Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663934303a3a2f33322d3438203d3e20313431353936.roa
File:                     323430363a663934303a3a2f33322d3438203d3e20313431353936.roa (raw, json)
Hash identifier:          ByY1lKt/Nusl0oUszpjlYSH5E9wd609LYlw3X+Cajbs=
Subject key identifier:   B4:AF:AF:A1:38:5A:89:D9:E9:E3:F1:D3:9C:DE:85:3C:FF:6D:2F:0F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C85BE65F84B14C0CFC6F54D9F3EB02DD8A9DF31
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663934303a3a2f33322d3438203d3e20313431353936.roa
Signing time:             Fri 31 Dec 2021 08:00:00 +0000
ROA not before:           Fri 31 Dec 2021 07:55:00 +0000
ROA not after:            Sat 31 Dec 2022 08:00:00 +0000
asID:                     141596
IP address blocks:        2406:f940::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:85:be:65:f8:4b:14:c0:cf:c6:f5:4d:9f:3e:b0:2d:d8:a9:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 31 07:55:00 2021 GMT
            Not After : Dec 31 08:00:00 2022 GMT
        Subject: CN=3082010A02820101009E23A50ED8406372CA9CEEB46DD9E7A494CCE33B220A8C9332E214EC353AAA0FF17BB2DCBA6A19C2C8FFDB3AC8C592337711F9B3B65C579D719A8A991493B2DC20CDEE356A84EE4E9BC0DD86E8D4A7E07C56147C1793D7B7FC92EFFB36D260568E3964D11FE811B3CE113F024A3D952857884F0E29D7FA51787736356D7550C7CBF2EE9FA9AF3E9DF1829BEF2DCD2C8246D5EF0B6965A919B28A5B00C1F3CA4BC411B7044E6FEBFA2DD5CCEB94F6EDF4B2E077FADC0642001ED87EBC138163976DE780733C3DCAA592BFFDBE32DA715E98E028570B1D3587A1C9F81D2C6F2D3AB25E5585FAE07540504878DCC3B2E578D78ABC59142EF7A67E97B2A15E803C530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:a5:0e:d8:40:63:72:ca:9c:ee:b4:6d:d9:
                    e7:a4:94:cc:e3:3b:22:0a:8c:93:32:e2:14:ec:35:
                    3a:aa:0f:f1:7b:b2:dc:ba:6a:19:c2:c8:ff:db:3a:
                    c8:c5:92:33:77:11:f9:b3:b6:5c:57:9d:71:9a:8a:
                    99:14:93:b2:dc:20:cd:ee:35:6a:84:ee:4e:9b:c0:
                    dd:86:e8:d4:a7:e0:7c:56:14:7c:17:93:d7:b7:fc:
                    92:ef:fb:36:d2:60:56:8e:39:64:d1:1f:e8:11:b3:
                    ce:11:3f:02:4a:3d:95:28:57:88:4f:0e:29:d7:fa:
                    51:78:77:36:35:6d:75:50:c7:cb:f2:ee:9f:a9:af:
                    3e:9d:f1:82:9b:ef:2d:cd:2c:82:46:d5:ef:0b:69:
                    65:a9:19:b2:8a:5b:00:c1:f3:ca:4b:c4:11:b7:04:
                    4e:6f:eb:fa:2d:d5:cc:eb:94:f6:ed:f4:b2:e0:77:
                    fa:dc:06:42:00:1e:d8:7e:bc:13:81:63:97:6d:e7:
                    80:73:3c:3d:ca:a5:92:bf:fd:be:32:da:71:5e:98:
                    e0:28:57:0b:1d:35:87:a1:c9:f8:1d:2c:6f:2d:3a:
                    b2:5e:55:85:fa:e0:75:40:50:48:78:dc:c3:b2:e5:
                    78:d7:8a:bc:59:14:2e:f7:a6:7e:97:b2:a1:5e:80:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:AF:A1:38:5A:89:D9:E9:E3:F1:D3:9C:DE:85:3C:FF:6D:2F:0F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663934303a3a2f33322d3438203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f940::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:22:1f:c7:ff:31:4c:f4:3e:27:42:23:95:62:e7:fd:60:05:
         7c:dd:dc:da:a1:b7:14:50:e1:51:ce:df:e7:68:34:72:1e:2b:
         21:65:56:d4:24:c3:51:f2:b7:e6:25:aa:39:ca:f9:fb:44:2f:
         33:07:fb:6a:bd:3f:97:4f:6b:21:eb:dd:46:00:6f:0e:c2:a7:
         dd:b1:40:c6:7a:5f:26:56:0c:86:55:12:eb:5a:3e:b7:bf:16:
         87:24:5b:36:9f:49:4f:fa:2e:e7:d6:03:7f:9d:e6:55:ce:4c:
         b4:cf:c8:59:e3:0b:21:01:9a:0e:1d:42:50:92:30:14:42:7b:
         80:f0:8c:e4:79:16:86:aa:06:de:66:cf:74:97:79:ba:61:e8:
         55:d6:75:4d:be:ba:3e:d9:bd:fb:2c:0c:c0:e1:2f:1c:63:bc:
         3f:2f:56:59:9b:49:03:2c:3c:e6:e0:c2:e9:cd:db:d0:16:0d:
         89:8e:4a:45:39:8c:ce:7e:d0:af:b9:57:b5:1b:20:c4:cf:67:
         ff:1d:53:38:93:3a:aa:6a:2b:b4:75:bc:db:a1:4b:a0:29:59:
         34:af:cb:23:d7:d5:3e:75:e0:8a:3a:40:b7:fa:5d:44:a4:19:
         91:16:7e:96:cf:0c:80:50:0f:a8:c5:7b:40:18:8d:82:9f:3f:
         08:13:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----