Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a333134303a3a2f34382d3438203d3e20313432333438.roa
File:                     323030313a6466303a333134303a3a2f34382d3438203d3e20313432333438.roa (raw, json)
Hash identifier:          6C59r7OhIKZI9k1keRlVTEmGJhdt+Bs4UyRNJ4Nk9PA=
Subject key identifier:   5E:7E:1D:23:C2:E1:DD:D9:45:EF:E0:DA:23:EE:63:51:1D:B9:8F:5B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0BD6063C9287056A5A83B0E5529139E457EDCBCA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a333134303a3a2f34382d3438203d3e20313432333438.roa
Signing time:             Tue 21 Dec 2021 09:54:45 +0000
ROA not before:           Tue 21 Dec 2021 09:49:45 +0000
ROA not after:            Wed 21 Dec 2022 09:54:45 +0000
asID:                     142348
IP address blocks:        2001:df0:3140::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d6:06:3c:92:87:05:6a:5a:83:b0:e5:52:91:39:e4:57:ed:cb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 21 09:49:45 2021 GMT
            Not After : Dec 21 09:54:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:3d:5f:33:3a:c6:38:16:eb:cb:08:71:e7:
                    4f:9c:77:41:88:63:5f:b2:63:29:df:b7:79:a3:53:
                    53:9f:57:5a:03:7f:ff:2e:a8:16:1a:c7:db:85:f0:
                    84:e0:fa:b3:cc:5e:43:06:6e:ca:9f:81:8f:80:d2:
                    83:a0:bb:80:c4:50:77:63:d1:2f:b9:2a:fc:40:20:
                    a7:77:ec:34:2d:64:c8:0b:e4:6e:c8:c1:8b:a5:1c:
                    c8:26:09:e7:31:1e:5c:7c:5a:78:df:67:d4:95:16:
                    ac:2a:f7:22:c2:d4:eb:97:39:c9:54:5b:43:53:49:
                    d9:4d:ca:bb:f2:32:b2:4e:db:01:de:c6:4e:e0:bf:
                    5f:99:e9:2e:7a:d9:36:18:b1:26:21:fa:de:76:40:
                    2e:c4:48:1a:1f:9b:2b:cc:24:42:11:68:a2:8d:46:
                    64:c6:92:18:ce:66:84:88:46:b7:d9:99:96:df:56:
                    23:bb:34:5b:ce:7d:0c:59:32:bb:5c:ff:f9:d4:1c:
                    86:fc:4b:7b:68:a8:f9:d2:c3:b7:b0:ec:a5:30:8e:
                    ab:c6:c4:2f:ba:2f:78:cc:76:f4:aa:34:2a:f1:ee:
                    74:ab:c6:89:00:3d:da:6a:15:60:ee:d6:13:1d:be:
                    a1:3c:e1:d6:df:06:2c:db:bc:24:6e:8e:d3:03:4a:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:1D:23:C2:E1:DD:D9:45:EF:E0:DA:23:EE:63:51:1D:B9:8F:5B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a333134303a3a2f34382d3438203d3e20313432333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:3140::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:7f:a1:d5:61:28:b0:fb:15:48:3b:e9:35:56:e8:55:fd:
         12:b5:a6:25:44:d1:f4:b8:e4:5e:25:16:44:8f:54:18:14:84:
         6b:9e:33:2c:a8:6e:a6:53:6e:14:6b:78:d4:2c:d2:c8:af:67:
         14:72:a0:92:10:67:20:d9:b5:90:96:2a:7b:73:88:f6:16:b7:
         f3:d5:8b:1e:1a:2e:36:f7:d3:27:ad:c3:00:90:4e:7b:c8:34:
         ca:63:60:af:65:1e:30:c0:ce:47:74:21:ff:e1:3c:66:86:5e:
         71:be:94:2f:70:92:7a:51:b0:6e:57:80:7a:e7:66:0f:07:b4:
         44:26:e5:03:7b:cd:55:c0:f4:33:52:9e:63:df:ae:ef:62:5b:
         d7:e6:1f:85:9c:e7:e0:e8:d5:93:0a:30:15:5d:e3:03:a9:93:
         97:84:5b:9f:4a:f4:42:9f:8d:9c:18:ac:1c:22:af:cf:53:7d:
         fc:4e:83:94:4a:60:9a:7b:e8:29:11:f2:2e:bb:ac:ea:59:e5:
         1a:bf:ad:51:42:cc:6b:73:ae:7f:fd:32:98:ee:4a:9c:db:ea:
         4d:39:4d:5e:58:c7:67:64:98:10:35:b6:6a:2c:d5:71:e0:d9:
         5f:54:08:ba:da:ef:bf:6f:d0:3e:cc:a6:06:d6:50:10:f8:f6:
         c5:f2:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----