Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a653130303a3a2f33322d3438203d3e203538343835.roa
File:                     323430323a653130303a3a2f33322d3438203d3e203538343835.roa (raw, json)
Hash identifier:          qsfDYbGoxBTvO4wp6Uyipasur9pJzt684+QZoJxI7FQ=
Subject key identifier:   76:8F:29:BC:0A:D4:87:2A:F0:A7:B5:FE:75:AF:7D:16:AF:88:A7:26
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5A1C5013288346D75E1527063BA142232FB21455
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a653130303a3a2f33322d3438203d3e203538343835.roa
Signing time:             Tue 11 May 2021 01:44:25 +0000
ROA not before:           Tue 11 May 2021 01:39:25 +0000
ROA not after:            Wed 11 May 2022 01:44:25 +0000
asID:                     58485
IP address blocks:        2402:e100::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1c:50:13:28:83:46:d7:5e:15:27:06:3b:a1:42:23:2f:b2:14:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 11 01:39:25 2021 GMT
            Not After : May 11 01:44:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:54:d3:ef:ff:16:01:45:23:ae:72:5e:91:
                    76:f9:35:c4:7a:cc:3f:03:16:25:be:32:1d:b1:67:
                    45:29:a0:9b:a2:22:71:67:c0:ec:83:bd:95:b2:04:
                    c6:2f:81:32:75:47:53:5d:d0:2f:27:7c:bc:a4:a8:
                    6f:e3:7b:e9:52:20:88:f4:0a:65:96:8d:44:19:35:
                    bc:85:98:c1:a1:03:c6:78:86:80:17:5d:64:79:c5:
                    cc:4f:c5:06:6e:37:dd:4d:4a:88:14:3b:09:e1:6f:
                    1b:7e:97:f2:bd:2e:38:8b:48:d7:27:49:93:66:ab:
                    a8:f0:b5:cc:ee:98:fa:fa:e7:09:49:3d:e2:dd:7b:
                    e0:99:04:a4:f1:59:ba:54:fe:15:02:5b:eb:1b:1b:
                    1c:8f:ad:39:29:cd:f0:3e:f9:c9:0b:43:6c:7e:9c:
                    42:0f:c5:c8:49:ca:a4:b7:54:eb:ae:b7:41:0e:ea:
                    24:0a:26:53:a5:d5:94:15:9f:b9:e6:4c:f6:76:62:
                    ff:15:24:4e:4c:36:cd:5a:da:2f:0f:a6:4c:61:73:
                    71:62:4a:2f:70:7b:e7:44:be:2c:5c:e5:93:51:96:
                    b2:2a:fc:59:19:cc:a0:f3:23:e0:59:d5:68:76:9a:
                    e2:1a:bd:16:04:24:f8:50:78:7b:08:45:c9:d2:cf:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:29:BC:0A:D4:87:2A:F0:A7:B5:FE:75:AF:7D:16:AF:88:A7:26
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a653130303a3a2f33322d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:8c:75:5e:6b:46:5f:65:1e:5b:f3:f6:dc:ce:b1:66:c7:
         06:8c:e7:c9:b1:8c:ba:ea:ef:ba:3d:b2:18:3e:9d:e9:71:c4:
         4d:ab:d7:a7:b2:e3:d8:5c:77:74:70:7c:8b:84:5b:83:dd:bb:
         b8:dc:e9:20:e0:b5:f0:7e:14:5c:fc:ee:54:db:fc:cd:c8:da:
         25:8e:5b:52:d4:d1:da:fd:51:37:b8:c3:e1:dd:9d:e6:72:fa:
         db:7f:86:71:54:7c:84:1b:87:18:07:46:04:d2:c1:f3:33:b1:
         c9:8c:01:48:e2:d7:e2:bd:7e:39:39:58:a8:2f:5f:9b:fd:75:
         ae:42:a5:d1:4d:0c:30:fb:34:5f:f8:ce:23:cb:1b:49:85:2c:
         37:8a:7d:c8:d8:f9:a2:29:c9:c7:51:03:42:e4:66:38:f8:9e:
         ec:2a:9d:d6:83:07:6a:fd:50:28:16:8d:77:42:c1:5e:ff:e3:
         d3:f7:ca:42:6a:0d:7a:c9:b4:31:9c:96:95:32:e1:6d:ae:eb:
         1f:29:78:51:05:a7:f2:1b:e5:34:26:31:6a:e2:3a:24:8a:7f:
         8d:5c:e1:13:48:5c:29:7a:80:4a:1a:37:19:e9:1c:1b:b3:85:
         f9:bb:14:9a:e3:ed:2c:fe:fe:43:e6:ee:f9:db:a5:46:4a:e8:
         29:32:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----