Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a653138303a3a2f34382d3438203d3e20313338383830.roa
File:                     323030313a6466303a653138303a3a2f34382d3438203d3e20313338383830.roa (raw, json)
Hash identifier:          11t6uDISUG65npqFJ6ppLPP6pGJwdBHrfzLCJKXEiWQ=
Subject key identifier:   8C:E7:4B:0E:2A:7A:24:92:4B:B1:DC:54:C8:39:C6:93:CC:D3:DB:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       413A5BE608A3880BB3AFFC8995AC440BF0C26840
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a653138303a3a2f34382d3438203d3e20313338383830.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     138880
IP address blocks:        2001:df0:e180::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3a:5b:e6:08:a3:88:0b:b3:af:fc:89:95:ac:44:0b:f0:c2:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:7c:38:10:4b:00:9e:01:cb:44:8d:bf:dc:
                    93:ec:dc:dd:c1:4d:e8:36:5d:82:bc:e1:c0:cf:d1:
                    9a:0d:bd:e9:86:ff:a2:32:54:35:6f:16:21:94:96:
                    cd:9f:a7:92:ec:ac:77:38:9b:17:81:8f:3a:72:72:
                    43:94:48:fc:2b:60:f4:c9:64:46:58:ef:01:ef:fc:
                    a8:35:3c:75:39:1c:78:31:5f:02:a8:5f:dc:c2:ca:
                    4e:8a:9e:10:fa:70:a8:41:90:d5:65:b1:00:72:64:
                    13:77:ae:f1:58:52:45:90:75:ab:9e:94:de:36:04:
                    28:ba:5e:8f:46:0c:5b:38:f3:f4:58:6c:97:b5:1e:
                    74:f4:18:72:e3:44:7f:9f:f1:b7:29:e5:a5:87:52:
                    30:8d:07:ea:cd:bf:cc:26:4a:ec:1f:11:a8:7c:ca:
                    57:c8:d8:82:b0:fd:25:65:06:90:d9:f6:cb:77:9d:
                    68:5c:90:b5:12:54:13:5c:82:fb:92:86:49:1f:aa:
                    0e:3b:f9:74:e2:5e:aa:ae:34:7f:f8:af:de:52:d7:
                    00:1f:2c:02:0b:d9:63:06:77:87:d9:27:42:15:11:
                    6b:2c:0c:29:9e:ea:22:12:79:7d:2a:33:e4:f2:6e:
                    7f:5d:53:68:2b:0f:c6:e2:19:ee:19:26:6b:17:5f:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:4B:0E:2A:7A:24:92:4B:B1:DC:54:C8:39:C6:93:CC:D3:DB:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a653138303a3a2f34382d3438203d3e20313338383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:e180::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:b2:7e:36:c2:ff:3b:95:b7:75:7b:74:15:d7:9a:55:4c:
         55:c9:48:16:7a:88:07:44:46:fa:97:91:e8:b6:50:00:c9:e7:
         34:d3:0f:99:66:90:27:a4:50:89:09:ac:83:2b:4e:fb:68:fb:
         a4:4c:3e:9e:94:9d:60:3a:87:a5:06:55:93:0b:a0:51:50:29:
         3d:d4:f1:e8:03:1d:83:56:1b:0d:46:3f:6a:df:63:c9:db:cd:
         af:86:89:1d:9b:55:dd:27:ef:82:e1:32:5f:38:4c:4a:70:e9:
         ef:81:fb:b7:21:d2:10:90:05:e4:06:da:db:57:9f:1f:ca:df:
         a5:56:f1:c5:79:2e:7f:e9:71:69:bc:02:85:12:ce:55:93:31:
         9c:c2:e3:af:b3:1a:60:5c:52:e2:73:8a:85:18:d9:c7:63:8e:
         ad:14:e5:23:bd:72:80:7c:45:b1:b1:c8:53:43:24:69:a6:f1:
         18:d8:63:10:a0:9e:e0:8b:93:97:5b:61:b9:ae:b1:db:12:8f:
         fa:d0:02:0c:85:01:56:fb:89:78:34:73:e6:88:50:46:92:8b:
         e6:05:98:60:24:ca:5b:b5:31:79:52:aa:8c:8b:d3:52:a8:2b:
         c7:6f:3e:b0:34:50:94:1e:3b:ce:12:45:26:75:d8:3c:33:08:
         80:10:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----