Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a323130303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466313a323130303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          DvytbzaRJEuqMUVUmqXP/ikLK1S1FTAODNpwGCG/Fzk=
Subject key identifier:   7B:18:F1:37:84:6E:4B:F8:4D:C7:E6:B1:FE:C1:B4:43:7E:81:EB:DF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2D4959C2660EDE7C88940A74407968B1F8F701CB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a323130303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:31:40 +0000
ROA not before:           Wed 02 Feb 2022 06:26:40 +0000
ROA not after:            Thu 02 Feb 2023 06:31:40 +0000
asID:                     0
IP address blocks:        2001:df1:2100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:49:59:c2:66:0e:de:7c:88:94:0a:74:40:79:68:b1:f8:f7:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:26:40 2022 GMT
            Not After : Feb  2 06:31:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:b7:f1:37:fc:67:2c:23:26:97:17:03:32:
                    a7:f6:34:89:c6:41:b2:ad:01:67:2f:37:18:0a:b5:
                    15:7d:43:73:51:62:a2:ea:01:8b:6b:b9:17:34:ad:
                    4c:a1:fa:51:5d:1a:84:3b:6a:75:92:63:ad:e7:14:
                    6e:95:51:f0:37:03:9b:b6:36:4f:7c:73:61:fd:d6:
                    2e:e0:0d:23:4b:60:cb:64:d6:32:0a:7e:95:28:4c:
                    3f:b6:7b:fe:96:0d:5e:d5:b7:bf:91:a1:12:5a:b9:
                    a1:fc:0a:7d:26:17:40:46:d9:e3:52:f9:58:1c:e5:
                    59:f1:2c:16:fc:59:2d:03:da:18:e4:04:15:68:9a:
                    d9:69:0e:19:48:0f:60:12:dd:6d:02:03:bf:69:8f:
                    46:0b:53:f9:e5:a9:29:fe:d0:ba:26:cd:0e:61:16:
                    fd:97:2d:83:ca:da:b3:b1:3c:df:f7:63:cd:70:36:
                    6b:67:b3:bc:b0:7e:bc:b9:75:2a:9b:a3:89:b3:c4:
                    98:6c:03:e9:bf:10:31:65:6c:9b:eb:ba:50:c3:9c:
                    3c:41:3c:75:d1:7a:5c:e2:fd:64:00:3a:18:36:9e:
                    eb:05:19:f8:11:34:6b:1a:f3:66:62:f4:c6:7f:a5:
                    c9:5b:18:73:6a:e4:5e:01:ff:a4:38:fc:81:ed:f5:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:F1:37:84:6E:4B:F8:4D:C7:E6:B1:FE:C1:B4:43:7E:81:EB:DF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a323130303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:2100::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:50:27:e0:69:04:bc:df:9c:53:d4:d5:e0:91:e8:7b:5f:
         ac:61:b7:9b:b1:b8:72:5b:72:62:ac:1f:0d:98:86:6f:1b:12:
         0e:a3:b9:90:f9:cb:ec:b8:32:84:16:41:20:48:ea:cf:da:5a:
         6b:5d:6e:15:a5:24:a4:cf:a3:93:4d:28:64:73:6c:34:a4:9e:
         ec:b3:48:43:e3:7e:f7:6e:c0:62:00:7a:37:ae:c6:bd:5e:80:
         ee:96:e9:33:74:ae:17:2c:6c:69:4f:eb:c2:8a:0b:bc:d4:2b:
         11:c1:51:eb:e4:cd:39:e2:1c:5f:fe:fe:2d:b7:3c:dd:ce:1a:
         44:98:ec:c4:63:28:bd:6c:52:a5:01:2d:fe:2e:55:d1:50:02:
         d6:bd:2d:7a:cd:9f:ca:b7:86:85:a6:0f:78:d4:92:1e:ea:42:
         54:54:7e:56:de:21:35:89:c0:05:a9:e0:4b:4e:f0:27:c8:d8:
         e0:f9:a9:4c:1c:ea:2e:1e:b5:83:8c:8b:b3:39:7a:06:10:f6:
         7d:df:c2:8b:0d:49:57:4a:a4:27:9b:f1:1b:42:f8:c5:8d:37:
         48:75:39:3f:2a:b6:94:2f:52:9c:fd:e5:3a:93:c4:b0:47:f6:
         61:ef:6b:3a:bb:26:5f:c9:a0:89:13:cf:70:71:85:81:8b:9f:
         8c:c5:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----