Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31362e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135302e31362e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          j+zf19KvDq9r8yphzM3MCtXqiBW2AhkDziy3D4MwN6Q=
Subject key identifier:   4A:3C:09:E2:1A:58:83:BB:BD:81:21:46:56:9C:3D:68:DB:54:43:FA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6850CA720BFF15C814A13584D320D6659B7A6D4E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31362e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:01 +0000
ROA not before:           Fri 05 Nov 2021 16:55:01 +0000
ROA not after:            Sat 05 Nov 2022 17:00:01 +0000
asID:                     133815
IP address blocks:        103.150.16.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:ca:72:0b:ff:15:c8:14:a1:35:84:d3:20:d6:65:9b:7a:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:01 2021 GMT
            Not After : Nov  5 17:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:6a:fb:af:28:e0:ff:1f:e6:ea:cf:e4:f7:
                    17:e1:ce:28:6e:0d:bf:6b:08:04:57:8b:f5:dd:7f:
                    63:96:f9:c5:a7:9b:81:0f:b4:00:98:cd:1d:ae:b3:
                    32:b2:cb:fa:84:70:22:85:cd:3d:15:45:ee:2e:4f:
                    fd:b6:50:7c:48:90:99:a3:9d:c2:83:bc:3f:9e:6b:
                    60:4b:8c:bb:4c:48:ba:4c:73:5a:16:df:8b:03:22:
                    06:77:5c:83:20:5a:82:d1:3b:8c:6c:6e:33:0b:8b:
                    1e:41:1c:67:dc:81:df:5a:06:6d:6e:51:82:1c:90:
                    26:9a:ae:27:02:b9:0c:db:98:c8:57:98:0c:7d:61:
                    40:16:bf:79:81:de:e6:bb:4c:3b:e2:3a:0c:d5:e6:
                    84:d2:39:5c:ef:bf:01:46:b3:c4:6d:5e:c4:4e:4d:
                    47:39:0b:1b:42:d5:97:e5:99:9d:bb:0e:a9:5b:93:
                    59:b7:80:ce:41:6c:cb:50:af:1a:3f:87:af:00:24:
                    5f:aa:22:05:56:87:91:ac:a4:8c:5f:f4:b4:07:53:
                    f7:4b:cf:73:3f:cb:e8:d6:9f:0c:24:66:39:c9:de:
                    ea:9a:3c:ab:41:7e:27:df:d7:34:f8:28:ed:47:5e:
                    c7:b2:74:4c:cf:9e:ef:00:e2:93:c6:e8:c8:ee:6c:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:09:E2:1A:58:83:BB:BD:81:21:46:56:9C:3D:68:DB:54:43:FA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31362e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:0a:e7:64:90:d3:19:5a:5d:d1:1b:a5:9c:8d:31:ec:6b:
         e8:99:59:f4:3c:04:07:ae:9c:88:85:bd:20:2e:fe:f6:17:e9:
         a6:13:7a:e2:a8:ce:4d:04:27:77:11:dd:38:d8:3e:9d:f4:6a:
         b0:fe:87:77:d6:0e:6d:cf:c5:06:31:bc:55:79:4c:4a:87:22:
         09:56:ad:92:0b:2e:3a:6e:fa:ca:a0:79:99:e5:1d:d0:6f:c3:
         bc:92:1e:03:a5:3f:2a:db:29:d7:98:16:39:55:15:b1:e0:70:
         3b:31:af:d8:32:ab:2a:24:0e:9e:db:56:db:4d:a9:33:19:a6:
         83:82:85:ab:4b:79:6a:0e:76:d4:91:5e:ec:48:98:55:0b:43:
         ed:76:3d:53:e2:b8:4a:7a:cb:69:33:f4:14:13:cf:4c:f1:fd:
         96:42:59:12:f1:c9:70:38:67:52:dc:85:9f:3e:a5:a1:06:4d:
         98:2b:f6:26:59:dd:2d:61:78:6e:9f:50:a9:77:95:9d:98:05:
         25:11:2a:84:73:94:de:73:3b:4c:84:a7:91:4f:82:f2:7e:8b:
         35:b7:1d:9c:be:2b:c3:c8:6b:53:b4:ac:1a:15:0a:29:a9:ff:
         2a:2d:3d:77:24:96:58:3e:19:f3:c6:9d:5a:01:1c:a5:52:4b:
         1c:2a:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----