Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135302e3131302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          GEK4Sbz5D5he7d+L/vuFPkTWytUpmIkqMGPIE561Vts=
Subject key identifier:   1A:9C:88:94:01:D0:85:97:6C:F2:0D:B7:63:1A:4D:FF:E5:68:9A:20
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7005530F854ECDBD766B2E156679E096184E2947
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131302e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 27 Oct 2021 21:00:01 +0000
ROA not before:           Wed 27 Oct 2021 20:55:01 +0000
ROA not after:            Thu 27 Oct 2022 21:00:01 +0000
asID:                     17995
IP address blocks:        103.150.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:53:0f:85:4e:cd:bd:76:6b:2e:15:66:79:e0:96:18:4e:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 20:55:01 2021 GMT
            Not After : Oct 27 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:7f:02:40:12:55:f7:3e:d5:f4:e8:87:a8:
                    9d:3f:41:20:63:b6:ff:e6:43:88:89:a9:04:82:5e:
                    f3:bb:5e:b6:85:63:04:65:20:85:be:1b:88:eb:cd:
                    27:62:71:17:a2:ce:a9:c1:a0:20:5b:5a:9e:fb:31:
                    9b:53:95:7c:5a:c6:3f:21:4f:a1:cb:39:25:9b:02:
                    bd:5a:70:45:af:bf:fd:7a:94:a1:d2:08:5a:bc:08:
                    61:a3:46:18:19:9b:de:63:ea:92:f6:c1:ef:30:3f:
                    06:9e:b7:e7:b2:78:9b:0d:8b:69:1f:ad:e4:61:66:
                    8f:3a:e5:80:e1:24:bd:98:27:ee:33:13:87:e9:11:
                    31:b5:36:24:cb:af:9d:12:34:a1:23:d0:57:56:83:
                    1c:f1:91:fe:6e:d6:86:8b:17:89:c1:47:23:71:15:
                    f5:43:db:c6:8d:ea:ee:6f:9b:00:07:21:9f:57:30:
                    96:e3:43:94:1c:98:12:37:57:ec:4b:6c:f1:72:48:
                    e0:e5:5a:40:19:14:1f:2f:7e:1d:0f:4a:dc:3a:93:
                    6b:da:ba:2b:8a:47:a1:0c:29:c3:ce:1d:6d:06:15:
                    06:73:f3:3f:4d:1d:5d:f8:e2:96:72:45:dc:bf:fb:
                    bd:5b:4c:9e:cd:2f:f8:bd:20:63:56:a5:55:2f:a5:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9C:88:94:01:D0:85:97:6C:F2:0D:B7:63:1A:4D:FF:E5:68:9A:20
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:b9:6e:7f:f2:8c:81:0b:4e:e9:78:5e:f8:a2:e5:59:aa:
         63:13:c6:a5:05:7e:e1:0c:a7:3e:66:2a:f8:a3:4f:b3:c2:0b:
         4b:34:10:57:ca:31:b7:b8:0f:7c:34:c8:ad:1b:5c:6d:8d:85:
         6f:ba:8e:71:47:18:94:19:0b:35:78:95:9f:1a:e9:99:31:c0:
         63:fe:0f:90:9f:db:f8:63:a9:05:90:02:c8:9d:84:dc:77:a4:
         91:ea:4b:64:32:71:68:91:ac:49:42:32:fd:6a:d3:26:b5:60:
         1d:a7:75:4b:e6:a0:91:31:56:fb:bd:f3:09:26:9b:3d:46:23:
         d7:11:c5:e6:3a:20:5d:05:d5:73:11:4e:1f:d4:0c:e9:46:cc:
         bd:4d:09:2b:02:7b:62:98:c4:da:cd:35:d7:f8:1f:2c:b4:5b:
         50:fc:8e:7e:0b:89:2c:f4:88:12:f7:1c:b9:1e:e0:34:38:ba:
         dc:07:7f:d5:db:e5:5a:2e:75:84:8a:b7:73:41:dd:67:a7:d1:
         87:ca:6f:58:00:31:90:8a:31:30:95:6e:ae:82:c7:6a:99:51:
         e4:46:33:4b:1c:ba:52:0c:eb:8a:f2:8c:3a:f1:36:3c:26:ec:
         20:fa:6f:93:0f:68:ae:a3:99:17:7a:11:a0:40:64:16:5e:2f:
         03:3d:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----