Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a633638303a3a2f34382d3438203d3e20313339343238.roa
File:                     323030313a6466313a633638303a3a2f34382d3438203d3e20313339343238.roa (raw, json)
Hash identifier:          3NClqvKPL9GrWjwoSLJa6ybv0rNbqIirpfsK5CDEU0w=
Subject key identifier:   70:BA:EC:3F:8D:ED:92:D5:0D:77:26:F3:CB:7C:A0:B2:F9:7D:65:32
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       25C657BC7A3EFEBF80C3BAF7FD52E3ABFC46B774
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a633638303a3a2f34382d3438203d3e20313339343238.roa
Signing time:             Wed 14 Apr 2021 07:07:38 +0000
ROA not before:           Wed 14 Apr 2021 07:02:38 +0000
ROA not after:            Thu 14 Apr 2022 07:07:38 +0000
asID:                     139428
IP address blocks:        2001:df1:c680::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:57:bc:7a:3e:fe:bf:80:c3:ba:f7:fd:52:e3:ab:fc:46:b7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 14 07:02:38 2021 GMT
            Not After : Apr 14 07:07:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:6a:d7:ac:02:b9:cf:45:ff:ef:18:45:41:
                    8e:52:2d:df:00:77:f8:1f:6d:75:c9:01:cf:ff:78:
                    22:f7:4e:ae:1b:f1:df:56:a2:36:8a:89:2f:ba:68:
                    64:09:33:1b:49:c3:a4:34:37:e6:e7:37:b3:00:02:
                    ff:e7:12:f9:4a:60:96:5e:ee:0d:ee:ea:e3:27:fa:
                    51:04:54:68:9c:05:27:cb:eb:42:c4:4f:e4:05:14:
                    a3:94:53:b4:54:fe:d4:16:a1:9a:4c:fe:18:1d:b8:
                    92:d1:d2:08:80:a1:9a:fe:ed:fb:bf:e6:f1:0c:39:
                    b8:94:b5:f2:f1:a2:55:b0:de:8e:14:6b:d2:0d:ba:
                    66:22:0a:97:a4:25:b2:ad:48:a1:44:11:2b:65:bd:
                    8b:f5:c3:03:b8:d2:74:d7:bb:a3:19:09:73:60:9b:
                    93:ca:bf:d5:6f:2e:92:06:7f:94:67:0d:e0:07:f0:
                    e0:52:f3:b5:46:94:5a:10:e0:7b:a0:e3:f1:b1:64:
                    9a:9d:01:6a:58:b8:44:fb:44:3d:bc:a7:61:19:d5:
                    5e:1e:32:12:71:a1:fb:a3:0f:27:eb:6a:d7:57:11:
                    cd:9e:98:fc:bb:ac:05:6d:ac:1f:dd:52:8c:10:52:
                    08:4f:93:39:8b:da:33:0c:61:50:5b:ee:25:21:c8:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BA:EC:3F:8D:ED:92:D5:0D:77:26:F3:CB:7C:A0:B2:F9:7D:65:32
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a633638303a3a2f34382d3438203d3e20313339343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:c680::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:42:6f:77:48:0c:8e:9c:5d:2f:03:c7:40:0b:29:1f:e8:32:
         09:76:53:1f:a1:27:7f:82:cf:7c:14:38:df:7a:24:92:65:fd:
         6c:71:7c:dc:62:28:0b:7a:68:5a:66:73:66:09:b0:b7:4e:35:
         04:5d:cc:0e:cc:b0:94:ce:ae:8f:5d:cf:52:52:9b:2a:2f:4d:
         42:39:fb:99:b4:a9:aa:b0:6d:f4:f4:ca:c9:e4:08:7a:74:60:
         f6:a0:09:82:20:42:4d:d3:c6:d8:fa:71:07:45:96:c2:42:20:
         4c:b5:7d:b5:d8:c4:ef:08:ea:34:8c:d6:e2:aa:11:40:51:87:
         f2:a6:0b:25:b1:45:ef:d9:ad:79:3d:9c:c3:be:20:4d:02:47:
         9f:b7:b1:66:76:5e:2e:7d:e9:5c:11:5f:62:c3:7d:9c:c2:65:
         d1:ac:74:90:b3:65:16:11:4e:58:5e:d0:41:3a:4a:63:01:44:
         9a:18:11:5a:30:bf:b3:e7:13:1d:1b:fd:25:6c:cd:45:23:5c:
         5f:c7:e3:8d:c3:05:9e:6d:a3:4a:88:15:b5:ed:e6:d5:b1:d6:
         37:11:ad:87:9b:eb:ff:a9:a7:2a:ae:8c:b3:cc:77:f8:ca:a3:
         fc:94:7f:e9:db:54:01:a9:a7:b2:0c:17:b6:d1:63:ec:d3:1c:
         d1:4d:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----