Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a613863303a3a2f33322d3438203d3e20313339393436.roa
File:                     323430353a613863303a3a2f33322d3438203d3e20313339393436.roa (raw, json)
Hash identifier:          5n9/On5Z8s8Lhm/gt/7tr0gMQbzWSAnigq+84b/EqkU=
Subject key identifier:   5A:03:56:A3:22:B2:77:1A:F8:9D:32:F7:3C:E0:24:66:5B:F2:EC:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4AED5D48C27D8541FE50A3BD6CDEDE2DE2FB1E4B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a613863303a3a2f33322d3438203d3e20313339393436.roa
Signing time:             Mon 17 May 2021 07:33:02 +0000
ROA not before:           Mon 17 May 2021 07:28:02 +0000
ROA not after:            Tue 17 May 2022 07:33:02 +0000
asID:                     139946
IP address blocks:        2405:a8c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ed:5d:48:c2:7d:85:41:fe:50:a3:bd:6c:de:de:2d:e2:fb:1e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 17 07:28:02 2021 GMT
            Not After : May 17 07:33:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:b5:5b:35:7b:b0:50:f2:af:a9:8e:56:dd:
                    56:f8:c2:ca:9c:4b:f7:53:04:69:9a:63:37:df:93:
                    fb:05:4f:4c:61:ec:13:10:e8:5c:62:1c:3c:f1:52:
                    a4:dc:8e:77:a1:10:04:da:2e:47:27:b0:63:4a:08:
                    6b:24:e5:a4:1d:f4:78:42:6e:ce:d1:3c:28:f8:27:
                    57:d8:1e:48:ee:80:8e:3f:7b:b9:95:25:f1:94:d9:
                    a6:ce:f3:31:87:93:96:cc:31:92:85:ba:71:86:0b:
                    cb:19:e3:c1:3d:b1:c4:b4:2a:97:51:61:42:46:21:
                    e4:86:55:69:c0:8e:a1:6e:1b:af:9f:06:1d:ee:2b:
                    46:8d:80:a3:54:0d:c9:35:be:05:f9:62:26:87:01:
                    39:a0:92:50:2f:0c:7f:a6:b7:ad:3d:fe:6b:98:4a:
                    cc:92:af:8f:e7:5f:0e:1a:88:60:fd:83:97:62:b4:
                    a6:a3:a9:f5:6d:cf:97:15:31:41:dd:b9:99:d2:7c:
                    fc:02:82:25:1a:5e:25:a5:33:3a:48:a9:c5:5f:0d:
                    68:68:50:42:b1:8f:05:37:a2:8b:8c:cb:11:b2:62:
                    eb:92:82:70:4e:eb:b5:bc:de:60:84:a8:e2:ca:4f:
                    25:2f:43:f9:78:dc:af:af:71:8f:81:51:72:5f:21:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:56:A3:22:B2:77:1A:F8:9D:32:F7:3C:E0:24:66:5B:F2:EC:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a613863303a3a2f33322d3438203d3e20313339393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:b8:78:64:f4:f6:29:49:f8:db:9e:af:64:fe:24:fd:8d:
         b0:e6:4f:1f:af:ff:4a:3e:4d:4a:64:05:90:24:68:14:64:f9:
         b3:13:64:e9:4b:e2:b8:d6:62:bb:2c:00:2c:81:11:75:9f:bc:
         b5:14:4d:d2:99:0b:51:c1:ae:99:8d:8f:f7:62:78:9f:da:e9:
         01:7c:e0:2f:18:79:45:44:bf:b4:3d:62:8b:5d:60:5c:44:59:
         ac:74:24:16:24:c9:22:15:5d:18:fd:3a:86:38:8c:e8:21:23:
         b9:5e:ea:ac:ff:e3:00:f4:8b:2a:43:a1:08:15:55:bf:72:22:
         36:6f:01:91:85:44:c8:79:f6:fc:04:d4:c3:72:8c:45:0b:54:
         a1:a9:01:12:f8:9f:f8:44:98:9f:a7:fb:67:85:33:79:71:c5:
         99:66:83:92:91:95:c4:52:c7:24:25:84:13:28:54:3e:77:6e:
         fb:ff:9a:44:27:4a:c9:21:5e:7a:23:0f:8b:af:5e:61:7c:b8:
         a5:dd:5b:8c:b9:cc:ab:d4:c3:1b:11:cb:cb:b1:ad:7d:ef:0d:
         c4:1b:ef:e7:e9:b3:6a:89:cd:e2:58:f2:53:ec:44:de:31:2d:
         1a:12:a8:de:76:0e:cd:9b:54:b5:7a:56:fa:7d:1b:92:eb:3e:
         b7:3f:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----