Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e33342e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135302e33342e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          asKL2p5/gfY1ImfLLUkebsKBZsQxxDwA8TYRDiVv7LE=
Subject key identifier:   16:F7:A8:D1:0C:F8:9C:65:ED:CF:80:56:25:C8:67:C3:C0:FC:D6:84
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       217CE986F9C428C701060C35A38D3B65A7FF64C1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e33342e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:02 +0000
ROA not before:           Fri 05 Nov 2021 16:55:02 +0000
ROA not after:            Sat 05 Nov 2022 17:00:02 +0000
asID:                     133815
IP address blocks:        103.150.34.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:e9:86:f9:c4:28:c7:01:06:0c:35:a3:8d:3b:65:a7:ff:64:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:02 2021 GMT
            Not After : Nov  5 17:00:02 2022 GMT
        Subject: CN=3082010A0282010100A1AA520F97B11FC1569CCA7FD8E505A50ED17035C77F01E0AE51C552733A7DAB11284D6D96DA2EAD707A8277916DFDD6D553CCB256182F55F3DF89307F6C9A605CCB60C452F716349BD61D2F286BCE8ECEE7563EAB384FBF85B1533C5BF1DF08A4A0C3CE413261E210E69AD4F3E140763D7FE410B71CBDB304B7799FA935A56FA96934A4D67211A169F4EEB1F27C48984095ADD80B356BC705ABEF9AF6C958EF2DF04AFA0EA0FB41E5A0FEBE3EB19688581B3525B67927051D8A9F2D31BFCDA418E72E6B41B0E79531CA2CCDC3C509A10663A50C411929897F58C0746E816A71B5BF499EF9A6143E713134CAC3FDAE585ECF5A8A982EF5FB457D35AADDD07D350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:52:0f:97:b1:1f:c1:56:9c:ca:7f:d8:e5:
                    05:a5:0e:d1:70:35:c7:7f:01:e0:ae:51:c5:52:73:
                    3a:7d:ab:11:28:4d:6d:96:da:2e:ad:70:7a:82:77:
                    91:6d:fd:d6:d5:53:cc:b2:56:18:2f:55:f3:df:89:
                    30:7f:6c:9a:60:5c:cb:60:c4:52:f7:16:34:9b:d6:
                    1d:2f:28:6b:ce:8e:ce:e7:56:3e:ab:38:4f:bf:85:
                    b1:53:3c:5b:f1:df:08:a4:a0:c3:ce:41:32:61:e2:
                    10:e6:9a:d4:f3:e1:40:76:3d:7f:e4:10:b7:1c:bd:
                    b3:04:b7:79:9f:a9:35:a5:6f:a9:69:34:a4:d6:72:
                    11:a1:69:f4:ee:b1:f2:7c:48:98:40:95:ad:d8:0b:
                    35:6b:c7:05:ab:ef:9a:f6:c9:58:ef:2d:f0:4a:fa:
                    0e:a0:fb:41:e5:a0:fe:be:3e:b1:96:88:58:1b:35:
                    25:b6:79:27:05:1d:8a:9f:2d:31:bf:cd:a4:18:e7:
                    2e:6b:41:b0:e7:95:31:ca:2c:cd:c3:c5:09:a1:06:
                    63:a5:0c:41:19:29:89:7f:58:c0:74:6e:81:6a:71:
                    b5:bf:49:9e:f9:a6:14:3e:71:31:34:ca:c3:fd:ae:
                    58:5e:cf:5a:8a:98:2e:f5:fb:45:7d:35:aa:dd:d0:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:A8:D1:0C:F8:9C:65:ED:CF:80:56:25:C8:67:C3:C0:FC:D6:84
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e33342e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:e5:63:c5:94:83:be:ce:57:f2:a5:74:9a:f7:35:3f:58:
         a1:23:d2:cb:8b:be:7e:ca:8c:36:df:9c:ed:f7:6c:53:8a:5c:
         35:70:f5:a6:6e:f9:3a:0a:16:15:28:8d:8d:73:a5:ca:5a:08:
         94:4e:53:da:ea:a6:96:a3:85:24:ef:77:2b:d7:fb:87:49:60:
         69:c3:cc:11:ba:4d:3b:11:28:56:a4:5c:92:5e:29:cf:35:39:
         25:bb:d4:9c:72:f7:89:dc:b0:76:b9:b3:95:09:be:8c:ce:4a:
         8b:b3:96:85:db:c4:9d:16:9a:21:ff:36:ad:61:c9:16:a5:95:
         45:17:43:27:20:60:e6:f7:a6:b3:4f:65:59:6a:03:04:3e:1e:
         af:2e:52:46:9e:16:c3:2b:b6:d1:24:70:0c:2c:eb:36:35:b9:
         dd:e3:e2:1f:df:7f:47:6e:d6:b8:0a:96:b3:ec:50:7f:05:69:
         3f:58:77:66:b4:d7:ce:f1:7e:02:83:e9:7c:aa:63:cc:0f:af:
         fa:c1:ef:b0:91:f4:3b:10:cc:36:9f:5f:ae:6c:78:f3:88:9b:
         f7:72:13:d8:2e:e8:78:f7:9e:1a:93:44:9b:ca:61:ee:d0:a4:
         f9:6a:61:1a:3e:af:c6:b3:40:b4:38:a5:12:ad:ba:16:5e:8c:
         da:3b:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----