Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a353563303a3a2f33322d3438203d3e203137353338.roa
File:                     323430373a353563303a3a2f33322d3438203d3e203137353338.roa (raw, json)
Hash identifier:          OIF1OL/sC3gmsF2LRDO0mktRg4xJvm1dBaopciXaFF8=
Subject key identifier:   DB:84:F9:5A:2B:87:ED:18:E4:79:55:D0:1B:25:8E:68:B0:E8:0E:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       36B70769AF86F402E740E5C5F2EF8D481A61F451
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a353563303a3a2f33322d3438203d3e203137353338.roa
Signing time:             Wed 21 Apr 2021 04:32:14 +0000
ROA not before:           Wed 21 Apr 2021 04:27:14 +0000
ROA not after:            Thu 21 Apr 2022 04:32:14 +0000
asID:                     17538
IP address blocks:        2407:55c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b7:07:69:af:86:f4:02:e7:40:e5:c5:f2:ef:8d:48:1a:61:f4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 21 04:27:14 2021 GMT
            Not After : Apr 21 04:32:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:42:8b:f3:ef:40:60:e3:11:40:c0:c7:b4:
                    58:46:89:4e:03:cd:2e:ea:e3:03:f4:dd:1d:2c:a6:
                    f2:dd:62:d2:a3:89:e6:1d:ea:f4:86:99:84:58:6b:
                    0d:36:9b:6b:93:89:e8:06:86:7f:9c:7c:01:0e:39:
                    e9:4a:ed:3a:03:df:4f:18:36:17:d6:4d:86:d3:0f:
                    d9:1f:d8:00:fe:32:5e:78:46:82:24:56:17:4f:b0:
                    22:97:7c:9e:d0:60:fb:60:5c:bc:09:41:c8:1c:9c:
                    cf:07:d5:ec:a4:44:33:67:b7:1b:07:40:a0:f4:53:
                    1c:5f:b9:83:70:04:ef:72:3d:47:7d:ee:a5:4e:b6:
                    72:25:28:81:90:b3:d6:8e:96:d8:f4:ce:ce:15:e9:
                    4f:5f:b8:8f:66:a7:ca:3a:62:c5:a0:b8:d0:6f:c7:
                    50:26:34:46:0d:a3:e8:f5:ff:58:f2:40:f9:ba:b3:
                    0f:d3:50:41:11:47:d5:f4:cd:53:93:e3:9d:35:ac:
                    a6:79:14:6c:9c:e3:25:9e:79:db:89:4a:51:70:3e:
                    11:0a:47:0c:59:f6:9e:12:8e:e8:41:db:35:ef:cd:
                    68:11:9a:49:b6:7c:ed:eb:46:d4:00:7c:be:f1:7b:
                    5d:9e:21:b1:39:d6:e0:c7:28:ab:7b:b2:e9:23:a5:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:84:F9:5A:2B:87:ED:18:E4:79:55:D0:1B:25:8E:68:B0:E8:0E:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a353563303a3a2f33322d3438203d3e203137353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:ed:0c:b5:83:51:5d:c2:73:85:be:01:fb:c5:52:8f:29:
         41:f2:f9:7f:d7:ea:76:37:d2:ed:cf:4f:9c:b6:3a:fe:53:19:
         e9:f2:d8:38:8d:e7:d0:7a:19:df:8b:5c:c4:e0:2b:00:31:fb:
         9c:46:b6:9f:4e:93:d6:48:3d:e0:0f:e9:1d:b9:f5:fc:d7:f2:
         ef:ca:fd:f6:62:9d:58:c8:f0:c4:96:7d:a6:74:09:8a:1e:72:
         60:2f:85:14:83:38:32:14:2e:e3:26:db:b3:4a:fe:d0:7f:a5:
         96:52:8e:1b:66:a4:b8:cb:a2:9b:da:1a:9d:29:b3:c5:6a:4d:
         63:ce:2a:9a:b6:98:d7:4b:22:da:07:79:12:b0:0c:10:f4:23:
         c3:0c:ba:3b:64:c7:23:d7:03:8d:b6:66:32:c5:83:cc:8a:11:
         94:1c:c7:4c:65:eb:79:c6:71:cb:87:40:57:eb:52:39:c5:8c:
         29:47:df:c6:b6:73:57:27:c8:44:78:46:01:4a:bd:ab:8b:f9:
         44:0e:47:e0:be:58:8f:6a:fb:93:f0:9b:3c:79:b2:0a:db:20:
         31:0d:8f:db:7c:5d:b7:d9:35:6c:cd:4a:5c:34:39:c6:f7:ab:
         77:b8:02:4b:af:e9:13:b3:74:be:29:db:06:ea:fa:8f:82:c1:
         c5:6d:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----