Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a623930303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466373a623930303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          BIsTxg3W0PT4lPNILI7gdXk0XNog6yrowTkEsz8I2VU=
Subject key identifier:   06:8A:21:70:5C:A6:12:E2:AE:1C:D7:3B:F2:EF:E0:0C:BF:74:44:AA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C23C2F345340AA46EDBC82F3BFA4C9C1BB40074
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a623930303a3a2f34382d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:06:50 +0000
ROA not before:           Mon 31 Jan 2022 04:01:50 +0000
ROA not after:            Tue 31 Jan 2023 04:06:50 +0000
asID:                     0
IP address blocks:        2001:df7:b900::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:23:c2:f3:45:34:0a:a4:6e:db:c8:2f:3b:fa:4c:9c:1b:b4:00:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:01:50 2022 GMT
            Not After : Jan 31 04:06:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:5e:40:52:cb:18:c3:48:61:9e:66:a3:92:
                    84:4a:07:c6:c9:ea:63:05:b1:28:bd:e0:41:49:96:
                    7a:77:4e:25:3b:d8:c0:5f:38:60:ff:df:53:c1:ea:
                    8b:8d:3d:3f:da:33:50:0a:fd:4a:58:6f:37:c0:c9:
                    63:89:26:bf:69:ce:3a:32:1c:af:c0:6c:5b:fe:6e:
                    67:d0:06:a4:ae:1a:84:91:59:b3:9c:31:1d:e8:a8:
                    5c:c8:68:a7:81:07:dc:af:dc:b4:87:1a:79:9a:54:
                    77:1e:9d:72:95:5c:08:03:43:89:bf:0b:5e:ec:37:
                    b9:64:ce:55:81:5f:0c:cb:30:b5:c1:80:f4:8d:f9:
                    1e:0d:79:63:5e:e0:78:c7:a8:05:6e:cb:cc:4a:e5:
                    58:99:be:8f:f4:70:cf:49:63:f3:d5:de:01:bb:df:
                    e9:bf:90:11:a4:d1:8e:fa:fd:18:a2:f2:f2:a1:e2:
                    e7:bd:8b:88:9c:7b:13:9b:84:b8:cb:ef:ce:f9:1e:
                    d9:04:5b:de:85:27:32:81:89:0b:dd:86:ea:0f:e1:
                    a5:05:32:bb:37:df:3c:49:54:c7:f6:38:96:f4:d1:
                    cb:4c:a1:18:cd:11:70:99:89:c4:81:2d:11:8c:58:
                    ec:47:69:3f:24:ba:43:8c:7a:ca:62:4c:f4:11:6d:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:21:70:5C:A6:12:E2:AE:1C:D7:3B:F2:EF:E0:0C:BF:74:44:AA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a623930303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:b900::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:e6:f9:2a:7a:e8:34:0e:84:a3:e9:c6:38:02:e4:ad:9f:
         33:b4:43:63:01:56:0b:64:e9:33:b7:81:59:11:7c:8d:47:2b:
         ee:ba:89:8a:24:28:da:20:41:0a:44:b5:86:29:fd:08:35:3e:
         64:82:a2:d4:de:40:d8:9d:d1:27:bf:d3:f3:2d:33:af:48:c3:
         7e:7d:a8:ea:dc:fa:a8:a8:8c:72:ca:12:1c:ee:2d:d1:6f:28:
         f3:e2:25:1a:97:cc:65:2d:e1:c0:08:6c:10:23:e8:34:2e:3b:
         0f:ba:80:f8:87:44:7d:e9:57:c3:76:26:3a:c6:43:b7:cd:6b:
         16:5f:8f:a8:50:6c:ab:d0:d2:74:ae:be:71:25:b1:47:40:f5:
         06:13:82:67:e8:e3:09:f2:06:e7:7b:97:71:79:12:75:ad:e1:
         7f:f9:63:c4:b9:9f:73:db:3e:b0:d8:fb:18:d8:e7:0b:28:59:
         ee:1d:43:49:52:c0:d9:60:d0:87:eb:72:3f:a8:2c:6f:11:73:
         f8:74:19:b5:fd:71:0e:6e:dc:ce:42:cd:bd:05:c4:2b:1b:36:
         e8:4c:2c:30:8a:ab:74:eb:74:1c:ce:13:d9:d4:ed:b0:db:a9:
         9a:e9:78:9c:c0:91:e1:37:a5:a5:b9:34:8d:df:58:f4:8d:e0:
         b3:de:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----