Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a656630303a3a2f33322d3438203d3e203633353135.roa
File:                     323430343a656630303a3a2f33322d3438203d3e203633353135.roa (raw, json)
Hash identifier:          NfIRVaR10lgd5tSqdVSQrFzkOcPjCZzwkS8Nrn8OIik=
Subject key identifier:   46:81:32:80:56:62:C2:A8:BE:C0:35:3C:D9:F9:2F:34:BE:06:B0:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4139D12343303B38B4CD71E2BA4401F98FE82839
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a656630303a3a2f33322d3438203d3e203633353135.roa
Signing time:             Mon 11 Oct 2021 02:03:45 +0000
ROA not before:           Mon 11 Oct 2021 01:58:45 +0000
ROA not after:            Tue 11 Oct 2022 02:03:45 +0000
asID:                     63515
IP address blocks:        2404:ef00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:d1:23:43:30:3b:38:b4:cd:71:e2:ba:44:01:f9:8f:e8:28:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 11 01:58:45 2021 GMT
            Not After : Oct 11 02:03:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:c6:0d:d7:42:b2:9e:02:f2:b5:02:d7:cd:
                    21:56:a7:a2:5e:86:cb:d0:04:16:14:94:34:7c:a0:
                    d7:d5:c1:82:71:f2:06:30:60:3b:1e:f8:b5:e4:0c:
                    20:26:e3:e3:70:ad:68:07:11:70:7e:a9:a3:d8:65:
                    f3:35:c5:ea:d9:3e:f1:91:ca:18:d0:14:f4:73:29:
                    ed:71:52:07:ee:2d:70:15:13:9c:50:76:76:f7:6d:
                    22:de:21:6b:8a:63:29:b3:ad:15:0e:cf:74:95:fc:
                    5e:84:5a:10:7c:24:c8:51:77:6a:82:f0:cf:5d:6c:
                    0a:17:bf:e5:3f:a4:ec:07:e4:de:5d:50:cc:e4:e1:
                    fa:af:93:00:dc:2b:6f:54:4b:4b:1f:2f:4c:7e:1a:
                    71:b7:21:77:d0:5f:da:23:bd:f9:da:53:2e:ac:af:
                    bb:d5:2d:95:84:eb:37:bf:c1:b5:b0:ad:4c:9a:ec:
                    95:f3:89:8b:f0:ff:32:81:29:c2:4a:c2:e2:76:74:
                    d0:f5:fd:1b:8f:93:4e:41:85:15:b1:df:c0:0f:ed:
                    39:a0:2b:f4:6e:d9:68:5a:11:f4:02:09:6e:dc:50:
                    68:ad:b3:4d:f3:0e:db:f4:c7:85:8f:05:8f:b2:cc:
                    27:ad:59:e6:be:f8:d5:e4:c6:92:4d:e1:19:0a:64:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:81:32:80:56:62:C2:A8:BE:C0:35:3C:D9:F9:2F:34:BE:06:B0:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a656630303a3a2f33322d3438203d3e203633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ef00::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:f3:c0:79:6c:92:bd:1d:28:72:96:d9:b9:72:23:d2:a0:
         28:5a:a9:7d:53:27:4e:c2:b5:4f:61:f2:49:95:04:8a:38:82:
         dc:64:5c:31:ea:73:a3:3d:cc:44:60:ec:f7:b0:01:6b:20:12:
         68:33:7c:70:28:70:95:29:ef:ce:30:10:a6:51:b6:aa:6b:ca:
         f1:2d:e2:f1:e9:ea:84:4a:b7:a0:c5:34:5e:b1:d3:53:5c:86:
         3b:27:65:3e:87:c7:3e:12:e0:80:ab:14:1c:91:7b:81:01:b3:
         22:9c:53:d9:43:53:b3:7a:f9:14:38:b3:ca:ef:de:0a:5b:e1:
         48:25:f8:ee:7a:2d:c1:ad:a9:dd:90:74:5a:0d:2a:6f:1a:0a:
         5b:e5:df:05:67:c4:f8:57:fd:b3:a2:44:27:d4:b4:00:75:ea:
         11:97:0a:d7:49:60:5d:dc:57:47:a2:90:91:73:13:1d:69:81:
         c8:84:ce:2d:16:12:78:23:eb:35:78:21:8a:fd:32:5b:75:99:
         a7:51:1b:fe:4b:30:b0:2b:2e:5d:4b:03:4c:bf:90:74:2e:d3:
         00:8d:ef:0d:ff:31:03:16:bd:f2:62:b8:f1:aa:c9:10:f0:34:
         38:26:c8:60:0f:95:93:3d:11:67:bf:96:0e:0b:75:18:26:27:
         a4:32:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----