Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a623230303a3a2f33322d3438203d3e2039333236.roa
File:                     323430363a623230303a3a2f33322d3438203d3e2039333236.roa (raw, json)
Hash identifier:          hdglHsn3FIzbQ99afX4CObNNGkFvyn3PRyZNlATRJwE=
Subject key identifier:   05:73:14:3B:03:5C:BE:A1:99:18:0A:50:7A:8A:A7:42:29:BA:DC:70
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       62677B6E736963FB00AEAB5E75D793157E3FB4B9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a623230303a3a2f33322d3438203d3e2039333236.roa
Signing time:             Wed 28 Apr 2021 03:07:12 +0000
ROA not before:           Wed 28 Apr 2021 03:02:12 +0000
ROA not after:            Thu 28 Apr 2022 03:07:12 +0000
asID:                     9326
IP address blocks:        2406:b200::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:67:7b:6e:73:69:63:fb:00:ae:ab:5e:75:d7:93:15:7e:3f:b4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 03:02:12 2021 GMT
            Not After : Apr 28 03:07:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:8d:1b:a6:fc:73:c0:f0:3a:af:f1:42:d3:
                    34:78:3e:70:86:7e:d8:6c:0e:b0:e4:7d:b0:06:4c:
                    a4:23:cd:b3:1f:c7:52:75:94:62:dc:ef:32:4b:e0:
                    9b:99:e7:e6:e9:e2:b6:18:12:97:c3:7d:b0:c6:5e:
                    bb:ab:8a:d4:7c:27:15:68:d0:f2:d3:3c:01:57:54:
                    bb:3a:ba:11:2c:ed:37:c8:37:14:7c:da:93:03:19:
                    6a:54:eb:d6:b8:87:87:97:06:8e:e7:69:91:04:a6:
                    48:24:5d:e3:68:b1:92:d1:73:3f:5b:06:8b:b6:a3:
                    c4:5b:af:be:a0:4a:b9:1d:d7:5f:10:04:ad:1e:28:
                    98:de:cd:5a:6f:dd:37:d0:14:9a:d3:e3:99:ee:58:
                    51:b0:e5:4e:9c:57:7d:b2:0d:3d:64:d1:c5:ea:3b:
                    65:a9:08:94:6a:2a:ba:86:48:cd:ce:df:f6:ff:e1:
                    7e:b6:37:50:f4:45:8d:14:e0:0d:eb:92:bc:bb:61:
                    97:7f:a2:ef:03:b6:1d:43:61:6a:7f:99:08:9d:60:
                    c2:f7:5b:53:08:34:db:f3:71:3e:e2:13:d5:c9:17:
                    45:f1:16:23:e2:00:11:aa:09:80:62:27:52:23:40:
                    b9:ec:85:6a:44:d8:3d:a9:5e:df:da:88:d5:d6:a9:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:14:3B:03:5C:BE:A1:99:18:0A:50:7A:8A:A7:42:29:BA:DC:70
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a623230303a3a2f33322d3438203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:59:ef:c0:ab:61:bc:18:2c:58:fc:26:0d:0d:e3:41:b4:
         d9:79:4b:e9:67:c2:11:8c:4d:fe:43:35:25:94:bb:36:d3:bc:
         2f:78:f8:e6:7b:2d:ca:8c:7c:73:f0:01:93:ff:b0:78:41:65:
         86:ed:9f:1d:45:63:79:f0:9c:fb:18:62:e2:17:90:96:04:45:
         f0:3f:d5:3d:82:ab:85:c9:d1:07:41:ce:47:92:44:e3:a3:82:
         65:cc:42:6c:87:a8:73:36:b1:4e:3b:ea:15:cc:73:ac:64:eb:
         71:63:42:e9:df:b6:4c:2a:6b:b5:ad:ad:b7:3f:b5:aa:a5:60:
         f7:c0:07:e1:55:c3:be:44:7b:cc:58:cb:99:89:05:1b:f5:ee:
         b8:03:91:86:e3:f4:08:d2:02:60:9e:80:8d:47:77:56:4a:c5:
         14:6c:00:99:a1:6c:ba:22:62:f7:79:d0:6d:8d:6c:41:7e:64:
         d0:5d:bf:97:d0:0e:f3:d7:f4:88:e0:94:19:5c:bb:8b:24:2b:
         93:55:2b:ca:7d:3d:48:3a:48:74:75:80:78:86:1e:74:86:8f:
         5f:25:bd:9d:85:72:d4:91:3c:35:c4:c5:07:0c:29:b1:0c:d9:
         7b:58:94:1d:ce:29:47:fd:5c:6e:49:10:73:5e:6e:7b:81:a2:
         10:4d:02:0b
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUYmd7bnNpY/sArqteddeTFX4/tLkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDQyODAzMDIxMloX
DTIyMDQyODAzMDcxMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCMjBBOEQxQkE2RkM3M0MwRjAzQUFGRjE0MkQzMzQ3ODNFNzA4NjdFRDg2
QzBFQjBFNDdEQjAwNjRDQTQyM0NEQjMxRkM3NTI3NTk0NjJEQ0VGMzI0QkUwOUI5
OUU3RTZFOUUyQjYxODEyOTdDMzdEQjBDNjVFQkJBQjhBRDQ3QzI3MTU2OEQwRjJE
MzNDMDE1NzU0QkIzQUJBMTEyQ0VEMzdDODM3MTQ3Q0RBOTMwMzE5NkE1NEVCRDZC
ODg3ODc5NzA2OEVFNzY5OTEwNEE2NDgyNDVERTM2OEIxOTJEMTczM0Y1QjA2OEJC
NkEzQzQ1QkFGQkVBMDRBQjkxREQ3NUYxMDA0QUQxRTI4OThERUNENUE2RkREMzdE
MDE0OUFEM0UzOTlFRTU4NTFCMEU1NEU5QzU3N0RCMjBEM0Q2NEQxQzVFQTNCNjVB
OTA4OTQ2QTJBQkE4NjQ4Q0RDRURGRjZGRkUxN0VCNjM3NTBGNDQ1OEQxNEUwMERF
QjkyQkNCQjYxOTc3RkEyRUYwM0I2MUQ0MzYxNkE3Rjk5MDg5RDYwQzJGNzVCNTMw
ODM0REJGMzcxM0VFMjEzRDVDOTE3NDVGMTE2MjNFMjAwMTFBQTA5ODA2MjI3NTIy
MzQwQjlFQzg1NkE0NEQ4M0RBOTVFREZEQTg4RDVENkE5QkQ4NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCo0bpvxzwPA6r/FC0zR4
PnCGfthsDrDkfbAGTKQjzbMfx1J1lGLc7zJL4JuZ5+bp4rYYEpfDfbDGXruritR8
JxVo0PLTPAFXVLs6uhEs7TfINxR82pMDGWpU69a4h4eXBo7naZEEpkgkXeNosZLR
cz9bBou2o8Rbr76gSrkd118QBK0eKJjezVpv3TfQFJrT45nuWFGw5U6cV32yDT1k
0cXqO2WpCJRqKrqGSM3O3/b/4X62N1D0RY0U4A3rkry7YZd/ou8Dth1DYWp/mQid
YML3W1MINNvzcT7iE9XJF0XxFiPiABGqCYBiJ1IjQLnshWpE2D2pXt/aiNXWqb2F
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUBXMUOwNcvqGZGApQeoqnQim63HAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzIzNDMwMzYzYTYyMzIzMDMwM2EzYTJmMzMzMjJk
MzQzODIwM2QzZTIwMzkzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBrIAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqeVnvwKthvBgsWPwmDQ3jQbTZeUvpZ8IRjE3+QzUllLs207wvePjm
ey3KjHxz8AGT/7B4QWWG7Z8dRWN58Jz7GGLiF5CWBEXwP9U9gquFydEHQc5HkkTj
o4JlzEJsh6hzNrFOO+oVzHOsZOtxY0Lp37ZMKmu1ra23P7WqpWD3wAfhVcO+RHvM
WMuZiQUb9e64A5GG4/QI0gJgnoCNR3dWSsUUbACZoWy6ImL3edBtjWxBfmTQXb+X
0A7z1/SI4JQZXLuLJCuTVSvKfT1IOkh0dYB4hh50ho9fJb2dhXLUkTw1xMUHDCmx
DNl7WJQdzilH/VxuSRBzXm57gaIQTQIL
-----END CERTIFICATE-----