Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a373938303a3a2f33322d3438203d3e203137383834.roa
File:                     323430323a373938303a3a2f33322d3438203d3e203137383834.roa (raw, json)
Hash identifier:          usoEIRKre5w7tAZusnj4Y15sPQeZGpk8Sp5Csx9EwmM=
Subject key identifier:   69:CC:D2:51:D5:75:67:18:F9:30:59:DC:85:FD:6C:9F:14:59:73:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       02E48A3C4A23EC0AD7900B6F285640292CD5A77E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a373938303a3a2f33322d3438203d3e203137383834.roa
Signing time:             Tue 26 Oct 2021 08:42:57 +0000
ROA not before:           Tue 26 Oct 2021 08:37:57 +0000
ROA not after:            Wed 26 Oct 2022 08:42:57 +0000
asID:                     17884
IP address blocks:        2402:7980::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e4:8a:3c:4a:23:ec:0a:d7:90:0b:6f:28:56:40:29:2c:d5:a7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 26 08:37:57 2021 GMT
            Not After : Oct 26 08:42:57 2022 GMT
        Subject: CN=3082010A0282010100C86BFB0045C487A0D9F15A544BD7792797A8868B6A391836576F82583B3D6B22D5C663BF91DEA8C248F70F3F0FEF7F4A869A4652568CC0FFE42CEB46B32C32D75FEF5068791CD05F7FFFB6C849D471E7FDF03BE2CD50276F8952A5F9B792046FE24BA95EEB1E43F9F2D8FC9B2C6E52C108B7FAD17138E09188BFB299DDDC3C72B78B7BCA4E35E49259A4486E99864003E21183171BFE533808AC8129D5F76EC1EDA1956CDD235C0DBD2FCA4977B405EA59DC7F01A937F179BA70210BF3BCECEA95AEC9A7A95945643C83BA9943E6B79D69BEFC4BB6E0E2867C2158C43CFD127164BCB6A762A64DAFCAF4880E90EA7BD02D972048B60A5E9D05ACB8EA8DCBEA010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:fb:00:45:c4:87:a0:d9:f1:5a:54:4b:d7:
                    79:27:97:a8:86:8b:6a:39:18:36:57:6f:82:58:3b:
                    3d:6b:22:d5:c6:63:bf:91:de:a8:c2:48:f7:0f:3f:
                    0f:ef:7f:4a:86:9a:46:52:56:8c:c0:ff:e4:2c:eb:
                    46:b3:2c:32:d7:5f:ef:50:68:79:1c:d0:5f:7f:ff:
                    b6:c8:49:d4:71:e7:fd:f0:3b:e2:cd:50:27:6f:89:
                    52:a5:f9:b7:92:04:6f:e2:4b:a9:5e:eb:1e:43:f9:
                    f2:d8:fc:9b:2c:6e:52:c1:08:b7:fa:d1:71:38:e0:
                    91:88:bf:b2:99:dd:dc:3c:72:b7:8b:7b:ca:4e:35:
                    e4:92:59:a4:48:6e:99:86:40:03:e2:11:83:17:1b:
                    fe:53:38:08:ac:81:29:d5:f7:6e:c1:ed:a1:95:6c:
                    dd:23:5c:0d:bd:2f:ca:49:77:b4:05:ea:59:dc:7f:
                    01:a9:37:f1:79:ba:70:21:0b:f3:bc:ec:ea:95:ae:
                    c9:a7:a9:59:45:64:3c:83:ba:99:43:e6:b7:9d:69:
                    be:fc:4b:b6:e0:e2:86:7c:21:58:c4:3c:fd:12:71:
                    64:bc:b6:a7:62:a6:4d:af:ca:f4:88:0e:90:ea:7b:
                    d0:2d:97:20:48:b6:0a:5e:9d:05:ac:b8:ea:8d:cb:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:D2:51:D5:75:67:18:F9:30:59:DC:85:FD:6C:9F:14:59:73:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a373938303a3a2f33322d3438203d3e203137383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7980::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:40:d0:bf:ef:14:c2:6d:6a:6f:a8:a6:e3:8d:01:27:ff:e1:
         57:3e:27:4c:40:9a:fa:46:d9:9e:07:74:c4:21:d5:7d:d7:70:
         32:b0:86:81:8e:5f:dd:5a:7b:33:32:f2:9b:bf:f9:c0:86:f0:
         0f:c6:45:5a:4c:87:ed:ed:97:20:7f:88:7d:54:e7:82:82:9f:
         db:4a:9e:15:43:27:3a:18:68:d5:cd:c4:22:d9:2c:53:81:d2:
         fb:40:a1:57:e8:fc:eb:e6:86:48:66:3d:45:43:77:47:07:e3:
         04:7b:64:ba:42:1f:93:cb:37:3a:10:f5:b5:b6:e4:ae:9d:01:
         3b:a6:9a:55:44:9d:6d:8a:39:cb:8f:c6:07:bb:92:e9:27:87:
         e9:fc:6d:79:bd:1b:40:0d:7d:69:1c:98:e4:f6:98:e4:78:ae:
         33:6d:0a:1e:c1:73:4d:b2:f7:e4:ec:35:db:b8:53:38:6c:dc:
         9d:98:69:ae:97:da:d5:fd:a6:82:1e:e2:c5:c3:ff:92:db:99:
         eb:50:ae:58:a7:d4:1a:96:d2:32:a4:cb:8d:30:79:f6:30:c5:
         ac:17:a3:2a:bc:a7:47:75:a4:be:f8:dd:f6:b9:cf:8f:ed:a9:
         9c:8d:aa:47:65:68:3e:f6:e0:c4:0e:84:3a:23:aa:f4:3f:13:
         cc:ad:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----