Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a353130303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466313a353130303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          6UZlcMmMnil0Zacjpq6BkAJJ5c3XJElYv4B81sOIeJc=
Subject key identifier:   2B:14:1E:82:6F:FB:E3:AB:98:7F:A0:A8:A7:88:9C:7E:8D:01:7E:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4F82D52897CBC1BE5E0674894A349263CDB9E9C1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a353130303a3a2f34382d3438203d3e2030.roa
Signing time:             Fri 26 Nov 2021 07:18:33 +0000
ROA not before:           Fri 26 Nov 2021 07:13:33 +0000
ROA not after:            Sat 26 Nov 2022 07:18:33 +0000
asID:                     0
IP address blocks:        2001:df1:5100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:d5:28:97:cb:c1:be:5e:06:74:89:4a:34:92:63:cd:b9:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 26 07:13:33 2021 GMT
            Not After : Nov 26 07:18:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:2c:ff:ee:21:1a:94:7d:3e:a1:bc:82:b3:
                    e4:77:01:10:2e:73:0d:85:bb:15:25:21:7b:93:35:
                    09:71:40:f6:ea:15:73:b5:cf:8d:23:42:ef:b3:32:
                    d5:ec:44:ee:68:07:1d:76:0b:68:8f:2b:4b:27:15:
                    5c:c9:04:4c:ec:ff:23:e2:bd:66:f7:79:09:d7:ff:
                    74:cd:d3:a5:8a:8c:04:3c:38:e6:90:5e:cb:5c:1a:
                    a3:d2:a5:82:a9:ac:35:4b:c6:24:5c:01:2c:da:71:
                    c1:97:7c:fc:70:13:c1:32:0d:7d:19:cf:dc:9e:10:
                    48:18:0d:25:03:a9:07:7f:cc:36:24:7f:ca:90:5e:
                    bf:70:aa:99:21:ba:8c:6f:69:af:84:a3:b3:23:18:
                    5e:b5:e8:ec:19:9e:c6:6e:18:dd:02:b0:5b:2f:68:
                    25:7f:9a:63:c3:3d:a5:5e:be:80:1c:7f:1d:f1:2f:
                    63:75:6e:3b:4d:b7:99:40:a1:f6:d6:36:96:f2:ac:
                    47:0e:1a:72:cd:5a:04:ff:ce:f7:89:3d:71:29:bf:
                    1e:2c:4c:ac:c8:06:ec:bc:b8:8b:78:eb:4c:6b:10:
                    8e:10:ca:2e:42:73:02:c5:18:3f:95:f1:49:47:4d:
                    47:69:8c:2c:74:56:f6:7e:b9:76:18:9d:04:37:c1:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:14:1E:82:6F:FB:E3:AB:98:7F:A0:A8:A7:88:9C:7E:8D:01:7E:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a353130303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:5100::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:9f:84:07:db:f0:ef:cc:ac:1a:36:ac:6f:12:9a:42:0b:
         47:7b:98:8e:da:6f:c4:0c:fd:88:ae:5e:37:91:fb:a6:28:6a:
         ff:55:47:3d:e0:6f:fd:a9:0c:0a:d1:91:ac:cd:54:74:f0:0c:
         5f:0a:a7:61:6d:1e:8b:03:61:85:a6:6a:7c:bd:09:f8:37:65:
         de:83:63:37:86:72:ad:3b:96:49:1d:cb:0d:38:c7:00:2e:a2:
         64:14:a8:6b:92:38:ad:98:a8:9d:4e:86:8b:3f:f7:75:b7:13:
         81:73:3d:50:31:80:06:b3:d1:09:8a:56:4d:6f:6e:ec:d8:f3:
         3c:d8:8c:10:29:a6:e8:a0:4f:04:0e:64:28:b9:c0:7c:98:b9:
         6f:db:98:e8:a8:5c:4f:f6:82:af:13:49:c0:b2:a7:16:e3:95:
         67:a1:1e:38:8f:be:f4:b6:eb:de:c5:1a:58:91:24:8f:7d:fa:
         03:ca:63:60:a0:a7:5e:cd:e2:a2:44:74:10:d3:62:33:eb:c4:
         5f:94:d3:77:09:7b:a4:be:3e:8b:05:a4:2f:df:6b:3e:52:74:
         ee:8e:ab:90:21:c4:12:06:be:b1:b5:b8:ad:76:41:b7:66:9f:
         c8:07:9f:e8:3c:6b:f9:a7:56:61:52:a3:95:bc:67:49:ff:20:
         e4:47:2c:e2
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUT4LVKJfLwb5eBnSJSjSSY8256cEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEyNjA3MTMzM1oX
DTIyMTEyNjA3MTgzM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDMkJBMkNGRkVFMjExQTk0N0QzRUExQkM4MkIzRTQ3NzAxMTAyRTczMEQ4
NUJCMTUyNTIxN0I5MzM1MDk3MTQwRjZFQTE1NzNCNUNGOEQyMzQyRUZCMzMyRDVF
QzQ0RUU2ODA3MUQ3NjBCNjg4RjJCNEIyNzE1NUNDOTA0NENFQ0ZGMjNFMkJENjZG
Nzc5MDlEN0ZGNzRDREQzQTU4QThDMDQzQzM4RTY5MDVFQ0I1QzFBQTNEMkE1ODJB
OUFDMzU0QkM2MjQ1QzAxMkNEQTcxQzE5NzdDRkM3MDEzQzEzMjBEN0QxOUNGREM5
RTEwNDgxODBEMjUwM0E5MDc3RkNDMzYyNDdGQ0E5MDVFQkY3MEFBOTkyMUJBOEM2
RjY5QUY4NEEzQjMyMzE4NUVCNUU4RUMxOTlFQzY2RTE4REQwMkIwNUIyRjY4MjU3
RjlBNjNDMzNEQTU1RUJFODAxQzdGMURGMTJGNjM3NTZFM0I0REI3OTk0MEExRjZE
NjM2OTZGMkFDNDcwRTFBNzJDRDVBMDRGRkNFRjc4OTNENzEyOUJGMUUyQzRDQUND
ODA2RUNCQ0I4OEI3OEVCNEM2QjEwOEUxMENBMkU0MjczMDJDNTE4M0Y5NUYxNDk0
NzRENDc2OThDMkM3NDU2RjY3RUI5NzYxODlEMDQzN0MxRDJFMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuiz/7iEalH0+obyCs+R3
ARAucw2FuxUlIXuTNQlxQPbqFXO1z40jQu+zMtXsRO5oBx12C2iPK0snFVzJBEzs
/yPivWb3eQnX/3TN06WKjAQ8OOaQXstcGqPSpYKprDVLxiRcASzaccGXfPxwE8Ey
DX0Zz9yeEEgYDSUDqQd/zDYkf8qQXr9wqpkhuoxvaa+Eo7MjGF616OwZnsZuGN0C
sFsvaCV/mmPDPaVevoAcfx3xL2N1bjtNt5lAofbWNpbyrEcOGnLNWgT/zveJPXEp
vx4sTKzIBuy8uIt460xrEI4Qyi5CcwLFGD+V8UlHTUdpjCx0VvZ+uXYYnQQ3wdLh
AgMBAAGjggIAMIIB/DAdBgNVHQ4EFgQUKxQegm/746uYf6Cop4icfo0BflMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzAzMDMxM2E2NDY2MzEzYTM1MzEzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3xUQAwDQYJKoZI
hvcNAQELBQADggEBAHTun4QH2/DvzKwaNqxvEppCC0d7mI7ab8QM/YiuXjeR+6Yo
av9VRz3gb/2pDArRkazNVHTwDF8Kp2FtHosDYYWmany9Cfg3Zd6DYzeGcq07lkkd
yw04xwAuomQUqGuSOK2YqJ1Ohos/93W3E4FzPVAxgAaz0QmKVk1vbuzY8zzYjBAp
puigTwQOZCi5wHyYuW/bmOioXE/2gq8TScCypxbjlWehHjiPvvS2697FGliRJI99
+gPKY2Cgp17N4qJEdBDTYjPrxF+U03cJe6S+PosFpC/faz5SdO6Oq5AhxBIGvrG1
uK12Qbdmn8gHn+g8a/mnVmFSo5W8Z0n/IORHLOI=
-----END CERTIFICATE-----