Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3137342e302f32342d3234203d3e20313338383634.roa
File:                     3130332e3133392e3137342e302f32342d3234203d3e20313338383634.roa (raw, json)
Hash identifier:          m1pGmOFoC9GaH3yLIEwl0vp4W5eSl/28SUp+jplYSsY=
Subject key identifier:   30:1F:9A:EB:A0:11:7F:31:9F:2F:23:8A:71:53:E1:CE:3C:97:1C:7F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7FE4E3D7286203194BB43F2CF19F1543C3923CD3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3137342e302f32342d3234203d3e20313338383634.roa
Signing time:             Wed 29 Dec 2021 05:00:02 +0000
ROA not before:           Wed 29 Dec 2021 04:55:02 +0000
ROA not after:            Thu 29 Dec 2022 05:00:02 +0000
asID:                     138864
IP address blocks:        103.139.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e4:e3:d7:28:62:03:19:4b:b4:3f:2c:f1:9f:15:43:c3:92:3c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 29 04:55:02 2021 GMT
            Not After : Dec 29 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:c2:1f:ed:5d:87:37:99:46:e5:89:04:ec:
                    6f:ce:9e:48:1f:26:7f:54:7b:3c:b5:35:42:d4:20:
                    fb:44:2a:8a:fa:f3:0e:28:58:1e:e0:09:35:bb:8f:
                    68:d5:d6:9b:1c:75:7e:c4:60:8a:42:3d:2d:5c:cf:
                    a8:ed:8f:f6:a7:85:42:04:c3:37:de:56:7c:d3:6c:
                    be:9b:11:8a:99:09:79:8f:e4:f5:a4:94:2f:af:ff:
                    18:d1:5f:ad:45:1b:30:e3:74:6b:20:31:e4:35:c4:
                    56:0e:64:9f:71:54:8c:1a:47:92:e7:9c:eb:6b:9c:
                    b0:00:19:e8:4c:2b:73:e8:cb:9b:ed:3e:59:37:a0:
                    f6:ab:5b:c6:42:2c:fa:8a:52:66:b9:fd:d2:6b:ae:
                    a5:b2:48:15:70:4c:c8:1b:98:38:ae:1b:9d:c0:06:
                    d2:d4:53:f2:93:38:96:ce:10:41:f0:b0:9e:69:f1:
                    c8:c3:ce:c1:07:36:04:c7:e7:ac:ca:ab:6a:29:1e:
                    fe:5e:c4:a2:60:e3:8e:71:fe:cf:88:c1:5d:45:e1:
                    2a:c7:3b:d9:1e:04:db:67:c5:05:68:5d:de:fa:b8:
                    ad:6c:0d:40:28:ff:b7:f7:fd:ee:6e:ab:ea:44:49:
                    23:9c:63:2b:cb:f0:28:12:6e:b5:c0:c1:07:64:99:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:9A:EB:A0:11:7F:31:9F:2F:23:8A:71:53:E1:CE:3C:97:1C:7F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e3137342e302f32342d3234203d3e20313338383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:86:4e:c4:8e:4e:4c:fe:66:c1:1b:35:f4:6e:8e:75:26:
         5b:e6:9f:de:ce:48:bb:e1:3c:16:03:ae:51:a8:b7:42:78:18:
         bc:22:54:b7:43:80:8c:e9:0f:0c:9a:b2:e8:a5:8a:fd:1a:93:
         05:c2:04:08:bb:0c:ed:24:dd:a8:14:1e:eb:3e:97:bd:45:d3:
         6f:5c:53:74:82:85:ec:a8:e3:76:29:33:ec:fd:e9:43:cd:32:
         b6:13:37:77:3c:70:0b:14:c1:cd:70:ee:5c:41:89:0d:c2:b3:
         1b:8a:c4:9a:c4:09:d8:d5:68:1c:a8:56:76:2f:e5:7b:10:52:
         f1:3a:2b:be:43:08:a1:1b:8a:86:bb:f5:b1:d6:56:ee:3d:87:
         99:92:39:91:fe:38:6d:2a:50:34:9f:51:0e:00:f3:51:4d:ed:
         02:a3:ad:57:8b:2b:e8:fc:70:b2:7c:11:74:a7:5e:53:fb:6e:
         56:61:0b:c6:60:05:7a:36:f6:6a:5a:fe:dd:0a:7f:ed:63:df:
         f0:f1:7d:16:85:20:98:39:a8:51:3d:4c:dc:55:93:dd:4c:26:
         5c:d8:ce:48:a9:1c:61:0e:b9:0f:a3:30:bf:a7:be:4e:60:9a:
         73:52:81:03:32:a8:c3:ff:37:69:95:64:76:2c:e7:13:4a:9a:
         e2:65:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----