Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138312e38302e302f32312d3234203d3e203538383136.roa
File:                     3230322e3138312e38302e302f32312d3234203d3e203538383136.roa (raw, json)
Hash identifier:          8L0lUa8WaQHDPq/yZ+lSSbu+bHE/vjjm4SVdPh8J9rY=
Subject key identifier:   FD:BC:D5:20:94:7D:16:30:A6:2E:DD:52:22:93:BB:F5:67:9B:46:51
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D383550E2DF2503F234A6C8F339B52E0BBC5007
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138312e38302e302f32312d3234203d3e203538383136.roa
Signing time:             Tue 11 Jan 2022 02:53:24 +0000
ROA not before:           Tue 11 Jan 2022 02:48:24 +0000
ROA not after:            Wed 11 Jan 2023 02:53:24 +0000
asID:                     58816
IP address blocks:        202.181.80.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:38:35:50:e2:df:25:03:f2:34:a6:c8:f3:39:b5:2e:0b:bc:50:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 11 02:48:24 2022 GMT
            Not After : Jan 11 02:53:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:8a:bf:00:3c:f0:50:55:b1:ea:0f:82:23:
                    66:17:bb:5f:db:ac:21:b1:ae:01:c7:8a:72:fb:cc:
                    81:b8:61:c6:0a:49:fb:f5:5b:e0:ca:5d:24:f7:df:
                    ab:b2:24:6b:c0:18:8c:af:5d:9d:4c:90:df:81:b3:
                    1a:2b:5c:98:15:b3:a0:fb:38:69:1d:3d:a1:9b:d4:
                    2d:0f:70:f4:98:40:c2:a7:9e:b9:f2:9a:5c:03:8c:
                    3e:94:5a:42:15:b3:2f:f5:04:fd:f0:5a:66:cc:36:
                    83:8a:92:21:2e:da:be:d7:c4:97:e4:7d:5c:f3:77:
                    f1:28:dd:10:91:91:12:a4:f6:bd:05:c8:f8:93:4d:
                    cf:84:ea:df:d4:03:b3:d1:aa:48:36:81:2c:e3:c6:
                    de:0a:38:cd:be:11:4b:74:ce:c0:dd:a6:0f:70:e2:
                    8d:fe:3a:15:f2:87:c5:23:df:a8:f7:80:70:b6:30:
                    5e:dd:af:a2:77:06:bd:5a:fe:4e:ab:40:c0:07:f6:
                    f3:8e:8d:f7:33:dd:a5:56:1b:76:ac:55:7f:32:73:
                    20:6e:9f:df:16:d0:9d:2b:c5:bf:7f:5f:82:8d:5b:
                    de:d1:80:76:1f:34:51:98:e3:79:10:29:5f:fe:25:
                    9d:a9:9b:a0:e7:7f:d0:00:be:12:b6:86:2a:84:6a:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:D5:20:94:7D:16:30:A6:2E:DD:52:22:93:BB:F5:67:9B:46:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138312e38302e302f32312d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:b1:e2:ba:08:5e:55:bd:1c:1f:44:1e:aa:c3:01:96:14:
         64:67:7a:37:a5:2b:36:66:32:c7:2d:6d:e8:a8:17:12:67:ec:
         aa:4d:4e:d2:4b:ff:74:db:57:61:70:c0:2d:36:13:df:b9:be:
         58:fd:12:5c:0b:28:71:87:f6:59:0c:0a:92:4d:39:c1:aa:b2:
         38:05:ff:31:a2:27:4f:dc:c8:0d:f9:1e:64:52:2c:1d:62:1e:
         8f:33:90:3e:3c:95:25:aa:54:d5:45:87:ad:e0:18:11:c0:86:
         b1:29:43:ff:9f:2a:75:5c:61:01:3b:5b:b6:9d:9b:32:4b:e5:
         90:ab:50:9d:da:88:16:a9:40:02:7e:6e:4b:41:15:7d:bc:f9:
         1d:0b:0d:86:0f:0e:40:95:0c:76:a5:d8:84:2d:8e:4b:e9:00:
         7e:bb:3a:86:3b:98:52:74:6f:c0:10:46:95:d4:0b:42:6d:d0:
         24:d3:3a:e7:6b:0b:63:e2:8b:4a:4b:0f:be:a3:29:82:e2:2f:
         21:31:05:e4:54:43:9a:3f:04:c3:97:8a:bc:2d:86:6b:92:29:
         cd:a1:69:3d:5b:9b:fe:73:51:80:93:5b:93:26:54:cf:c5:3b:
         4e:99:8f:70:3a:94:74:fb:bf:88:4e:a6:95:0f:a1:5d:ec:70:
         43:3b:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----