Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a386563303a3a2f33322d3438203d3e2030.roa
File:                     323430303a386563303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          4PiyL7QhG1IMra0yWdTMdU/i4+BQXHMYAcKV8giLuWk=
Subject key identifier:   72:08:6B:6A:50:8B:18:0A:57:B2:63:6D:98:8C:5F:D2:C4:FF:D4:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       268D1F44B2774B26C2E4A16B3AC610BEA4869BE6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a386563303a3a2f33322d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:10:13 +0000
ROA not before:           Mon 31 Jan 2022 04:05:13 +0000
ROA not after:            Tue 31 Jan 2023 04:10:13 +0000
asID:                     0
IP address blocks:        2400:8ec0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8d:1f:44:b2:77:4b:26:c2:e4:a1:6b:3a:c6:10:be:a4:86:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:05:13 2022 GMT
            Not After : Jan 31 04:10:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:80:0e:a7:e9:b2:a6:6e:dd:9e:69:77:d2:
                    27:e9:59:c0:c5:cf:66:49:dc:91:73:63:cf:91:fc:
                    ec:07:88:fb:e6:96:0b:23:1f:0e:53:92:51:20:4e:
                    f9:93:e0:3e:f7:46:f6:6b:03:3f:7e:a0:48:e4:6a:
                    61:67:c8:ba:06:64:e7:8c:42:35:b8:45:32:8d:97:
                    53:33:e2:a6:c8:b6:b3:bb:84:88:a7:8f:15:c1:2c:
                    89:e5:9b:18:05:7d:98:29:16:a3:85:2b:74:a7:8e:
                    7c:5f:46:06:ec:18:ca:9d:b5:ed:4a:25:7e:05:79:
                    30:42:84:63:99:3f:f9:33:ad:7f:66:c3:5b:30:bc:
                    d0:71:06:20:88:a6:8d:6a:ca:29:62:0b:c4:47:85:
                    49:cc:7f:be:a2:27:50:83:36:df:d6:1a:dc:b6:ae:
                    99:ec:b4:27:da:b8:5c:35:21:78:ca:03:21:7a:1a:
                    63:79:3a:d2:a9:75:db:fe:7e:00:67:53:99:80:c1:
                    74:46:59:dc:7a:7b:d5:eb:4c:5e:f8:55:02:fe:88:
                    ac:b6:68:1e:a8:74:cf:a7:7f:0b:20:3f:5d:12:06:
                    c2:b4:fc:a4:55:b5:41:e5:7d:28:b7:cc:bd:e9:aa:
                    21:b6:b1:3d:43:34:ce:b2:59:37:47:0d:39:f9:b7:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:08:6B:6A:50:8B:18:0A:57:B2:63:6D:98:8C:5F:D2:C4:FF:D4:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430303a386563303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:53:0e:43:78:7b:b2:b4:9f:2d:4f:a2:ef:27:b4:8a:04:ca:
         bd:60:d6:03:ca:ac:de:d4:e6:19:3d:10:22:c4:0c:20:a6:e7:
         e5:17:82:79:91:9e:69:8d:c2:d9:b8:48:c5:3a:db:64:18:2a:
         42:c8:40:b3:f7:2e:8f:fb:dd:8a:03:1b:3b:8b:7c:10:79:eb:
         ed:23:68:41:6e:c8:d2:e5:81:19:77:5f:f8:44:c0:49:a8:9f:
         49:26:ba:06:94:31:20:2f:3c:7c:42:71:0b:14:e9:b6:24:5c:
         3f:37:25:c8:29:dc:88:d6:5e:de:3a:ad:20:56:ae:94:32:71:
         5a:fb:3b:18:f8:f5:ff:0c:4a:e6:1e:b0:28:77:74:81:63:30:
         c6:57:5e:4e:cc:08:f7:68:3c:7f:dc:ed:41:0a:b0:df:29:d9:
         d8:eb:14:2b:b7:61:bf:56:14:b9:be:aa:b1:8f:62:c6:04:d5:
         37:7f:6a:68:9c:ef:50:81:d1:ea:12:71:48:21:7e:31:81:47:
         72:f7:53:bb:77:af:50:c7:52:3f:09:18:cd:48:dd:c4:84:9a:
         95:ab:72:6e:0a:31:50:4c:28:d4:17:47:58:1d:75:51:fc:5a:
         be:d4:f5:d8:13:af:75:7a:d0:98:ac:b0:bb:be:3a:60:d7:39:
         30:a2:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----