Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a6238303a3a2f34382d3438203d3e20313431313037.roa
File:                     323030313a6466353a6238303a3a2f34382d3438203d3e20313431313037.roa (raw, json)
Hash identifier:          WCUz9j3tfOmhXmu0eAS/AV6MPQU11tzyxOKMcBIEWxE=
Subject key identifier:   3B:D0:11:76:3C:DD:2A:E9:A7:96:15:AA:0B:1E:22:B7:5D:8A:AA:F2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7F7D44BA895BBDAD627C914798ED9518D6E18920
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a6238303a3a2f34382d3438203d3e20313431313037.roa
Signing time:             Sat 23 Oct 2021 03:00:01 +0000
ROA not before:           Sat 23 Oct 2021 02:55:01 +0000
ROA not after:            Sun 23 Oct 2022 03:00:01 +0000
asID:                     141107
IP address blocks:        2001:df5:b80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7d:44:ba:89:5b:bd:ad:62:7c:91:47:98:ed:95:18:d6:e1:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 02:55:01 2021 GMT
            Not After : Oct 23 03:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:92:50:e2:03:7f:51:0c:8a:ce:af:9c:61:
                    6d:8c:48:59:1e:50:ec:06:ef:b7:1d:62:ec:77:27:
                    df:8a:b6:b6:ee:0d:f4:0c:c4:f4:01:cd:33:d3:4d:
                    e7:b0:fe:5b:db:41:13:9a:7b:1a:1e:6e:c3:c0:d0:
                    c9:a5:5e:32:39:3a:a2:b4:e2:71:87:05:56:56:0c:
                    e6:38:d2:a3:4f:bf:82:44:bc:3a:05:e9:55:b4:99:
                    b7:6d:0f:be:58:32:15:00:84:6b:3e:29:d8:38:a6:
                    3c:84:7f:9c:1d:28:e1:78:2a:82:94:f3:4d:63:9c:
                    29:aa:21:90:13:cd:ec:8c:9d:c4:68:ce:fe:e2:37:
                    f5:36:84:c2:74:34:cd:89:3c:82:7a:e0:84:3f:6c:
                    25:87:45:50:f1:0a:27:24:1a:aa:d3:e7:23:41:74:
                    dd:82:8c:9c:b4:cf:30:0f:32:ca:7e:51:fc:14:ac:
                    9b:eb:86:d3:1f:06:2d:40:f7:26:63:d3:59:46:88:
                    79:c7:08:60:f6:d1:f1:75:5b:05:62:2e:8b:ca:84:
                    bc:46:b4:53:8b:5d:19:c8:76:87:45:e5:a2:54:77:
                    de:53:df:69:83:9f:c4:aa:df:5e:10:74:33:71:0f:
                    c3:1c:83:36:61:0a:59:c4:52:f2:01:4d:f1:a5:dd:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:11:76:3C:DD:2A:E9:A7:96:15:AA:0B:1E:22:B7:5D:8A:AA:F2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a6238303a3a2f34382d3438203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:36:0b:25:82:38:03:e0:6a:14:ec:18:a4:bb:83:d6:f6:73:
         5b:f5:72:06:9c:5a:aa:75:3b:46:83:63:4d:bb:cc:30:df:c6:
         87:6f:cb:91:39:89:af:3b:89:57:c0:1e:c2:e5:b9:e2:4b:c1:
         2b:2e:16:88:f8:d1:8c:0c:41:96:32:ee:7c:0f:85:77:ae:7a:
         c1:96:02:ef:7f:11:cb:2f:a8:20:af:fa:1a:b4:8a:30:9b:11:
         a3:07:ae:61:8a:df:ad:3f:4f:a5:39:aa:5b:49:d5:48:1d:51:
         30:70:e9:5a:ca:c2:fb:5b:09:c7:1f:38:45:c0:f9:a1:c9:8a:
         e2:91:77:a8:09:d2:7e:2b:b4:3f:44:79:f6:6a:4e:f3:5c:66:
         f2:9e:fd:b1:63:5f:30:2e:c8:df:80:5b:75:05:73:97:16:e6:
         27:f6:d4:92:9c:3e:bc:34:7c:57:a3:6a:8f:60:08:8a:fa:f1:
         de:ee:9f:61:8b:8a:80:08:18:37:55:49:11:86:c6:c7:6e:37:
         67:b6:d9:0c:39:dc:42:c7:a1:ef:55:ee:45:17:59:34:8a:04:
         1c:f6:5c:df:6f:86:a1:90:37:aa:b1:e0:43:ff:d0:52:e8:3b:
         f7:77:42:b1:15:4d:ed:34:1e:09:e7:c5:e3:0c:1d:67:4a:7d:
         e9:21:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----