Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230392e302f32342d3234203d3e20313430333836.roa
File:                     3130332e3134392e3230392e302f32342d3234203d3e20313430333836.roa (raw, json)
Hash identifier:          RkQZZHmTcynBnw074+4yw9AiJcjRIeTyZ0Su6GS65iE=
Subject key identifier:   57:C4:84:85:18:14:45:B1:32:8C:4C:0D:01:65:5E:19:8F:A4:19:89
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2A85EC89906DCA72F06E378D0964C5EC35897C08
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230392e302f32342d3234203d3e20313430333836.roa
Signing time:             Wed 27 Oct 2021 03:00:02 +0000
ROA not before:           Wed 27 Oct 2021 02:55:02 +0000
ROA not after:            Thu 27 Oct 2022 03:00:02 +0000
asID:                     140386
IP address blocks:        103.149.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:85:ec:89:90:6d:ca:72:f0:6e:37:8d:09:64:c5:ec:35:89:7c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 02:55:02 2021 GMT
            Not After : Oct 27 03:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:67:53:0a:07:73:e8:8b:5b:e3:12:64:81:
                    96:9e:fd:82:8e:c3:9e:dc:22:df:18:d2:c0:0f:5c:
                    9e:51:0c:eb:4e:fc:90:b2:9c:94:33:a2:4c:4c:09:
                    3b:36:02:4f:44:78:8b:b0:af:37:67:b2:a5:bb:41:
                    7f:6d:7d:85:04:b4:ab:14:37:31:f2:f8:c7:53:c3:
                    55:ed:4c:13:48:6d:6c:ca:4a:6d:7e:2d:13:75:b7:
                    67:e1:90:c3:d3:97:1a:92:51:2e:13:10:08:a3:e1:
                    5d:5c:12:9b:5b:04:b4:92:b1:ff:d7:68:17:2e:49:
                    c6:4d:29:23:e9:ba:96:66:70:74:1b:70:a1:f9:ee:
                    80:51:a2:61:83:d3:55:ea:58:d3:46:52:6a:69:41:
                    b5:34:c4:81:0a:58:12:b9:60:44:e3:1b:64:fe:ed:
                    15:59:67:c5:44:2f:98:75:38:dc:38:5e:9a:98:68:
                    6f:06:c5:e0:38:ba:59:5b:b1:33:fa:cc:8f:71:ed:
                    05:fd:6a:47:a7:43:87:d5:44:7b:db:3f:ff:87:51:
                    7f:79:43:43:8c:57:73:f5:d7:3d:ce:4a:25:df:64:
                    56:66:c2:19:4f:e1:23:ec:d9:e9:ca:0e:44:03:c1:
                    de:dc:d2:3f:a4:2e:e3:d1:42:5c:55:7f:53:46:45:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:84:85:18:14:45:B1:32:8C:4C:0D:01:65:5E:19:8F:A4:19:89
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230392e302f32342d3234203d3e20313430333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:b2:fe:b9:a2:2b:56:21:83:d0:1c:00:ac:20:0c:ce:c1:
         2f:84:29:74:18:01:1b:31:2f:d8:61:bf:66:6f:45:fc:6f:19:
         62:41:67:e6:54:0d:3f:d8:98:ff:15:05:4a:2b:4a:84:76:63:
         46:1e:34:37:d7:eb:cb:bd:a5:79:a2:e1:e3:49:dd:42:67:6d:
         50:d7:88:ce:ae:39:6e:b4:cf:94:77:0b:0b:da:2a:2b:10:0e:
         31:29:5a:6c:2d:22:39:3f:3c:49:00:97:42:34:67:0b:92:dc:
         dd:43:7a:91:e7:63:62:a5:c3:7b:14:73:d4:3c:a3:a4:6c:cf:
         b8:35:60:6c:32:25:52:c3:29:19:e5:71:e5:bc:6d:9a:d7:fb:
         8b:5b:96:91:ac:76:f5:e1:bb:79:e2:8a:52:f4:6d:30:9c:c6:
         1e:80:f6:c0:cf:d5:63:50:91:99:df:31:06:9b:f1:2c:ad:26:
         d6:00:24:ac:37:80:69:cf:f4:01:0a:cd:37:88:8b:23:f9:7c:
         0e:ae:f3:d6:9a:dc:16:a5:f3:bf:c0:8a:73:b9:08:2c:d0:4c:
         dc:db:12:65:b6:13:73:80:b9:00:9b:ef:7b:25:a9:a4:5c:fe:
         97:41:21:93:24:21:1a:31:85:f1:51:9f:33:25:bd:ec:a3:8a:
         d4:06:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----