Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a366130303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466323a366130303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          /utOvntQAkUdTnERK7BFDGV6VMFJmUqBNBOQc3VoAmA=
Subject key identifier:   3A:D8:9B:67:05:2B:C0:3A:B0:06:95:00:18:EA:DB:E1:AF:4F:F3:1A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57A131B9AF7827C5F1BF27F7BD863DF53FC73BE4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a366130303a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:09:35 +0000
ROA not before:           Mon 31 Jan 2022 04:04:35 +0000
ROA not after:            Tue 31 Jan 2023 04:09:35 +0000
asID:                     0
IP address blocks:        2001:df2:6a00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:31:b9:af:78:27:c5:f1:bf:27:f7:bd:86:3d:f5:3f:c7:3b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:04:35 2022 GMT
            Not After : Jan 31 04:09:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:de:76:ec:ba:4e:3f:5b:de:5e:14:d8:48:
                    ca:31:54:0d:97:b2:39:bc:20:b5:d9:4b:ec:18:ee:
                    05:91:e3:e6:88:91:98:16:cf:41:12:81:86:b4:4f:
                    59:bd:46:09:a3:28:a4:87:9b:f8:09:f2:88:a1:72:
                    cb:7b:d2:b4:41:2b:b4:4e:f2:66:27:2c:03:69:55:
                    6c:2a:a4:14:36:36:52:b3:ff:14:84:cb:9b:6b:1e:
                    49:be:e0:de:34:d4:f1:3b:28:5f:7d:a8:ff:a5:ba:
                    da:47:f4:c5:f5:4e:4e:41:d0:e1:e1:c2:fc:7d:3a:
                    35:f3:b3:b0:cf:4e:52:c7:5f:92:f2:39:30:04:4e:
                    c9:a6:f0:e6:da:33:b2:3c:66:dd:77:ff:c4:72:c2:
                    f7:f7:52:77:1d:fc:24:f1:74:10:69:06:13:e7:b8:
                    db:d8:5d:eb:d6:59:2b:e9:41:6a:72:33:eb:eb:75:
                    2f:db:d3:73:50:71:c5:c2:f4:6d:5c:9f:2c:c3:66:
                    03:3c:38:31:a0:48:d8:1d:9f:a1:bc:d7:da:94:75:
                    35:87:9f:4f:e6:a1:5e:4a:70:ca:4b:39:5a:5a:04:
                    1c:cc:fc:c8:94:78:41:1b:e2:48:e9:74:02:38:61:
                    b2:f6:8a:59:66:0b:d6:6d:b9:b1:64:9c:b3:a1:35:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D8:9B:67:05:2B:C0:3A:B0:06:95:00:18:EA:DB:E1:AF:4F:F3:1A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a366130303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:6a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:f8:06:7e:44:26:9a:fc:33:e6:7d:06:a5:c3:44:fd:9c:
         4b:74:d2:8a:01:39:5c:30:35:8f:be:1a:7c:11:1e:7b:71:fb:
         98:7c:44:7c:3d:93:4b:20:8b:d7:bd:fe:aa:ae:29:ab:1b:60:
         b6:88:7a:72:42:18:a9:0b:c8:d4:90:48:4f:c4:cf:72:f5:71:
         e1:09:ce:e4:a6:bf:5e:23:ff:91:7f:3c:4c:92:e3:d1:23:bc:
         f8:f2:ec:a2:6f:13:cf:91:56:14:08:30:4e:2a:81:0c:b9:1a:
         6a:33:2b:0d:4f:a5:41:ef:d3:1f:be:0c:a1:33:4d:08:22:6f:
         0d:5b:e7:cd:6b:5a:a7:46:95:dd:9a:ba:61:c6:6e:95:f4:33:
         e0:16:5d:87:2c:bd:04:da:fb:09:a1:fb:f5:05:82:ee:76:28:
         52:01:68:91:ad:82:2b:64:22:d8:7e:57:73:06:da:7d:ae:f0:
         eb:80:13:43:df:e5:f3:e7:0f:30:e5:80:b0:0b:a0:6b:7a:84:
         e3:cd:a4:ff:1f:7f:50:25:73:0b:08:dd:7e:5c:11:6e:9d:8b:
         ac:bb:59:81:8c:1e:2e:13:f3:6b:29:3e:82:66:dd:69:66:a9:
         12:a8:b0:5a:86:63:a3:af:db:e3:2e:fc:c7:c3:8c:dd:95:ed:
         0a:2e:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----