Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32322e302f32332d3234203d3e20313334363330.roa
File:                     34392e3135362e32322e302f32332d3234203d3e20313334363330.roa (raw, json)
Hash identifier:          dtl2VJVUsCRz4WtUFcMXAEyprnd9KI19k7T4JiZIsCE=
Subject key identifier:   B4:F3:77:3D:98:1E:51:8D:4E:A4:86:89:3D:B7:90:38:A7:59:3B:D4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       254401E7B37C33909499C0EE42AEA21217DE4F99
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32322e302f32332d3234203d3e20313334363330.roa
Signing time:             Mon 26 Apr 2021 03:12:52 +0000
ROA not before:           Mon 26 Apr 2021 03:07:52 +0000
ROA not after:            Tue 26 Apr 2022 03:12:52 +0000
asID:                     134630
IP address blocks:        49.156.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:01:e7:b3:7c:33:90:94:99:c0:ee:42:ae:a2:12:17:de:4f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 03:07:52 2021 GMT
            Not After : Apr 26 03:12:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:60:ba:fc:ab:61:6a:8f:66:a4:45:53:58:
                    0d:3e:e3:34:0f:79:95:99:e8:ac:a6:0a:11:d6:ff:
                    56:0b:33:c6:b8:1f:9c:f9:2d:86:aa:af:2e:87:7c:
                    f0:0e:5b:f9:39:df:b7:a8:10:69:33:56:55:92:47:
                    e4:bc:74:c8:5e:59:de:eb:c8:ce:c1:7b:c8:78:48:
                    fc:77:ad:d3:a0:18:e2:ec:04:01:a2:b9:18:fc:29:
                    fd:db:36:b5:df:b8:91:b7:a2:ea:df:84:60:67:bb:
                    dd:5a:95:13:94:33:13:f5:d7:0a:fe:f2:a2:7a:35:
                    d2:b9:e5:3b:23:59:44:87:65:a3:cb:6a:1c:f9:7d:
                    d5:96:e7:a8:93:a0:5b:5d:a7:0b:21:f8:01:19:88:
                    d4:a8:6c:fa:5c:7a:68:11:09:15:2e:74:fc:68:15:
                    fd:51:05:27:89:08:35:41:d7:f1:38:15:69:8d:07:
                    75:06:d2:fb:e2:0e:29:65:a8:dd:fa:07:32:64:46:
                    bc:0e:38:38:57:b0:94:ac:f6:b0:eb:db:66:66:8a:
                    09:cf:88:d6:1d:6b:ee:cc:d1:ec:c6:0a:66:d3:7f:
                    a7:ec:65:c1:8e:d9:5f:4c:2e:71:3e:8a:e5:d7:6b:
                    5c:21:f7:01:2e:94:d7:c9:18:07:18:33:e4:91:1a:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:77:3D:98:1E:51:8D:4E:A4:86:89:3D:B7:90:38:A7:59:3B:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34392e3135362e32322e302f32332d3234203d3e20313334363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:8f:a4:29:aa:79:c1:74:04:35:db:58:12:74:e1:e3:ca:
         7c:3b:8a:b8:b8:6c:2d:93:97:38:82:8d:44:ed:0c:c9:0c:61:
         5e:d4:20:42:d1:c9:25:9f:ea:70:de:82:42:55:9b:a7:98:0e:
         07:95:04:e7:1a:07:8b:3e:d8:2a:af:61:6a:ec:44:51:8f:ac:
         59:6d:a0:17:4a:9a:c3:ca:3f:eb:3a:02:5d:06:87:7d:80:f9:
         61:b5:87:5e:e5:4f:b3:bf:1b:35:4e:70:e8:76:50:f9:5d:9e:
         85:64:3e:1f:c1:75:8a:6e:70:8c:e4:57:9d:80:85:82:98:6b:
         90:d3:cb:d2:6b:87:ba:b3:10:0e:e9:b2:5c:ad:6f:95:ce:40:
         4f:62:b8:96:38:2d:92:96:cc:25:b9:4a:47:06:9a:32:ce:d3:
         d2:4e:b1:d2:26:9c:50:a7:b5:79:6d:e3:87:7e:87:89:24:4e:
         f3:6f:fc:4b:1e:46:6b:8c:74:03:19:03:ff:cc:dc:9c:86:37:
         69:d9:54:36:4a:ea:7d:b8:0d:e6:16:b5:10:3e:79:0f:7e:a2:
         d4:60:e9:7f:4f:82:75:13:b2:f8:af:7c:43:8d:2e:c1:e3:ae:
         40:01:71:19:f8:44:57:da:98:2e:81:9b:7c:ae:a3:7c:8a:55:
         0d:16:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----