Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a653563303a3a2f33322d3438203d3e203435373234.roa
File:                     323430373a653563303a3a2f33322d3438203d3e203435373234.roa (raw, json)
Hash identifier:          La7r3rgFPnu9JZNnI7v0AVsCIcSbTrpHAgO9d0I3vo8=
Subject key identifier:   87:81:D6:8B:1E:B6:C5:1E:BE:06:94:83:F5:CC:C3:64:1A:24:0C:F9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C35BAC555FF7D6D4CCB6C387893CEA381214712
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a653563303a3a2f33322d3438203d3e203435373234.roa
Signing time:             Mon 27 Sep 2021 07:50:47 +0000
ROA not before:           Mon 27 Sep 2021 07:45:47 +0000
ROA not after:            Tue 27 Sep 2022 07:50:47 +0000
asID:                     45724
IP address blocks:        2407:e5c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:ba:c5:55:ff:7d:6d:4c:cb:6c:38:78:93:ce:a3:81:21:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 27 07:45:47 2021 GMT
            Not After : Sep 27 07:50:47 2022 GMT
        Subject: CN=3082010A0282010100A6BC794AD1E0FB38DFD1B49006C3ACB3396EC9A4D198CFA4575E815E9445165F99F5D8D360B42AA0029B59B061867709515EAFCF7B0473E849F0B9EB3B0B76FF4601B22E1EB0EB95A03983202657E72033E77AA5885863EB5B1CBB5F5FA557E1E3B3342FD9953E0B9C8574ADAA235080C59AC449EC96E8CF4BE4053BB7FF0F32F7B94096A4A1F73C27FEC938B8BA2AA0C40F94F61D663D4AB6B7D5617E5DF8B83C6C10797477388B323410066F9FF4E4A7D4C192CE6225C8890B49BEF7A89F30FAE9E514272205339052454CDAB7FA9BEA369FA54FBE9E9C0425E448CE9A28D06B14E5AFA540813A8CD856A971C709C4D81CA6FB6AF0B5055785C6D5869033F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:79:4a:d1:e0:fb:38:df:d1:b4:90:06:c3:
                    ac:b3:39:6e:c9:a4:d1:98:cf:a4:57:5e:81:5e:94:
                    45:16:5f:99:f5:d8:d3:60:b4:2a:a0:02:9b:59:b0:
                    61:86:77:09:51:5e:af:cf:7b:04:73:e8:49:f0:b9:
                    eb:3b:0b:76:ff:46:01:b2:2e:1e:b0:eb:95:a0:39:
                    83:20:26:57:e7:20:33:e7:7a:a5:88:58:63:eb:5b:
                    1c:bb:5f:5f:a5:57:e1:e3:b3:34:2f:d9:95:3e:0b:
                    9c:85:74:ad:aa:23:50:80:c5:9a:c4:49:ec:96:e8:
                    cf:4b:e4:05:3b:b7:ff:0f:32:f7:b9:40:96:a4:a1:
                    f7:3c:27:fe:c9:38:b8:ba:2a:a0:c4:0f:94:f6:1d:
                    66:3d:4a:b6:b7:d5:61:7e:5d:f8:b8:3c:6c:10:79:
                    74:77:38:8b:32:34:10:06:6f:9f:f4:e4:a7:d4:c1:
                    92:ce:62:25:c8:89:0b:49:be:f7:a8:9f:30:fa:e9:
                    e5:14:27:22:05:33:90:52:45:4c:da:b7:fa:9b:ea:
                    36:9f:a5:4f:be:9e:9c:04:25:e4:48:ce:9a:28:d0:
                    6b:14:e5:af:a5:40:81:3a:8c:d8:56:a9:71:c7:09:
                    c4:d8:1c:a6:fb:6a:f0:b5:05:57:85:c6:d5:86:90:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:D6:8B:1E:B6:C5:1E:BE:06:94:83:F5:CC:C3:64:1A:24:0C:F9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a653563303a3a2f33322d3438203d3e203435373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:46:9f:8f:f1:00:17:fa:33:e5:08:48:df:59:cc:c7:c0:
         f5:83:9c:ec:32:19:f0:c1:98:ba:2e:62:18:3d:30:fd:b2:e9:
         18:dc:29:55:2a:17:5b:d0:fd:39:01:ab:8f:af:28:e0:39:36:
         75:57:77:b0:cb:0f:1a:83:34:28:44:51:f5:c8:1f:9c:37:54:
         87:e6:d5:0c:49:a2:67:28:a9:cd:a2:4c:fe:b9:2e:3f:96:52:
         0e:f5:83:f7:a5:56:06:1c:eb:e0:e0:d2:a9:65:f6:a4:8d:85:
         6d:e6:ac:e0:2f:8d:94:ab:01:07:8c:19:a7:dc:ad:93:ab:9c:
         3e:0f:b9:40:dd:5f:5e:0f:0e:34:d0:68:f3:03:1e:84:e3:aa:
         91:f0:ce:b1:6f:40:36:be:36:2f:5b:68:61:d8:8d:5b:8d:df:
         db:c4:59:ac:00:d7:16:45:e6:77:49:63:d3:37:66:28:e2:cd:
         bc:3d:fd:f6:ea:07:53:68:50:e9:c3:86:67:1f:b3:51:27:9c:
         48:d1:5f:37:09:ec:03:06:5a:74:b7:9b:ee:78:02:0b:ad:07:
         80:82:64:c7:98:8d:71:bd:59:28:76:28:28:da:a1:28:dc:74:
         87:6a:aa:f9:e8:46:7e:6e:5f:1c:c6:68:50:00:c3:c2:7f:79:
         c3:45:af:cf
-----BEGIN CERTIFICATE-----
MIIHBzCCBe+gAwIBAgIUHDW6xVX/fW1My2w4eJPOo4EhRxIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkyNzA3NDU0N1oX
DTIyMDkyNzA3NTA0N1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNkJDNzk0QUQxRTBGQjM4REZEMUI0OTAwNkMzQUNCMzM5NkVDOUE0RDE5
OENGQTQ1NzVFODE1RTk0NDUxNjVGOTlGNUQ4RDM2MEI0MkFBMDAyOUI1OUIwNjE4
Njc3MDk1MTVFQUZDRjdCMDQ3M0U4NDlGMEI5RUIzQjBCNzZGRjQ2MDFCMjJFMUVC
MEVCOTVBMDM5ODMyMDI2NTdFNzIwMzNFNzdBQTU4ODU4NjNFQjVCMUNCQjVGNUZB
NTU3RTFFM0IzMzQyRkQ5OTUzRTBCOUM4NTc0QURBQTIzNTA4MEM1OUFDNDQ5RUM5
NkU4Q0Y0QkU0MDUzQkI3RkYwRjMyRjdCOTQwOTZBNEExRjczQzI3RkVDOTM4QjhC
QTJBQTBDNDBGOTRGNjFENjYzRDRBQjZCN0Q1NjE3RTVERjhCODNDNkMxMDc5NzQ3
NzM4OEIzMjM0MTAwNjZGOUZGNEU0QTdENEMxOTJDRTYyMjVDODg5MEI0OUJFRjdB
ODlGMzBGQUU5RTUxNDI3MjIwNTMzOTA1MjQ1NENEQUI3RkE5QkVBMzY5RkE1NEZC
RTlFOUMwNDI1RTQ0OENFOUEyOEQwNkIxNEU1QUZBNTQwODEzQThDRDg1NkE5NzFD
NzA5QzREODFDQTZGQjZBRjBCNTA1NTc4NUM2RDU4NjkwMzNGOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvHlK0eD7ON/RtJAGw6yz
OW7JpNGYz6RXXoFelEUWX5n12NNgtCqgAptZsGGGdwlRXq/PewRz6Enwues7C3b/
RgGyLh6w65WgOYMgJlfnIDPneqWIWGPrWxy7X1+lV+HjszQv2ZU+C5yFdK2qI1CA
xZrESeyW6M9L5AU7t/8PMve5QJakofc8J/7JOLi6KqDED5T2HWY9Sra31WF+Xfi4
PGwQeXR3OIsyNBAGb5/05KfUwZLOYiXIiQtJvveonzD66eUUJyIFM5BSRUzat/qb
6jafpU++npwEJeRIzpoo0GsU5a+lQIE6jNhWqXHHCcTYHKb7avC1BVeFxtWGkDP5
AgMBAAGjggH+MIIB+jAdBgNVHQ4EFgQUh4HWix62xR6+BpSD9czDZBokDPkwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzQzMDM3M2E2NTM1NjMzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM0MzUzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB+XAMA0GCSqGSIb3
DQEBCwUAA4IBAQBT90afj/EAF/oz5QhI31nMx8D1g5zsMhnwwZi6LmIYPTD9sukY
3ClVKhdb0P05AauPryjgOTZ1V3ewyw8agzQoRFH1yB+cN1SH5tUMSaJnKKnNokz+
uS4/llIO9YP3pVYGHOvg4NKpZfakjYVt5qzgL42UqwEHjBmn3K2Tq5w+D7lA3V9e
Dw400GjzAx6E46qR8M6xb0A2vjYvW2hh2I1bjd/bxFmsANcWReZ3SWPTN2Yo4s28
Pf326gdTaFDpw4ZnH7NRJ5xI0V83CewDBlp0t5vueAILrQeAgmTHmI1xvVkodigo
2qEo3HSHaqr56EZ+bl8cxmhQAMPCf3nDRa/P
-----END CERTIFICATE-----