Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a643738303a3a2f34382d3438203d3e20313339343330.roa
File:                     323030313a6466313a643738303a3a2f34382d3438203d3e20313339343330.roa (raw, json)
Hash identifier:          vnoqeL7N/06WwPuX4Cyotf2/dqJ/CVY8qmAZkPsqnAY=
Subject key identifier:   38:31:57:2F:D0:EE:FF:DC:E2:64:D7:A6:4E:92:1D:61:BB:E4:AA:A1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A7FD5885F850B90CEA6E30A338C08E3E5EA4697
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a643738303a3a2f34382d3438203d3e20313339343330.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 03:55:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     139430
IP address blocks:        2001:df1:d780::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7f:d5:88:5f:85:0b:90:ce:a6:e3:0a:33:8c:08:e3:e5:ea:46:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 15 03:55:00 2021 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:3c:b0:c7:c4:96:b0:a0:bc:cd:33:58:a2:
                    55:78:6e:e0:80:bb:2b:0d:19:33:7e:a6:06:2d:89:
                    ba:72:d5:e9:14:4a:22:ef:55:97:c4:d2:ca:38:99:
                    63:46:72:7e:69:1f:8a:1d:71:2e:f1:40:a6:bc:ea:
                    de:14:52:d8:cd:fa:9d:96:cb:97:da:52:a4:88:41:
                    79:41:3d:94:38:5e:ea:0b:a8:90:db:a5:81:33:68:
                    67:6e:dc:76:df:ed:46:5c:1b:95:f5:f4:ba:56:fb:
                    ad:1d:cc:bf:a1:c0:da:9b:cb:7c:eb:06:09:c0:ed:
                    e0:38:14:d3:a3:71:21:eb:24:04:76:ae:b4:6f:79:
                    44:f5:54:48:60:c9:78:19:33:37:b5:10:e6:6a:6a:
                    34:a2:b8:da:4c:01:a8:2c:0b:f7:55:d1:55:c4:25:
                    31:8f:0b:40:44:2e:f4:07:91:db:50:2e:0c:f3:e5:
                    d1:a7:a3:87:a0:5b:39:c3:2a:cb:f6:09:6e:49:ef:
                    1f:e5:a6:4c:ea:44:18:c6:a5:1c:59:12:e7:6e:6f:
                    9a:a8:5d:fa:79:7c:58:5d:19:77:71:03:24:65:bd:
                    96:d0:97:29:ba:35:7c:5a:1c:8b:d9:0e:ff:66:ec:
                    43:ec:57:aa:e7:61:dd:ad:81:bf:4b:24:f0:5e:aa:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:57:2F:D0:EE:FF:DC:E2:64:D7:A6:4E:92:1D:61:BB:E4:AA:A1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a643738303a3a2f34382d3438203d3e20313339343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:d780::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:bc:5f:4e:6f:99:cf:6a:4d:03:7d:19:91:00:ed:57:99:
         7c:56:73:84:97:d5:95:2b:9f:9d:b4:88:60:a0:70:1d:b2:db:
         bb:39:9e:c0:5c:61:f5:6d:2f:d4:43:9f:fd:19:80:4d:9d:df:
         47:28:1b:e4:16:3b:04:58:66:61:a1:bf:78:73:e8:9d:85:80:
         a6:78:e0:94:d3:de:74:b8:6f:ab:4b:2b:bb:46:df:2b:dc:6f:
         b9:2d:ea:cc:a0:38:44:d1:9e:bc:d7:71:8e:ae:4d:43:b3:a2:
         e0:16:c1:70:f5:6f:92:0c:86:11:2c:24:9e:0b:62:94:a9:b1:
         c9:9c:06:83:ca:b8:e6:fe:61:64:e1:e7:a3:40:59:b3:fe:25:
         1f:a0:b6:62:aa:c2:89:59:52:29:8c:1a:a3:3d:c6:32:96:49:
         6b:0d:85:33:80:82:35:85:c3:69:c9:93:fd:56:9e:b2:9d:01:
         cb:bc:ab:55:e5:b0:8f:40:89:95:70:fa:18:0d:ab:65:4a:3e:
         08:2d:b2:47:40:18:a1:4c:64:bb:9f:02:b7:56:79:72:b5:1b:
         59:d0:61:0c:69:c7:25:69:74:22:a9:90:a5:4c:7a:54:76:29:
         74:9b:f5:80:17:4c:72:e0:22:5d:b1:6e:d1:54:da:a7:5f:ee:
         db:56:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----