Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a386163303a3a2f33322d3438203d3e2030.roa
File:                     323430323a386163303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          wlZOH6McwdxzRpf23V6Ga8IjjvdwBBNUnk/ZYiufPlQ=
Subject key identifier:   09:36:1C:4F:1B:CF:EA:43:FC:EF:6E:F1:5F:3A:F2:5D:C1:02:E4:7F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       515AC608B692D3ADD9E384558BC0F6C4982DA6BA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a386163303a3a2f33322d3438203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:06:06 +0000
ROA not before:           Mon 31 Jan 2022 04:01:06 +0000
ROA not after:            Tue 31 Jan 2023 04:06:06 +0000
asID:                     0
IP address blocks:        2402:8ac0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:c6:08:b6:92:d3:ad:d9:e3:84:55:8b:c0:f6:c4:98:2d:a6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 04:01:06 2022 GMT
            Not After : Jan 31 04:06:06 2023 GMT
        Subject: CN=3082010A0282010100E6376CC6C50835C3AA31E89687C8F7F19318EB5D91F3821620703AC09617BCB0549A34CC0A2CA532F2A1285238DE28D37BF57A0537DD61E056048778A543FC7C1E7D45342852AAB4F7FF7FDA6C68E14504C26C7103FB4804730EEBBFDBC8B23BF95512EE922592DAEB0FB9F0A7FFA81055484305716F2D815CAE2EC6A939B9E2D536E96C99569FF6DAA6C2AE20AA874E8CF6242F32BC4129DAE4F563222090756CD2C4376138677DC777FD294EEF72A2F15A12B0C3D3FDA9EEB5AF002D27C06C88338D87882BB356041F8E1C936A73A008ACBDF72DA8A9AF21B241F8F2AC6678350911F8F54CA038C6F66801C189B440608D6676EC372952F02BD24C831836AF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:6c:c6:c5:08:35:c3:aa:31:e8:96:87:c8:
                    f7:f1:93:18:eb:5d:91:f3:82:16:20:70:3a:c0:96:
                    17:bc:b0:54:9a:34:cc:0a:2c:a5:32:f2:a1:28:52:
                    38:de:28:d3:7b:f5:7a:05:37:dd:61:e0:56:04:87:
                    78:a5:43:fc:7c:1e:7d:45:34:28:52:aa:b4:f7:ff:
                    7f:da:6c:68:e1:45:04:c2:6c:71:03:fb:48:04:73:
                    0e:eb:bf:db:c8:b2:3b:f9:55:12:ee:92:25:92:da:
                    eb:0f:b9:f0:a7:ff:a8:10:55:48:43:05:71:6f:2d:
                    81:5c:ae:2e:c6:a9:39:b9:e2:d5:36:e9:6c:99:56:
                    9f:f6:da:a6:c2:ae:20:aa:87:4e:8c:f6:24:2f:32:
                    bc:41:29:da:e4:f5:63:22:20:90:75:6c:d2:c4:37:
                    61:38:67:7d:c7:77:fd:29:4e:ef:72:a2:f1:5a:12:
                    b0:c3:d3:fd:a9:ee:b5:af:00:2d:27:c0:6c:88:33:
                    8d:87:88:2b:b3:56:04:1f:8e:1c:93:6a:73:a0:08:
                    ac:bd:f7:2d:a8:a9:af:21:b2:41:f8:f2:ac:66:78:
                    35:09:11:f8:f5:4c:a0:38:c6:f6:68:01:c1:89:b4:
                    40:60:8d:66:76:ec:37:29:52:f0:2b:d2:4c:83:18:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:1C:4F:1B:CF:EA:43:FC:EF:6E:F1:5F:3A:F2:5D:C1:02:E4:7F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a386163303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:a1:ee:3e:d3:c1:53:13:6f:d2:17:61:4f:10:fa:d4:33:
         4c:76:81:7d:3c:f8:90:74:75:4f:b1:6f:cc:2a:04:71:46:9e:
         98:f5:7f:37:6e:65:89:17:d1:6e:78:4b:ec:13:86:c6:bf:67:
         fe:98:b4:ce:46:6b:39:9b:f0:64:db:6a:ed:36:07:92:3f:a4:
         4b:60:09:08:37:e5:7b:2a:12:3d:fb:ef:90:06:c7:12:c3:a4:
         7b:e2:d6:50:eb:a0:1d:25:24:1d:6d:15:1a:61:9c:fa:21:39:
         8e:09:29:1a:db:37:72:f2:89:86:b5:4b:e1:45:99:42:66:28:
         a3:6a:6a:33:4b:70:a1:92:1c:b5:c2:ee:87:9d:b8:f2:ea:dd:
         02:78:04:ae:1b:8d:cd:d2:c0:52:62:15:3e:b0:6a:9b:f1:39:
         1f:d9:91:48:30:9f:b2:bf:b9:e0:f6:f2:47:7e:44:bb:1d:3b:
         19:54:60:38:f9:89:fb:14:db:fc:0d:d9:2d:7c:98:19:3c:bf:
         05:07:a4:44:1c:ec:92:f3:29:80:38:3e:bc:56:71:a0:cb:7c:
         7c:c7:ef:8e:57:1c:5b:ce:f9:4f:41:a5:56:71:21:a3:23:d0:
         a5:cb:ce:f4:7a:2b:0c:66:37:60:e4:2c:3d:ee:ec:29:ec:bb:
         79:19:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----