Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a6638303a3a2f34382d3438203d3e20313430343433.roa
File:                     323030313a6466343a6638303a3a2f34382d3438203d3e20313430343433.roa (raw, json)
Hash identifier:          f5+Lvyo4CIhBYMOwIFDXLFDEtJqtYZIkdx6SooqOcco=
Subject key identifier:   0C:0B:E1:90:F7:B5:32:67:FB:79:9A:36:48:1C:24:68:4E:1F:0E:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       308311DB59D7A1B944EE17645ED7BDD5D7031A7A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a6638303a3a2f34382d3438203d3e20313430343433.roa
Signing time:             Tue 15 Feb 2022 05:15:34 +0000
ROA not before:           Tue 15 Feb 2022 05:10:34 +0000
ROA not after:            Wed 15 Feb 2023 05:15:34 +0000
asID:                     140443
IP address blocks:        2001:df4:f80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:11:db:59:d7:a1:b9:44:ee:17:64:5e:d7:bd:d5:d7:03:1a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 15 05:10:34 2022 GMT
            Not After : Feb 15 05:15:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:d8:6c:9e:17:9b:44:5b:f7:2e:1c:2c:ec:
                    17:8a:2e:64:1b:45:89:52:04:90:55:0e:4b:7e:f5:
                    02:17:42:4d:0f:9e:ef:48:88:94:f6:99:9a:e9:bc:
                    b0:5a:5d:e5:dc:dd:b8:f4:a2:b9:a7:41:11:96:ee:
                    43:a9:75:7a:d3:11:2e:03:13:38:d3:f8:f2:95:1b:
                    ed:5d:64:f0:9a:77:e5:66:af:05:ce:9e:e4:ea:6b:
                    d7:ed:28:b0:69:1f:2c:d5:70:28:6a:ff:f7:75:05:
                    e7:27:45:19:25:d7:5b:a4:2d:42:bc:33:47:d2:f1:
                    7b:56:ac:ea:c7:c6:91:c9:40:ed:08:c8:58:81:dd:
                    15:84:8d:20:45:34:6e:08:87:6d:a5:48:6c:d4:27:
                    8b:fa:82:d1:8b:a3:4a:96:5d:7d:97:3b:30:78:2b:
                    cf:cc:4a:86:75:f1:2a:d1:4a:91:6d:e6:f0:cc:c7:
                    93:a6:65:20:5d:4b:ce:27:49:3a:e6:e9:18:b6:a0:
                    b0:70:52:c8:68:37:56:53:ef:25:5c:81:1f:c6:c3:
                    7b:24:93:57:13:21:ca:5a:0d:fb:76:41:42:79:8b:
                    41:e1:cd:51:85:1e:fe:14:6e:84:e9:00:f3:dd:27:
                    bc:5e:92:c7:f4:21:a4:00:3e:c4:ca:8b:9d:4b:35:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:E1:90:F7:B5:32:67:FB:79:9A:36:48:1C:24:68:4E:1F:0E:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466343a6638303a3a2f34382d3438203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:c8:ba:4f:0b:32:39:68:0e:99:2e:c8:4b:b3:cb:c9:d1:
         2f:f1:6a:b6:72:fe:24:8a:a7:27:46:9c:b3:84:ba:8b:3f:4f:
         8c:f7:51:0d:7d:5d:b9:78:ab:dd:40:6a:b0:70:88:36:8e:ed:
         4d:38:d1:ab:2f:a1:10:da:e4:ac:8a:88:13:99:07:d5:83:50:
         23:be:49:2d:89:ba:72:3a:33:1f:77:c7:91:1a:25:de:f0:17:
         b4:82:c6:8b:d0:83:d9:09:d5:fa:15:a1:fb:41:dd:d1:80:fb:
         69:05:ae:f1:60:f9:88:12:49:a2:c4:8c:3f:a4:f1:3e:e9:98:
         80:22:cb:5e:20:13:9f:4c:34:e6:14:c3:85:27:e5:3f:d6:8e:
         ce:ec:fd:56:0f:cd:3d:a0:a1:52:f6:16:a5:b3:2f:47:5f:18:
         55:78:91:d2:d5:16:2b:82:bc:50:91:c0:47:e0:c2:d1:c6:d0:
         f3:32:62:f9:66:15:2f:41:dc:e0:ad:4d:e9:5a:03:23:69:8f:
         a2:a6:09:8d:31:8e:2b:ed:f0:ae:23:f7:7b:1f:f1:c4:c9:b2:
         64:0a:e7:70:e2:74:70:fe:08:56:39:04:3e:7a:fe:be:76:c3:
         68:29:12:05:90:73:2f:3a:9a:39:4b:b2:28:c0:2c:4c:5c:11:
         cf:3c:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----