Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e31362e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132312e31362e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          tyF2vE6X46uRUkAuLviQyOe7F67H4vxBkaUgAxqwGew=
Subject key identifier:   C9:10:D5:D7:FF:D6:CC:E8:8C:ED:AC:27:21:38:64:2A:70:77:61:BB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2F753C10619E36A2EA619E8495E108AB3C196CAC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e31362e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:01 +0000
ROA not before:           Wed 10 Nov 2021 06:55:01 +0000
ROA not after:            Thu 10 Nov 2022 07:00:01 +0000
asID:                     63859
IP address blocks:        103.121.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:3c:10:61:9e:36:a2:ea:61:9e:84:95:e1:08:ab:3c:19:6c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:01 2021 GMT
            Not After : Nov 10 07:00:01 2022 GMT
        Subject: CN=3082010A0282010100C687A2DB45D2C30B6138182A420C8D5B11961967B0F5C104E151E3C1C237A4485716462E6F73CABCDA47787144E88B45D24690847CBC74D17FA467A84FA12F35045B58351FBEF8D00DB00B7E6FBAC4E746A90C2B086C2A2274D453CBF40CF17210FFB58B013149137F1E8AA038B59126C3BA922CF7BE25302E366A2B16C1E9FC5F675E262F6221EFB61704B668BA97FC42D5C981C8D74A141A3704E09AF688C95FDD3907E4A60D98D6B359CEE71B6720ADF2338EF44478A400BAB7A9E0715B2A5E7E64DBB1D0DAF723845BF1E87A5707C97019DDD12BACDFE872124A7510530A15EA745FD1D4D3438BC885178D825CAA69832EF3389C9DC11ECF2C7A82B4733D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:a2:db:45:d2:c3:0b:61:38:18:2a:42:0c:
                    8d:5b:11:96:19:67:b0:f5:c1:04:e1:51:e3:c1:c2:
                    37:a4:48:57:16:46:2e:6f:73:ca:bc:da:47:78:71:
                    44:e8:8b:45:d2:46:90:84:7c:bc:74:d1:7f:a4:67:
                    a8:4f:a1:2f:35:04:5b:58:35:1f:be:f8:d0:0d:b0:
                    0b:7e:6f:ba:c4:e7:46:a9:0c:2b:08:6c:2a:22:74:
                    d4:53:cb:f4:0c:f1:72:10:ff:b5:8b:01:31:49:13:
                    7f:1e:8a:a0:38:b5:91:26:c3:ba:92:2c:f7:be:25:
                    30:2e:36:6a:2b:16:c1:e9:fc:5f:67:5e:26:2f:62:
                    21:ef:b6:17:04:b6:68:ba:97:fc:42:d5:c9:81:c8:
                    d7:4a:14:1a:37:04:e0:9a:f6:88:c9:5f:dd:39:07:
                    e4:a6:0d:98:d6:b3:59:ce:e7:1b:67:20:ad:f2:33:
                    8e:f4:44:78:a4:00:ba:b7:a9:e0:71:5b:2a:5e:7e:
                    64:db:b1:d0:da:f7:23:84:5b:f1:e8:7a:57:07:c9:
                    70:19:dd:d1:2b:ac:df:e8:72:12:4a:75:10:53:0a:
                    15:ea:74:5f:d1:d4:d3:43:8b:c8:85:17:8d:82:5c:
                    aa:69:83:2e:f3:38:9c:9d:c1:1e:cf:2c:7a:82:b4:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:D5:D7:FF:D6:CC:E8:8C:ED:AC:27:21:38:64:2A:70:77:61:BB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132312e31362e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:2b:77:e1:52:b1:f2:d8:89:31:19:17:6f:95:10:d1:ee:
         bd:09:77:62:b4:0d:25:26:9c:25:b9:b6:bf:ee:de:62:2f:f9:
         6c:ff:44:c5:37:69:4e:14:3e:f2:02:c4:d8:4c:04:b5:d9:a2:
         47:74:1a:4f:89:c5:e8:72:81:4e:e9:69:ac:c7:c1:9f:ed:9e:
         f3:87:77:2d:49:df:b9:1a:05:6a:d0:bd:aa:99:a4:13:01:27:
         9c:67:ab:92:ba:1a:01:25:b6:e2:87:63:12:bf:2b:1f:be:f0:
         c3:46:9d:ff:62:5d:47:12:66:11:e6:85:fa:df:1f:30:47:2c:
         3e:9b:08:78:53:3c:0f:e4:df:d2:48:9a:65:92:b3:ab:0c:8e:
         20:0c:68:fa:14:9d:27:14:bb:4d:25:26:73:00:08:ea:21:88:
         a5:bd:73:52:82:86:66:bd:50:c3:f6:51:2a:f3:a7:10:f3:8b:
         e7:f1:a9:46:ea:33:6b:be:cc:a2:57:9b:5f:01:47:d9:9f:87:
         ed:6e:07:f1:f7:ab:83:7f:e8:53:b5:02:6f:93:b1:68:f8:bf:
         08:6e:8f:44:e8:19:fd:51:7e:22:d2:0b:a0:c4:f4:bd:63:ae:
         76:43:a3:a3:30:cc:9d:44:6c:51:46:5c:c7:1c:0e:23:df:9d:
         b0:17:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----