Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a323730303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466303a323730303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          DYpeiJD6kDuNfDalSH9sArkPk4QcaG0KNyTG+Nuuc7Q=
Subject key identifier:   F0:60:41:AC:45:2B:0C:29:F2:F6:3B:A7:EE:3A:1B:9C:78:AF:4F:43
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2DC3C04DA148E8EF33023B26CA8F3812EDC81FDD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a323730303a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:11:09 +0000
ROA not before:           Mon 31 Jan 2022 04:06:09 +0000
ROA not after:            Tue 31 Jan 2023 04:11:09 +0000
asID:                     0
IP address blocks:        2001:df0:2700::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c3:c0:4d:a1:48:e8:ef:33:02:3b:26:ca:8f:38:12:ed:c8:1f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:06:09 2022 GMT
            Not After : Jan 31 04:11:09 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:25:55:27:31:49:ff:12:65:59:73:8c:d1:
                    f0:d4:fa:1a:60:a7:35:58:f9:95:71:d2:9d:44:c7:
                    a6:45:8a:7e:8f:5e:4a:d9:39:b4:d8:14:cc:1c:7d:
                    96:36:eb:03:b8:23:b2:73:43:d3:5b:dc:20:5c:02:
                    04:bf:94:02:17:e7:c4:5b:76:6e:b1:d9:05:b4:b8:
                    2e:e7:fd:20:0c:47:6a:52:2b:d5:d6:02:83:36:12:
                    17:52:6a:36:e1:b3:ef:c1:02:6e:57:05:f4:9f:2e:
                    5a:cd:ca:e1:a6:6b:7a:24:a5:97:f9:fa:ce:1c:dd:
                    ad:1a:eb:d8:93:b1:01:da:f0:be:89:67:bc:24:b4:
                    6b:a0:d7:f0:d4:e9:c6:53:57:18:be:c5:31:6e:61:
                    31:01:ae:02:81:64:a6:62:3a:36:97:47:69:e4:01:
                    51:ba:8b:78:8f:d0:56:a4:8b:a7:f7:47:fc:4b:90:
                    59:e7:25:a4:3d:90:21:31:ab:c5:af:2b:bb:f4:bd:
                    c2:ae:5e:f5:3d:77:23:8d:3e:a7:f8:f8:e6:a0:77:
                    e3:12:c2:89:c2:57:95:84:f9:a9:cc:45:57:19:7b:
                    a9:8d:98:99:6e:e9:fe:c9:f1:12:22:2f:ab:97:5c:
                    3f:62:2f:47:45:2f:7c:a5:51:a4:60:7c:c9:7c:ec:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:41:AC:45:2B:0C:29:F2:F6:3B:A7:EE:3A:1B:9C:78:AF:4F:43
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a323730303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2700::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:49:9a:b9:2b:d6:c2:74:a0:f9:45:84:9b:42:8e:0d:9f:72:
         34:7d:e7:0b:78:9a:37:21:0f:07:36:6f:4a:28:9f:af:be:5d:
         91:4e:25:42:83:3d:76:59:6a:fe:3a:50:e8:9f:f5:2b:2d:ff:
         ed:90:50:4e:c4:9c:1e:a6:c6:43:7a:8d:42:ad:15:f4:22:d8:
         ef:63:8b:99:61:2d:2d:4c:67:6a:d4:5e:b8:e1:62:40:7a:31:
         24:aa:fc:c5:42:ff:4a:26:e8:62:d0:db:24:77:85:02:ae:30:
         1c:8d:39:3c:f4:7e:ac:a1:cf:39:d5:db:44:99:ad:c2:b7:7a:
         7b:4b:75:b1:4d:21:c8:59:81:58:0a:d2:5e:bc:75:ba:b0:d2:
         d3:cc:5e:34:50:26:45:40:3c:c3:63:b0:f9:55:c6:f3:d1:64:
         27:48:7e:32:96:ea:f4:6f:fa:87:3f:32:a4:e6:03:1a:a0:19:
         36:3c:2b:17:30:7b:82:b8:ee:83:89:f6:01:d0:db:cc:0d:2e:
         06:80:1f:e9:8c:ee:60:00:65:f8:2a:98:b5:c3:d9:51:e0:6f:
         67:d0:80:e2:bc:32:ee:31:87:51:23:c0:c7:7a:78:d6:da:ef:
         5f:8d:15:03:61:6f:6f:55:6a:40:1e:3b:25:ff:ed:d7:ed:9f:
         17:50:31:cb
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIULcPATaFI6O8zAjsmyo84Eu3IH90wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDEzMTA0MDYwOVoX
DTIzMDEzMTA0MTEwOVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMkY0MjU1NTI3MzE0OUZGMTI2NTU5NzM4Q0QxRjBENEZBMUE2MEE3MzU1
OEY5OTU3MUQyOUQ0NEM3QTY0NThBN0U4RjVFNEFEOTM5QjREODE0Q0MxQzdEOTYz
NkVCMDNCODIzQjI3MzQzRDM1QkRDMjA1QzAyMDRCRjk0MDIxN0U3QzQ1Qjc2NkVC
MUQ5MDVCNEI4MkVFN0ZEMjAwQzQ3NkE1MjJCRDVENjAyODMzNjEyMTc1MjZBMzZF
MUIzRUZDMTAyNkU1NzA1RjQ5RjJFNUFDRENBRTFBNjZCN0EyNEE1OTdGOUZBQ0Ux
Q0REQUQxQUVCRDg5M0IxMDFEQUYwQkU4OTY3QkMyNEI0NkJBMEQ3RjBENEU5QzY1
MzU3MThCRUM1MzE2RTYxMzEwMUFFMDI4MTY0QTY2MjNBMzY5NzQ3NjlFNDAxNTFC
QThCNzg4RkQwNTZBNDhCQTdGNzQ3RkM0QjkwNTlFNzI1QTQzRDkwMjEzMUFCQzVB
RjJCQkJGNEJEQzJBRTVFRjUzRDc3MjM4RDNFQTdGOEY4RTZBMDc3RTMxMkMyODlD
MjU3OTU4NEY5QTlDQzQ1NTcxOTdCQTk4RDk4OTk2RUU5RkVDOUYxMTIyMjJGQUI5
NzVDM0Y2MjJGNDc0NTJGN0NBNTUxQTQ2MDdDQzk3Q0VDMDhBNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9CVVJzFJ/xJlWXOM0fDU
+hpgpzVY+ZVx0p1Ex6ZFin6PXkrZObTYFMwcfZY26wO4I7JzQ9Nb3CBcAgS/lAIX
58Rbdm6x2QW0uC7n/SAMR2pSK9XWAoM2EhdSajbhs+/BAm5XBfSfLlrNyuGma3ok
pZf5+s4c3a0a69iTsQHa8L6JZ7wktGug1/DU6cZTVxi+xTFuYTEBrgKBZKZiOjaX
R2nkAVG6i3iP0Faki6f3R/xLkFnnJaQ9kCExq8WvK7v0vcKuXvU9dyONPqf4+Oag
d+MSwonCV5WE+anMRVcZe6mNmJlu6f7J8RIiL6uXXD9iL0dFL3ylUaRgfMl87Ail
AgMBAAGjggIAMIIB/DAdBgNVHQ4EFgQU8GBBrEUrDCny9jun7jobnHivT0MwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzczMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wJwAwDQYJKoZI
hvcNAQELBQADggEBAIdJmrkr1sJ0oPlFhJtCjg2fcjR95wt4mjchDwc2b0oon6++
XZFOJUKDPXZZav46UOif9Sst/+2QUE7EnB6mxkN6jUKtFfQi2O9ji5lhLS1MZ2rU
XrjhYkB6MSSq/MVC/0om6GLQ2yR3hQKuMByNOTz0fqyhzznV20SZrcK3entLdbFN
IchZgVgK0l68dbqw0tPMXjRQJkVAPMNjsPlVxvPRZCdIfjKW6vRv+oc/MqTmAxqg
GTY8Kxcwe4K47oOJ9gHQ28wNLgaAH+mM7mAAZfgqmLXD2VHgb2fQgOK8Mu4xh1Ej
wMd6eNba71+NFQNhb29VakAeOyX/7dftnxdQMcs=
-----END CERTIFICATE-----