Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a643038303a3a2f34382d3438203d3e20313339393933.roa
File:                     323030313a6466323a643038303a3a2f34382d3438203d3e20313339393933.roa (raw, json)
Hash identifier:          2sO+XUi/7LQxMUUHmtoBZJrN3vrKK5EYts0HHaAzAt0=
Subject key identifier:   C5:63:C4:A1:19:E1:3A:86:21:34:61:FA:E2:49:AC:FD:F8:2B:83:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       09E1F6EB71E6CAD35A71B09B5304D50A0ED6C687
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a643038303a3a2f34382d3438203d3e20313339393933.roa
Signing time:             Fri 12 Nov 2021 04:00:01 +0000
ROA not before:           Fri 12 Nov 2021 03:55:01 +0000
ROA not after:            Sat 12 Nov 2022 04:00:01 +0000
asID:                     139993
IP address blocks:        2001:df2:d080::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e1:f6:eb:71:e6:ca:d3:5a:71:b0:9b:53:04:d5:0a:0e:d6:c6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 03:55:01 2021 GMT
            Not After : Nov 12 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:e7:d3:fa:64:08:54:a3:fd:db:d4:0c:01:
                    cd:6b:16:37:22:7c:49:9c:c8:02:7c:02:55:cd:8e:
                    3e:be:2f:3f:fb:9f:c8:a5:29:5f:fb:a6:86:3f:33:
                    8d:8d:33:64:8a:98:cb:8d:c7:1d:46:96:29:d0:e5:
                    a5:91:37:af:8f:b6:e1:e5:64:3c:ca:e8:52:d5:d9:
                    d1:e5:e9:0b:3a:f2:31:fa:7b:77:aa:6b:36:5a:3a:
                    5c:60:e8:a4:74:ba:a2:ee:a6:ea:44:9e:a4:20:cd:
                    29:52:43:6e:b2:ae:84:7b:c3:e5:6e:7a:5f:8b:4c:
                    d5:c8:f4:f7:e0:54:2e:11:ea:4f:3b:70:bf:19:dc:
                    6e:63:a1:28:ac:45:2f:f8:50:aa:a4:9e:3f:fc:48:
                    eb:4c:65:69:b6:f4:a5:81:d1:68:7b:5b:5a:57:5b:
                    68:3a:d3:0b:23:d6:f6:cd:63:a0:99:cb:81:18:7a:
                    e0:f1:f3:3a:c3:96:c8:bc:f0:f2:bf:b6:f3:5c:56:
                    f3:86:ab:de:b6:e7:25:b4:a7:bc:ab:96:f0:cd:e8:
                    a8:89:fa:96:27:0d:94:30:76:7b:a9:14:e1:ab:aa:
                    06:72:69:f8:3f:2c:92:3e:04:4d:ce:16:c0:0f:2b:
                    11:86:e7:0f:8b:9c:95:14:38:46:26:05:54:60:7d:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:C4:A1:19:E1:3A:86:21:34:61:FA:E2:49:AC:FD:F8:2B:83:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a643038303a3a2f34382d3438203d3e20313339393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:d080::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:33:d0:15:ab:c3:96:19:85:f9:05:96:b2:90:12:fd:66:f5:
         85:88:7a:9b:9c:e1:9d:b1:f7:33:33:d3:90:b7:c2:01:98:9d:
         6d:16:5e:9d:0e:ab:03:b7:94:a1:87:27:4c:3a:a5:f7:b7:5d:
         0e:0d:9c:8c:af:22:3f:d0:7a:f4:68:31:67:c3:17:48:fb:15:
         66:7d:6a:ea:50:0f:b9:9c:03:bf:a7:f3:1e:1f:e3:8c:cb:1a:
         80:04:c6:89:7c:a9:bf:c4:f5:e9:a0:06:5a:7d:46:8d:2a:cd:
         ed:21:fa:25:9b:07:d0:a3:9e:16:f8:98:64:14:f8:9a:2e:18:
         3e:51:d0:94:d8:1f:98:27:1e:27:8d:14:3e:af:61:59:56:c1:
         64:1b:c3:6c:27:f2:65:4e:23:bc:8d:0b:4b:d1:f4:f9:54:27:
         0b:8a:0a:ca:bd:61:9d:92:b5:64:1e:92:b0:60:5b:f9:16:f8:
         c1:4d:6d:b7:d9:53:db:a6:b0:dd:e6:42:a5:ea:e6:91:42:81:
         73:8f:99:d2:a3:c9:88:58:3e:26:8d:00:3d:b1:fe:9d:81:9a:
         8e:5f:0b:41:d3:e3:e7:87:86:cb:02:44:99:16:a7:8b:05:c8:
         81:2c:c0:70:8a:e8:a2:29:68:b5:01:c9:68:4e:32:ae:39:90:
         39:7c:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----