Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613463303a3a2f33322d3438203d3e20313431313230.roa
File:                     323430363a613463303a3a2f33322d3438203d3e20313431313230.roa (raw, json)
Hash identifier:          t+Ep5f0ehfhZ9MoKUifUzmVxkLrMFnwqwzdIJ6LES5s=
Subject key identifier:   0C:25:AE:ED:57:F9:B4:30:FA:8E:A5:E5:CF:CD:4F:98:95:E8:64:1C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       27A39543C12F376B7E924556477AA7F2793406B5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613463303a3a2f33322d3438203d3e20313431313230.roa
Signing time:             Sat 23 Oct 2021 05:00:00 +0000
ROA not before:           Sat 23 Oct 2021 04:55:00 +0000
ROA not after:            Sun 23 Oct 2022 05:00:00 +0000
asID:                     141120
IP address blocks:        2406:a4c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a3:95:43:c1:2f:37:6b:7e:92:45:56:47:7a:a7:f2:79:34:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 04:55:00 2021 GMT
            Not After : Oct 23 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:c6:d0:7c:3f:0d:e6:b3:01:1a:a6:41:43:
                    7e:96:52:15:75:b5:0f:15:52:51:90:c8:94:e6:76:
                    70:e4:ab:a6:53:99:cc:00:9d:98:c3:40:f0:43:9d:
                    11:f9:7a:24:c4:d8:d1:87:a1:6e:82:0d:ad:e5:23:
                    ef:75:6e:e2:00:64:81:21:b5:f9:9a:ac:57:0b:2e:
                    de:93:6f:5d:4f:7a:df:e5:50:12:e5:cf:7b:b4:ee:
                    05:8a:ee:dc:7f:70:c8:92:dc:13:8a:a3:61:17:53:
                    3b:b9:fc:36:e6:f5:07:89:00:45:a1:4f:58:41:96:
                    d7:b5:04:49:aa:cd:53:f3:94:83:d2:e1:f0:8b:2c:
                    67:75:8f:46:97:e5:84:38:ea:0d:47:53:d6:00:ac:
                    ae:a4:0b:e4:43:81:81:ba:cf:4e:4e:68:5d:6c:63:
                    d8:1e:02:bb:47:ce:ca:7f:b6:d3:8f:1b:ba:5a:f9:
                    a0:6d:d9:e2:e4:9a:c2:c4:40:a6:e6:50:85:ce:13:
                    94:d8:5f:fb:d0:3b:1b:49:72:6d:b9:51:b6:c2:24:
                    87:36:57:6c:18:ad:d3:4a:43:ed:53:aa:a1:42:e7:
                    90:e8:54:a5:73:9e:22:36:56:d6:c8:48:3c:08:a5:
                    48:e1:5f:72:9e:fb:79:a2:7d:97:3e:1e:d6:01:41:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:AE:ED:57:F9:B4:30:FA:8E:A5:E5:CF:CD:4F:98:95:E8:64:1C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a613463303a3a2f33322d3438203d3e20313431313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:56:56:3f:fc:91:b2:78:fb:96:f5:11:7b:a7:6b:15:ea:ea:
         83:5e:32:ab:98:35:21:a8:74:d7:da:89:a9:02:d5:4e:f6:34:
         a9:01:b7:86:2d:bf:42:63:8c:45:9b:50:92:a5:b4:f0:1e:86:
         9a:20:5d:c8:23:f5:31:d1:73:63:ec:04:e7:59:ca:4b:9e:ed:
         dd:ba:f8:27:35:47:d8:b9:56:ae:b9:4a:71:66:77:63:4c:69:
         9c:9b:ab:8f:9a:70:75:4c:d4:37:66:92:aa:b4:20:90:59:e2:
         f0:8b:8e:35:a6:73:bc:de:65:fc:d4:cf:32:34:bb:a8:f6:5b:
         2d:ec:f9:96:f2:20:12:e9:4a:c1:be:2a:36:1f:ac:70:11:24:
         c7:5f:e7:46:f9:a3:f2:21:d0:b9:94:5d:71:86:00:87:4d:03:
         40:67:ef:a1:69:30:59:9c:9b:28:bc:72:e7:db:79:95:a3:c2:
         62:ac:42:0b:6b:52:ce:29:05:df:7b:d9:ea:05:3f:f3:df:a5:
         e3:c2:7e:39:32:40:f7:dd:6b:e3:11:eb:da:aa:3c:b7:52:bd:
         02:a5:61:4e:33:f4:78:e7:84:f8:cb:dd:b7:ca:4b:95:54:3d:
         1a:7b:ca:a6:85:15:14:f9:75:4b:ec:2b:83:1f:63:b7:fe:70:
         ff:52:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----