Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a653738303a3a2f34382d3438203d3e20313432333334.roa
File:                     323030313a6466363a653738303a3a2f34382d3438203d3e20313432333334.roa (raw, json)
Hash identifier:          ODjFkyOzHKofTVRg8enrgTH43wQEjzYBSrqNicf7Fno=
Subject key identifier:   5A:1E:96:40:1B:87:9A:4F:CF:58:42:96:44:FD:7A:6E:BA:2D:B4:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       50C1498982D720C6D388EDB0A2857C0F64B8DE2B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a653738303a3a2f34382d3438203d3e20313432333334.roa
Signing time:             Mon 26 Jul 2021 03:43:51 +0000
ROA not before:           Mon 26 Jul 2021 03:38:51 +0000
ROA not after:            Tue 26 Jul 2022 03:43:51 +0000
asID:                     142334
IP address blocks:        2001:df6:e780::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:49:89:82:d7:20:c6:d3:88:ed:b0:a2:85:7c:0f:64:b8:de:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 26 03:38:51 2021 GMT
            Not After : Jul 26 03:43:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:83:d1:6f:a0:6f:85:5e:cb:75:ef:06:3f:
                    4e:15:29:06:40:5f:89:bf:c1:a9:62:b8:fe:6d:53:
                    11:d1:e5:63:ec:71:c8:de:a5:76:8b:f8:af:97:89:
                    13:0c:c7:35:cd:2e:3d:88:0d:7c:57:50:87:b2:36:
                    40:8b:ab:bf:e0:3b:6e:b1:d4:b0:52:9f:74:47:94:
                    0b:05:34:c2:82:1a:d9:74:f9:3c:da:61:4b:d8:7f:
                    0c:12:68:16:81:89:80:de:b9:14:a8:14:b4:2d:c0:
                    6c:f4:bb:27:0c:53:c3:c3:13:05:6a:bf:9c:31:b2:
                    69:c9:e8:a7:62:d7:03:41:5f:26:41:f0:39:16:93:
                    6e:aa:1c:a6:5b:df:ca:fe:03:4c:ea:11:6d:5a:a7:
                    87:21:21:0b:54:11:5e:6b:5f:eb:6e:3f:3e:3c:d9:
                    06:cd:bf:8d:28:34:45:0d:3e:1c:98:b6:51:25:43:
                    df:d6:2b:82:da:81:da:e7:fe:95:c9:09:b9:12:e4:
                    a4:98:52:84:4c:14:5a:c5:9e:2b:31:61:3c:64:6b:
                    d5:01:86:68:40:ae:0c:0e:58:de:07:b9:c2:43:6c:
                    2d:35:03:46:95:ad:b8:9e:e0:ba:9b:7d:e3:6b:92:
                    d2:e7:a8:a9:0d:ea:48:4f:63:85:e1:e4:87:5e:63:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1E:96:40:1B:87:9A:4F:CF:58:42:96:44:FD:7A:6E:BA:2D:B4:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a653738303a3a2f34382d3438203d3e20313432333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:e780::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:19:c3:d0:ec:88:dc:16:29:4e:42:ef:ec:38:61:d4:91:
         4b:49:86:83:21:37:e1:10:77:1b:cb:dc:52:1a:e7:99:b0:59:
         d6:4d:72:36:c4:a7:c8:d6:b4:6f:ec:54:98:43:97:b3:22:12:
         65:e8:04:f6:35:e2:8f:58:c5:f2:fa:e4:3b:17:c4:f7:ac:3b:
         0a:40:f3:c1:b9:0f:a1:63:50:b0:15:12:8d:29:7e:ac:5c:b6:
         c5:29:15:2b:3d:4e:73:23:ff:cf:25:de:f6:2a:db:ca:d5:95:
         85:a8:04:ac:79:be:f0:30:a9:9d:fb:c2:a6:ec:30:30:ad:d4:
         78:c2:34:f9:43:a9:7c:25:e4:bd:68:00:94:e9:c7:ec:4d:04:
         9c:f0:18:6b:3a:f7:44:72:b1:43:13:17:67:70:72:b8:41:b6:
         07:0a:f3:14:c7:ee:34:c0:37:85:1b:dc:8b:66:68:86:54:89:
         6b:de:e6:05:ed:3f:03:58:54:f1:5b:b7:f3:26:ca:75:61:b9:
         37:1a:d8:cd:d2:5e:d5:32:05:8f:dd:10:92:80:c5:aa:7b:ad:
         ac:25:dd:19:83:28:7f:21:ef:ec:37:5e:02:c2:08:30:45:6b:
         7c:a6:21:5a:15:b9:90:b5:33:7a:85:a3:e4:7f:94:a3:9b:54:
         bc:71:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----