Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333638.roa
File:                     323030313a6466353a376230303a3a2f34382d3438203d3e20313337333638.roa (raw, json)
Hash identifier:          fHTOyLP60gUO/UfQPfDw/r97c441jRyoPfYt8iMsB+Y=
Subject key identifier:   55:4B:C1:D7:36:5C:98:1D:2D:B4:2B:53:4D:6C:FC:76:DF:1C:E7:7B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4E35C3A0BA33C3248B3366EE2D9B29BE3E9BE85B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333638.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     137368
IP address blocks:        2001:df5:7b00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:35:c3:a0:ba:33:c3:24:8b:33:66:ee:2d:9b:29:be:3e:9b:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:9b:d7:10:0f:18:e5:44:6a:3e:63:a3:dc:
                    e2:78:c3:53:4c:34:f3:e9:d8:d0:85:2e:4b:20:79:
                    79:e0:f8:63:08:1e:79:16:a8:c6:f6:b3:bd:57:39:
                    1f:c9:3c:b1:55:4a:ca:c9:34:a4:a2:3c:38:b5:5a:
                    bc:47:a4:33:21:c5:e1:3d:42:12:4e:04:35:cf:70:
                    fe:80:91:b8:fc:b4:8f:e9:ea:fe:4e:7a:79:1c:14:
                    64:54:eb:2c:b9:e4:2f:50:5f:44:43:d4:05:7d:18:
                    7d:d4:8f:e3:05:90:09:09:75:0a:08:7f:ad:3b:a1:
                    0b:14:2c:e0:be:de:05:50:90:68:87:6a:39:c2:8a:
                    eb:84:f9:3c:68:2f:3f:e2:4b:72:3c:63:87:75:05:
                    bc:9a:1b:c0:c1:8b:f2:7b:41:20:e3:47:46:bd:70:
                    62:1c:84:af:8b:31:a9:69:7c:1e:cb:5a:bd:c8:47:
                    e0:9c:e4:c4:39:96:98:58:37:a8:09:09:cb:4d:85:
                    96:8d:3c:93:0f:ad:5c:14:02:22:7a:68:c7:77:98:
                    82:e3:d5:0e:4e:20:0b:a1:1f:fa:4e:7b:b7:3a:72:
                    1b:4d:8f:77:17:56:04:c3:25:d1:33:f2:ac:f1:0b:
                    68:bc:f8:f7:ad:86:d0:07:b3:be:d4:8e:76:ab:9e:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:C1:D7:36:5C:98:1D:2D:B4:2B:53:4D:6C:FC:76:DF:1C:E7:7B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a376230303a3a2f34382d3438203d3e20313337333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:7b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:0f:b5:18:29:3d:bf:18:c5:48:42:57:07:d4:8c:a1:d1:
         29:68:ab:18:48:0c:9c:36:9c:00:ac:d5:b9:d7:33:7a:0b:2c:
         a6:c1:1d:57:ee:24:f0:4a:07:03:68:4b:00:e6:78:0e:7f:cc:
         a7:f5:38:14:2a:77:c5:03:8c:8c:69:7e:85:15:50:60:2e:f1:
         d7:e4:d6:01:0c:f8:7c:2b:56:7e:24:e5:8a:eb:d8:bc:34:ef:
         e9:a4:fd:2c:e8:ab:d8:fe:3b:ff:1d:7c:ae:41:9d:f7:71:e0:
         0f:bf:b2:6e:e7:42:46:72:e7:2f:4f:82:b9:29:df:7f:8f:a7:
         ec:4d:22:6c:9a:45:73:e2:f3:f5:46:05:a5:3a:ba:b9:a0:ab:
         0c:9e:f9:33:fc:8b:5d:fd:65:22:5d:b2:ad:96:c0:e6:9a:5d:
         7f:2c:d7:b7:13:ec:e6:1a:5f:32:c3:af:a9:a9:df:50:6e:d7:
         09:32:59:75:84:c9:30:89:3f:e0:a4:b8:94:4e:fb:0b:ce:7b:
         01:b6:61:50:00:0c:f0:d2:88:c6:22:b0:f7:3e:19:81:d8:5a:
         c1:ae:30:2d:5c:c2:a6:68:54:01:58:68:c6:09:9f:d5:fa:ba:
         a1:e2:09:f0:a3:6b:0e:fe:52:eb:21:3d:f1:32:c8:f0:0c:aa:
         7c:18:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----