Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3134382e302f32322d3234203d3e203535363636.roa
File:                     3230322e34362e3134382e302f32322d3234203d3e203535363636.roa (raw, json)
Hash identifier:          DJMziUA8y6mP4pQw3E2JwvqO9kh3cBMx6oVaEybT1Zc=
Subject key identifier:   DF:16:DF:F5:F1:B0:5B:27:14:7A:53:F0:0A:A5:D3:83:43:68:5D:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E811528C023F07E915EFD8801BC1404085E8BD4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3134382e302f32322d3234203d3e203535363636.roa
Signing time:             Tue 18 May 2021 06:42:12 +0000
ROA not before:           Tue 18 May 2021 06:37:12 +0000
ROA not after:            Wed 18 May 2022 06:42:12 +0000
asID:                     55666
IP address blocks:        202.46.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:15:28:c0:23:f0:7e:91:5e:fd:88:01:bc:14:04:08:5e:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 18 06:37:12 2021 GMT
            Not After : May 18 06:42:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:90:19:fc:c0:0b:7e:be:f0:ac:5c:37:bc:
                    95:1f:cb:99:80:25:ea:3b:e6:df:10:74:2c:5c:50:
                    70:43:b1:52:46:0d:b8:95:ee:1e:f2:df:6a:cb:0a:
                    96:50:bd:dc:d2:1e:f7:a1:2e:f6:4b:84:b8:3c:83:
                    41:9c:f8:41:3b:89:f3:a7:a2:b8:b6:44:37:43:fd:
                    2c:73:21:59:9f:15:9e:45:77:fb:55:5a:87:62:bb:
                    bb:19:b5:dc:78:1c:83:05:48:d2:ad:41:e8:66:4b:
                    d9:3c:4a:a3:d7:94:53:a2:af:51:04:c4:0d:c9:44:
                    ed:ad:ca:12:ae:62:10:54:28:43:53:a0:9b:a4:25:
                    5f:99:e1:dc:83:29:08:7f:97:7f:f9:09:64:04:85:
                    0c:60:d6:a1:59:c4:66:24:01:7d:fa:fb:a2:6a:b2:
                    98:a6:ee:ea:7b:f7:09:d5:f1:26:44:67:e7:02:80:
                    59:9d:ac:49:2e:62:28:05:96:9f:ac:bd:74:0f:e8:
                    6c:3e:2e:13:be:99:78:90:b8:2d:92:ce:61:96:b1:
                    58:2a:04:b3:a9:2c:fa:68:74:bb:85:c1:59:ad:cc:
                    b4:ef:9e:8d:5c:e0:cb:71:03:3c:b1:97:ea:d8:08:
                    a1:9e:dd:e0:3f:31:fa:6a:6d:43:c9:ba:12:ad:70:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:DF:F5:F1:B0:5B:27:14:7A:53:F0:0A:A5:D3:83:43:68:5D:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e34362e3134382e302f32322d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:f8:55:c1:51:f2:dd:07:37:32:c6:1e:d1:31:3a:2a:9a:
         ce:04:b8:11:b1:3f:d1:d9:ca:b1:d1:0d:40:e4:d3:55:74:9e:
         76:e9:e8:f7:2a:3f:5a:88:20:d4:b5:cc:54:70:0f:b3:72:5f:
         07:90:ad:56:32:60:57:20:41:58:18:fe:28:c4:af:a6:46:38:
         db:c8:2b:38:ba:a9:c6:1d:5c:95:8b:75:c4:7d:e5:39:4e:e5:
         00:c4:32:43:c3:db:f3:fa:27:46:3c:61:0f:72:57:10:f8:ab:
         a6:90:af:fd:22:7a:86:de:6d:4e:8f:ea:34:5e:d3:a9:13:c2:
         2d:14:d6:8f:c8:27:c6:2c:d7:60:c5:53:60:f5:ce:d3:af:21:
         a0:28:93:80:5a:b9:fc:04:d8:26:82:0e:23:ad:78:a2:2e:41:
         26:d9:c1:a5:0a:f9:d3:e9:57:03:90:f8:c7:4d:18:9c:f3:8f:
         f2:ce:62:d9:b5:33:f0:da:8b:dd:61:a1:cb:c2:e1:28:87:86:
         a8:4a:da:f3:da:17:8b:85:8a:fb:c3:b6:95:20:e0:27:36:f6:
         f5:23:7e:c7:01:1f:27:78:70:75:e9:1b:0d:25:58:1a:0d:d8:
         ba:0e:d7:91:83:25:1f:cf:64:a3:4f:91:51:ef:3a:f0:c9:e9:
         5c:91:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----