Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a366363303a3a2f33322d3438203d3e203633353135.roa
File:                     323430363a366363303a3a2f33322d3438203d3e203633353135.roa (raw, json)
Hash identifier:          ZEEt26xJyq9NmeNWFiXMjBJxm/BioxsVKIJUqs33NnI=
Subject key identifier:   FC:04:6E:38:C0:C0:D8:02:61:01:25:85:50:A4:F1:5C:14:02:60:F6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E2DC4371E7D0069120E25390CEF19B1AABCEBFA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a366363303a3a2f33322d3438203d3e203633353135.roa
Signing time:             Mon 11 Oct 2021 02:20:04 +0000
ROA not before:           Mon 11 Oct 2021 02:15:04 +0000
ROA not after:            Tue 11 Oct 2022 02:20:04 +0000
asID:                     63515
IP address blocks:        2406:6cc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2d:c4:37:1e:7d:00:69:12:0e:25:39:0c:ef:19:b1:aa:bc:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 11 02:15:04 2021 GMT
            Not After : Oct 11 02:20:04 2022 GMT
        Subject: CN=3082010A0282010100D31B95A0899A70251754D08745B19D21787E5195A4F04D9C9C135A1F774A68A55E9EE5CCAF9EE8A0964971999E0A5C7879636144FBA2C3E555F4CD993403835D7BE7F464E52BD87543F64941319CAC350ADDE107EEF70B86ED166543CFB2A1599FC9E1CEB5BFD3020090735B66AC9BDDF8FE335A04C2D745480B2A289F3503EE83B4EC1970D153765277C1B871A4924494261515A5F92A261DA5C4227060B7991CB01E29B87770B8FEC0DF8A7FB956E12D27E5B886152C2FEF3DE824675614C305CC9EDAF1DC8E435ECD910F2090D36D76ACEA8B69CF440F7E7718BBB8C9D8D3756CAA9C82B619DC333E6640CB486E745D08087399366583D1F2497F52CF5E0F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:95:a0:89:9a:70:25:17:54:d0:87:45:b1:
                    9d:21:78:7e:51:95:a4:f0:4d:9c:9c:13:5a:1f:77:
                    4a:68:a5:5e:9e:e5:cc:af:9e:e8:a0:96:49:71:99:
                    9e:0a:5c:78:79:63:61:44:fb:a2:c3:e5:55:f4:cd:
                    99:34:03:83:5d:7b:e7:f4:64:e5:2b:d8:75:43:f6:
                    49:41:31:9c:ac:35:0a:dd:e1:07:ee:f7:0b:86:ed:
                    16:65:43:cf:b2:a1:59:9f:c9:e1:ce:b5:bf:d3:02:
                    00:90:73:5b:66:ac:9b:dd:f8:fe:33:5a:04:c2:d7:
                    45:48:0b:2a:28:9f:35:03:ee:83:b4:ec:19:70:d1:
                    53:76:52:77:c1:b8:71:a4:92:44:94:26:15:15:a5:
                    f9:2a:26:1d:a5:c4:22:70:60:b7:99:1c:b0:1e:29:
                    b8:77:70:b8:fe:c0:df:8a:7f:b9:56:e1:2d:27:e5:
                    b8:86:15:2c:2f:ef:3d:e8:24:67:56:14:c3:05:cc:
                    9e:da:f1:dc:8e:43:5e:cd:91:0f:20:90:d3:6d:76:
                    ac:ea:8b:69:cf:44:0f:7e:77:18:bb:b8:c9:d8:d3:
                    75:6c:aa:9c:82:b6:19:dc:33:3e:66:40:cb:48:6e:
                    74:5d:08:08:73:99:36:65:83:d1:f2:49:7f:52:cf:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:6E:38:C0:C0:D8:02:61:01:25:85:50:A4:F1:5C:14:02:60:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a366363303a3a2f33322d3438203d3e203633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:58:38:3a:7d:79:fb:2f:55:a3:c5:a3:a9:53:51:fd:fd:b2:
         1d:8b:a3:96:4b:62:ab:6d:d9:a8:a2:58:25:75:b8:d5:ba:2c:
         a3:47:8b:9f:fd:cd:44:de:3a:95:6b:c4:13:d4:16:17:d3:df:
         43:8b:57:2c:7d:f3:b3:22:27:ce:33:9c:62:84:e1:fb:0b:4d:
         09:08:13:c4:5f:3a:80:00:55:4e:28:fd:67:63:b0:99:06:da:
         00:8c:6e:aa:60:e6:00:50:16:ed:af:52:9e:d0:0c:39:45:74:
         09:82:35:00:ac:45:b9:c5:0f:51:3d:43:d5:54:9e:07:0b:35:
         4f:2a:d4:86:ed:c7:23:59:19:2b:d7:a2:3f:43:4d:be:a6:fa:
         01:7a:7f:e2:af:fd:3a:e6:49:da:ce:3e:ad:05:0f:8b:3b:51:
         d9:ca:88:f1:ea:61:4f:72:30:48:52:19:74:f3:45:14:e8:4a:
         84:08:b9:93:fa:4b:20:f4:1a:fe:ac:34:60:1e:67:01:3b:df:
         c3:ec:af:33:eb:cb:18:4f:ae:aa:30:99:6b:19:bc:ff:1b:7c:
         ab:2c:66:0c:6c:39:12:e2:ae:b4:44:80:3b:28:d4:79:79:f2:
         d9:1a:87:3c:ba:c8:2c:65:5a:5b:1a:12:cf:79:0e:1f:c6:b0:
         de:be:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----