgavjTe95vnMVmWTvOKLwCQP5FkDqvlUz1
WVtY1hrL2/70/9ulYgpVQNO/MmJ2S7PI2I7srZRzzTI6j8nGgTH0+tJ4+3z3E6aN
5WBCRoLQt69EpnFfImlT06Pla9AlD/0IU9POQrPQLGrGQorclQWFuRIklY0lbIM9
HTiVCkqLBSqqGmLrA3GGnuF2EON2fdSLF/8Ndnn86iU1i/Sag1Sk
-----END CERTIFICATE-----