Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a656338303a3a2f34382d3438203d3e20313338383934.roa
File:                     323030313a6466303a656338303a3a2f34382d3438203d3e20313338383934.roa (raw, json)
Hash identifier:          gaUCLtrVARN2e2B+juBobF6gx1i7/mXYnNxROSApRko=
Subject key identifier:   1C:C3:99:C8:95:3D:5E:3C:DD:72:AA:4D:01:5A:81:84:2B:57:AA:CB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7FEA9100A18F8FD32DEFDF862BA9980D66FF6177
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a656338303a3a2f34382d3438203d3e20313338383934.roa
Signing time:             Mon 06 Sep 2021 07:59:31 +0000
ROA not before:           Mon 06 Sep 2021 07:54:31 +0000
ROA not after:            Tue 06 Sep 2022 07:59:31 +0000
asID:                     138894
IP address blocks:        2001:df0:ec80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:91:00:a1:8f:8f:d3:2d:ef:df:86:2b:a9:98:0d:66:ff:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 07:54:31 2021 GMT
            Not After : Sep  6 07:59:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:5d:70:ed:9c:e0:10:b5:d3:04:ce:75:d3:
                    82:35:33:ff:33:32:8b:28:85:a7:fd:da:9f:69:48:
                    31:1b:22:5d:0a:24:dc:71:2b:32:e7:42:cf:a3:49:
                    ae:d2:b1:dc:43:13:7a:51:b4:0d:cf:42:ee:5e:63:
                    7e:7d:f3:31:7b:59:b6:fe:14:51:f7:88:b1:d4:68:
                    8e:56:bb:b2:5d:88:b2:16:a6:bf:d8:b2:86:00:c0:
                    0a:fc:ef:ef:21:3e:57:85:4a:c9:5b:bc:af:45:67:
                    7e:6d:a3:f9:ab:13:88:35:30:42:70:d0:84:94:7f:
                    62:6d:ff:5a:97:d6:2b:c0:d7:f7:e6:0f:2c:fd:27:
                    9d:34:d6:ae:cb:37:9f:37:41:fe:9b:4c:71:f9:7c:
                    fc:c4:e4:3d:89:e2:c7:7d:de:1d:de:dd:ca:82:3a:
                    0e:a2:5d:12:32:b8:04:90:98:99:46:01:ac:37:1b:
                    dc:65:15:8f:00:55:3f:f7:dd:dc:d6:2b:55:7c:c2:
                    4e:7e:9f:33:7b:15:59:88:07:95:e1:25:a8:f3:0a:
                    0e:2f:92:ee:2d:4f:75:c4:2c:87:bd:7e:60:27:c6:
                    fd:8d:f1:82:ec:66:b8:de:ba:6b:87:66:28:ba:2c:
                    fe:6a:57:bc:e5:e5:5e:d8:93:f0:69:1c:30:99:aa:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C3:99:C8:95:3D:5E:3C:DD:72:AA:4D:01:5A:81:84:2B:57:AA:CB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a656338303a3a2f34382d3438203d3e20313338383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:ec80::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:25:39:2d:05:95:d5:00:57:c1:cd:1b:bb:e4:c0:d1:3a:13:
         6d:72:b9:d0:4a:d6:25:1e:37:1d:17:7e:fd:19:7a:ca:d4:eb:
         a6:fb:d5:7a:cf:f9:9c:0e:61:12:21:a2:ec:21:80:28:6a:9d:
         e0:7b:8a:e1:c2:c8:fc:83:de:ff:20:5d:6a:b3:77:ef:e7:a5:
         61:9c:95:ff:3f:0c:b5:ee:8b:23:ce:2a:2e:d5:73:00:80:79:
         72:a7:0f:ef:f5:d0:b0:d3:fa:49:c0:a3:2a:6b:1b:54:bf:ed:
         13:31:09:f5:3a:71:4b:a1:05:31:5e:a3:23:6e:23:5b:64:ee:
         74:a5:c4:e8:10:5c:9f:8d:29:e7:d8:7b:bd:46:18:7c:a9:1e:
         6c:85:59:70:fb:1c:53:76:ee:53:d7:d9:e9:a6:59:eb:5d:24:
         62:e9:32:eb:a5:40:d0:cb:c9:35:2b:f2:c8:bd:ef:27:3d:32:
         8c:40:d2:f8:2f:06:12:60:76:45:f8:c4:83:34:56:56:7c:c3:
         13:71:16:97:1b:47:03:63:a1:52:d3:58:c8:bd:ba:98:45:3c:
         bf:f1:c3:bf:d3:b1:e9:14:2d:f8:01:37:d5:2f:79:d9:d1:64:
         ee:66:1a:70:3d:4b:72:90:f2:c4:55:c2:8e:a3:71:61:48:b7:
         03:f4:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----