Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393934303a3a2f33322d3438203d3e203436303434.roa
File:                     323430353a393934303a3a2f33322d3438203d3e203436303434.roa (raw, json)
Hash identifier:          WDrnY89sV8Jl0QVTg1zcuWAKUSPXIOIAwI4UE9b9YAA=
Subject key identifier:   7B:5A:14:0D:59:D2:ED:4A:EE:9B:3B:89:0B:54:84:84:D1:2F:A9:1F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C4C3B58452A0DB988B67309571252381978D72A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393934303a3a2f33322d3438203d3e203436303434.roa
Signing time:             Mon 22 Nov 2021 04:00:02 +0000
ROA not before:           Mon 22 Nov 2021 03:55:02 +0000
ROA not after:            Tue 22 Nov 2022 04:00:02 +0000
asID:                     46044
IP address blocks:        2405:9940::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:3b:58:45:2a:0d:b9:88:b6:73:09:57:12:52:38:19:78:d7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 22 03:55:02 2021 GMT
            Not After : Nov 22 04:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:cd:a0:8d:6e:81:eb:74:e0:71:00:5e:e2:
                    f7:54:ec:e6:03:a1:81:2e:f0:66:8f:53:ed:fc:f8:
                    7c:9d:d6:6b:25:5b:4a:a5:e6:c6:e5:5c:58:c0:9e:
                    9f:27:ea:0c:02:2b:51:4d:83:b7:20:4a:5d:db:ce:
                    0a:0c:9e:4d:0e:de:12:44:d1:e1:f0:08:a7:16:a1:
                    4f:77:d1:1b:90:ba:f3:a9:d2:ae:a2:0b:82:97:6f:
                    94:2d:4f:12:d0:f8:86:9a:ba:f4:0f:b4:5e:ac:68:
                    ac:c1:4b:1c:d0:4a:a0:4f:cd:4a:42:66:92:c6:3c:
                    79:61:85:46:24:3c:3f:09:8a:8f:32:c3:da:0d:cc:
                    30:6f:53:7e:22:3c:f1:38:10:40:be:97:99:6f:da:
                    40:46:ec:ab:d3:07:30:33:1f:a6:c1:a9:5d:ad:d7:
                    23:28:21:00:18:44:f7:69:06:c0:96:1e:df:66:6f:
                    21:45:a1:e3:19:0c:b9:a2:7a:97:89:61:0f:83:f0:
                    1a:61:74:11:8c:82:ca:27:6c:94:61:4f:ce:d5:69:
                    db:11:9f:70:8e:23:65:5b:5a:25:18:3f:d1:3b:15:
                    51:2f:63:bf:a3:3d:df:25:a3:b8:84:2f:d3:38:9e:
                    3b:bb:bd:15:9b:d2:57:99:f5:a8:2a:a3:5c:28:c0:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:14:0D:59:D2:ED:4A:EE:9B:3B:89:0B:54:84:84:D1:2F:A9:1F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a393934303a3a2f33322d3438203d3e203436303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9940::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:fa:d0:9d:26:5c:21:4e:0a:19:d3:3e:95:de:5e:d2:d1:
         91:1a:63:31:ef:8e:d2:7e:b2:84:fb:13:7f:17:b0:a1:60:4c:
         cd:20:79:a0:77:49:ed:08:0d:e9:21:31:6b:32:5e:fb:ab:3f:
         11:dc:06:62:4f:8d:4d:71:cd:ad:c3:a8:77:fd:42:b7:47:8d:
         2c:e2:61:22:76:47:40:a9:0e:07:5f:20:6d:d3:9d:da:1f:45:
         44:a3:e5:59:72:cc:70:6c:d8:f0:ec:65:52:95:0a:91:30:2a:
         e6:af:00:40:1d:a9:39:22:c6:79:63:e8:25:34:bd:bd:86:dd:
         5a:d5:05:5b:15:21:fb:9b:b2:86:6c:d6:46:a3:f0:29:8f:f1:
         1d:76:88:03:6a:49:41:9b:88:c2:01:fc:8c:61:a1:00:84:02:
         11:1b:a9:8f:a4:61:72:7e:19:87:62:f3:fa:6f:a7:12:94:ae:
         f1:f3:d2:22:52:38:83:b2:75:32:42:10:16:14:bb:82:f9:03:
         c8:27:8b:cf:a2:5a:e9:6c:68:32:b4:4a:90:f6:a0:8f:da:a1:
         36:e4:92:9a:a8:de:b5:4a:dc:6c:3a:c3:6e:93:9c:09:51:ae:
         4e:87:bc:88:90:73:f1:25:c2:45:00:be:9d:a5:89:39:33:c1:
         26:1b:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----