Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a3a2f34302d3438203d3e20313338313238.roa
File:                     323430373a3763303a3a2f34302d3438203d3e20313338313238.roa (raw, json)
Hash identifier:          UVMF2x6WcSamHC54FoOre6ZObwTNxNzSQ3+HnA1bisE=
Subject key identifier:   25:EB:C9:53:35:3D:81:D5:35:15:D0:9E:A4:1A:7E:FC:73:4B:CC:79
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       075F902D72FFD68AF42D967F73B2F3640A33D652
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a3a2f34302d3438203d3e20313338313238.roa
Signing time:             Wed 16 Jun 2021 08:24:11 +0000
ROA not before:           Wed 16 Jun 2021 08:19:11 +0000
ROA not after:            Thu 16 Jun 2022 08:24:11 +0000
asID:                     138128
IP address blocks:        2407:7c0::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5f:90:2d:72:ff:d6:8a:f4:2d:96:7f:73:b2:f3:64:0a:33:d6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 16 08:19:11 2021 GMT
            Not After : Jun 16 08:24:11 2022 GMT
        Subject: CN=3082010A0282010100CA6574BA8CB7DC79223DD25142DCC29E16782C898F3EBD171A52FEC4B4707FB5F92E3C8FF56F6692738A9F3ACA157E3F27E3D61F07FE2B207C8151B678FAB864FC2D48EDB067F837621E334B7880820B23A8C3262A16A5254DBC5B7E33461469537165645614F9864EE3CCC3144C4C9B80665CADDF5ED7DD77A2AD9D15944523734C683D6D713C2B4594671E10A344411D7AAC7A5071A09D5A0E1BE8679DDDC64412BE4D5EBDB4084EB78CBE61EB0708416798A80FB10E8F7A40A3D240E393297D5D858007942FCA561ADF670536FD584D743BE564BD88A379D1E390DE2B71757029E73D77363A692CFC79DF4A0BDDABE52C18989FFE8EBE0E1C5ABEF07CC70F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:74:ba:8c:b7:dc:79:22:3d:d2:51:42:dc:
                    c2:9e:16:78:2c:89:8f:3e:bd:17:1a:52:fe:c4:b4:
                    70:7f:b5:f9:2e:3c:8f:f5:6f:66:92:73:8a:9f:3a:
                    ca:15:7e:3f:27:e3:d6:1f:07:fe:2b:20:7c:81:51:
                    b6:78:fa:b8:64:fc:2d:48:ed:b0:67:f8:37:62:1e:
                    33:4b:78:80:82:0b:23:a8:c3:26:2a:16:a5:25:4d:
                    bc:5b:7e:33:46:14:69:53:71:65:64:56:14:f9:86:
                    4e:e3:cc:c3:14:4c:4c:9b:80:66:5c:ad:df:5e:d7:
                    dd:77:a2:ad:9d:15:94:45:23:73:4c:68:3d:6d:71:
                    3c:2b:45:94:67:1e:10:a3:44:41:1d:7a:ac:7a:50:
                    71:a0:9d:5a:0e:1b:e8:67:9d:dd:c6:44:12:be:4d:
                    5e:bd:b4:08:4e:b7:8c:be:61:eb:07:08:41:67:98:
                    a8:0f:b1:0e:8f:7a:40:a3:d2:40:e3:93:29:7d:5d:
                    85:80:07:94:2f:ca:56:1a:df:67:05:36:fd:58:4d:
                    74:3b:e5:64:bd:88:a3:79:d1:e3:90:de:2b:71:75:
                    70:29:e7:3d:77:36:3a:69:2c:fc:79:df:4a:0b:dd:
                    ab:e5:2c:18:98:9f:fe:8e:be:0e:1c:5a:be:f0:7c:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:C9:53:35:3D:81:D5:35:15:D0:9E:A4:1A:7E:FC:73:4B:CC:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a3a2f34302d3438203d3e20313338313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:7c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:53:7b:b0:31:54:cb:b4:07:d1:5b:0a:19:21:98:1f:50:eb:
         0f:24:8b:7c:e3:ae:04:c9:d1:87:df:1f:58:6d:3b:bb:93:9d:
         3e:33:0b:0a:14:a3:b8:5c:68:ee:28:e9:63:e0:4c:c7:6f:76:
         c0:d1:bf:45:1c:04:34:4f:63:e1:a1:d9:7e:c9:37:45:bd:95:
         c7:95:30:ae:f7:1e:00:0a:65:e4:c2:89:52:da:83:b5:6e:0d:
         1f:7a:aa:19:80:14:b3:a5:00:21:1b:7a:bb:06:3e:3a:1c:17:
         25:e3:cd:3b:25:c4:52:91:a7:13:cf:18:eb:ab:a8:1c:64:80:
         a0:cf:e9:a8:66:42:87:df:44:38:05:5b:82:36:89:1a:7c:89:
         ed:a9:60:26:da:66:68:8a:89:85:c3:74:8c:82:fb:79:e4:46:
         95:45:70:9f:43:3f:d4:f1:20:8f:11:a5:e6:4a:a2:70:d6:18:
         0b:47:69:27:fd:37:24:69:2e:76:ab:e3:61:3f:25:ec:36:9e:
         77:fc:2a:c1:5d:4c:e5:0e:5f:ff:c5:fe:82:cd:68:79:57:5b:
         44:b5:a9:00:72:6a:18:41:63:d2:6e:5d:dd:b8:87:bd:8d:ec:
         f4:30:4f:71:ae:94:89:6f:b9:1b:92:19:a5:a7:67:59:72:1a:
         af:91:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----