Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a366234303a3a2f34382d3438203d3e20313439333735.roa
File:                     323030313a6466303a366234303a3a2f34382d3438203d3e20313439333735.roa (raw, json)
Hash identifier:          xBXKDErQBr7XivoNKhJ9rJ+50xrB3aGOHCGKCi5HV0U=
Subject key identifier:   25:01:BD:92:DC:9F:EC:DB:6B:66:94:02:BC:10:93:36:FB:13:58:EB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A07951387CE95A711B5B8536A061FC5F1EEA6CE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a366234303a3a2f34382d3438203d3e20313439333735.roa
Signing time:             Fri 18 Feb 2022 03:01:28 +0000
ROA not before:           Fri 18 Feb 2022 02:56:28 +0000
ROA not after:            Sat 18 Feb 2023 03:01:28 +0000
asID:                     149375
IP address blocks:        2001:df0:6b40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:07:95:13:87:ce:95:a7:11:b5:b8:53:6a:06:1f:c5:f1:ee:a6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 18 02:56:28 2022 GMT
            Not After : Feb 18 03:01:28 2023 GMT
        Subject: CN=3082010A02820101009E69E8439524F1C704228E553F11DFF8515BBA7EA18AF83EAFB69D1D3FDAD35C46F57CFA58D97E42276F20C0EB44E602C06B2087F8804B497B89A4084A3AE7169274A3DB3FAFA579241B12A5C68B470E74146A594A2A06F404A1CE3C839EF1E29E81BF34423A7503AEB040A0F23A2C80F9E8F9C2B588072B7A3AD94E929DF553C78DAFEB35EC5A6DF97C2C6E6773BB8264F171DB9BB34C7C601672828D3A0F55A2C5B238A95923A3545793F91F9E95DED706B25EF2948FD4E56E9D9292EE60B6515BA7A15DA39BCA647309D688C8BA6F5622DF6F6A117E7B1DA8108AC06B3046C311C0DF74B33B0C83C4965B0CEAAE3C9AF183A3EE2BCF00EF9CE73FEBCBAF250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:e8:43:95:24:f1:c7:04:22:8e:55:3f:11:
                    df:f8:51:5b:ba:7e:a1:8a:f8:3e:af:b6:9d:1d:3f:
                    da:d3:5c:46:f5:7c:fa:58:d9:7e:42:27:6f:20:c0:
                    eb:44:e6:02:c0:6b:20:87:f8:80:4b:49:7b:89:a4:
                    08:4a:3a:e7:16:92:74:a3:db:3f:af:a5:79:24:1b:
                    12:a5:c6:8b:47:0e:74:14:6a:59:4a:2a:06:f4:04:
                    a1:ce:3c:83:9e:f1:e2:9e:81:bf:34:42:3a:75:03:
                    ae:b0:40:a0:f2:3a:2c:80:f9:e8:f9:c2:b5:88:07:
                    2b:7a:3a:d9:4e:92:9d:f5:53:c7:8d:af:eb:35:ec:
                    5a:6d:f9:7c:2c:6e:67:73:bb:82:64:f1:71:db:9b:
                    b3:4c:7c:60:16:72:82:8d:3a:0f:55:a2:c5:b2:38:
                    a9:59:23:a3:54:57:93:f9:1f:9e:95:de:d7:06:b2:
                    5e:f2:94:8f:d4:e5:6e:9d:92:92:ee:60:b6:51:5b:
                    a7:a1:5d:a3:9b:ca:64:73:09:d6:88:c8:ba:6f:56:
                    22:df:6f:6a:11:7e:7b:1d:a8:10:8a:c0:6b:30:46:
                    c3:11:c0:df:74:b3:3b:0c:83:c4:96:5b:0c:ea:ae:
                    3c:9a:f1:83:a3:ee:2b:cf:00:ef:9c:e7:3f:eb:cb:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:BD:92:DC:9F:EC:DB:6B:66:94:02:BC:10:93:36:FB:13:58:EB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a366234303a3a2f34382d3438203d3e20313439333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:6b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:de:97:bd:f0:57:c9:fa:85:d1:f8:0c:d3:d9:f3:dc:ca:
         00:0c:d4:3f:4d:96:10:28:39:11:45:37:78:21:88:a2:02:6a:
         d9:1a:4d:54:07:16:3e:0a:f0:b6:38:c0:fc:bc:6c:34:5e:16:
         ba:db:aa:21:d2:01:b0:5b:58:a5:96:c0:dc:89:4f:a9:ae:6a:
         3c:c4:9e:de:33:36:97:f5:e3:df:2f:81:e8:4b:05:6c:c7:91:
         66:44:d9:3f:5d:4b:4b:4d:a7:66:34:f0:2d:96:ff:93:8d:2a:
         d0:e9:75:8e:a4:20:a7:a7:e7:9a:55:05:77:5c:1e:83:c5:52:
         98:fb:80:59:15:44:b6:d4:03:9c:61:c2:7c:1a:ef:e1:11:4b:
         70:e6:a0:c8:8d:00:d2:81:9f:6d:64:fc:c1:a8:ff:01:16:75:
         21:a6:52:c4:d7:48:85:bb:7a:1f:cf:77:ee:d1:7e:34:b9:6b:
         16:b3:c1:2e:86:ec:08:86:3e:1f:de:9a:63:3a:29:9a:64:61:
         e1:aa:ac:5d:5c:27:6c:a3:47:19:d8:ad:1e:98:cd:f3:2a:20:
         5e:85:41:23:53:fe:fe:46:b9:be:19:2d:38:7b:eb:1f:9b:5f:
         70:4b:da:dd:78:4d:bc:57:a1:97:09:16:0a:f8:1e:97:40:d4:
         59:ce:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----