Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393434303a3a2f33322d3438203d3e2030.roa
File:                     323430353a393434303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          JHDmrJJ8GD47wmXF7h/SLVcQWiBwX4vnCVt6E8yh6t0=
Subject key identifier:   DA:6D:E9:88:F8:D5:B0:62:91:0A:1C:90:42:EC:7A:9B:0C:A4:35:A6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       314DC89CC8428D5E6A37F9F6F99760338F682C7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393434303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:19:21 +0000
ROA not before:           Wed 02 Feb 2022 06:14:21 +0000
ROA not after:            Thu 02 Feb 2023 06:19:21 +0000
asID:                     0
IP address blocks:        2405:9440::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4d:c8:9c:c8:42:8d:5e:6a:37:f9:f6:f9:97:60:33:8f:68:2c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:14:21 2022 GMT
            Not After : Feb  2 06:19:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:f7:fb:00:49:93:1f:49:86:f7:fb:bb:df:
                    4e:79:39:fa:8e:65:82:1d:31:be:4d:b3:9a:19:11:
                    ef:c2:98:8b:72:78:1f:19:5e:76:d5:38:c8:56:bf:
                    5d:02:c2:64:e6:ac:b9:79:f0:e0:34:74:8c:de:11:
                    dc:0b:7d:b8:c5:8a:54:55:71:9b:61:7c:74:0a:00:
                    b9:54:7e:15:1b:d7:85:a2:36:e7:ad:97:47:c6:98:
                    98:a7:e8:5a:bb:93:89:90:7c:8f:33:28:53:3d:9e:
                    8d:87:f2:7b:bf:68:29:bc:4c:c5:2f:e4:5f:2c:0c:
                    92:43:e2:d1:25:e7:c0:2f:e7:52:88:b4:e7:9d:a6:
                    08:17:63:c3:2e:1d:ee:13:8c:77:94:e4:3c:44:85:
                    50:d6:ba:b8:cc:da:45:3b:b5:e2:a4:ca:92:75:02:
                    3c:af:c5:3a:87:84:6b:fd:af:98:e2:5f:d0:8f:ff:
                    69:81:6c:7a:49:0e:d2:c9:1c:9e:66:07:cf:3b:d0:
                    7b:e7:bf:00:85:d4:95:ae:19:d1:3c:ee:58:ae:86:
                    d7:2b:fc:9f:72:a6:a6:9a:85:39:22:e8:0c:ac:6e:
                    6d:cc:5b:2f:ec:f9:9e:56:3d:7e:a3:e2:cc:a7:e4:
                    a9:6e:ca:ba:e0:92:b3:8d:79:ad:21:d5:e6:2a:45:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:E9:88:F8:D5:B0:62:91:0A:1C:90:42:EC:7A:9B:0C:A4:35:A6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393434303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9440::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:f4:48:79:a2:88:77:17:c0:f5:d5:22:6e:3d:5b:6e:8b:
         bc:86:45:ed:10:2a:2b:f3:e9:b3:09:89:15:d7:af:3b:9f:4d:
         05:f3:2b:36:18:11:24:b5:da:40:57:31:36:06:c6:c0:56:37:
         79:bf:da:ba:17:46:5e:9b:7c:a7:44:6c:c7:56:c3:bb:a5:25:
         33:af:2f:58:2d:bc:54:81:2a:dd:8e:5e:0e:ff:b5:46:fa:74:
         1d:f7:06:5f:5d:da:28:65:cc:8d:86:75:36:b6:52:b7:14:0d:
         34:7d:f6:01:42:e1:98:86:65:bf:67:15:e5:2e:bb:ef:02:c5:
         2d:ec:f0:65:00:0d:2f:22:bc:71:51:64:1c:95:f1:9f:2c:6c:
         e0:a0:2d:12:88:03:0d:f3:38:31:50:51:16:66:13:6d:5f:8d:
         cc:38:f5:4b:15:2f:2a:2b:d4:98:0a:98:31:ae:4b:72:af:98:
         f7:22:6c:6a:14:40:82:81:3a:dc:be:9b:df:14:72:ae:98:8c:
         36:ca:9e:94:cf:05:23:36:f0:c1:d4:6d:3a:ac:95:48:ee:46:
         9c:5b:9c:d4:47:66:43:49:b4:f0:f3:e5:ba:99:f2:a0:14:c8:
         5c:a7:23:6e:01:be:02:52:01:fd:5f:a2:73:26:b7:07:81:33:
         e2:d9:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----