Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3139342e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135312e3139342e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          wJT5mKLHhSzpttjxNazIuZm09GRNg6HZkcwhAMDCPiA=
Subject key identifier:   12:01:C1:B1:8B:EF:7D:12:7C:87:15:56:A3:BE:F2:D3:A2:99:1C:00
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19D72F48BF71FFAC43503A3672B0418E8F31B5F4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3139342e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:01 +0000
ROA not before:           Fri 05 Nov 2021 16:55:01 +0000
ROA not after:            Sat 05 Nov 2022 17:00:01 +0000
asID:                     133815
IP address blocks:        103.151.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:2f:48:bf:71:ff:ac:43:50:3a:36:72:b0:41:8e:8f:31:b5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:01 2021 GMT
            Not After : Nov  5 17:00:01 2022 GMT
        Subject: CN=3082010A0282010100BD96FD4580DB81DF3946DFCF466909117AFA07EF9D717CA2CDC750BE9AC96E70BD2FD50842B5A8992627238D07891ED705061C7B3E7051B91AF4F5631DD88904D70A4133FA866EBC2DB569CB4200E74114FAD0E5B589BEB552B6B26EA384F441FB374075F19EA57537CB81C4E35AABB8DDC690ADBCFC77775E682188B67D9D68798C065E9FDC709EAAEE7FF23E043E49002FB1DC035AD832EDB4701EE71CE42549830B2E89D4B4F1AD1EF5A334B70C5D7F388324D51C3DFEE1BE60AC71044690753F1EDB36130C6D8D68E7A788DEB4CDE3B30C9F6157024A979A5DD046DBF091183066000B149AB34C27F03FE829A82DAD44639ADE9DB825ACC6BAB0041E39EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:fd:45:80:db:81:df:39:46:df:cf:46:69:
                    09:11:7a:fa:07:ef:9d:71:7c:a2:cd:c7:50:be:9a:
                    c9:6e:70:bd:2f:d5:08:42:b5:a8:99:26:27:23:8d:
                    07:89:1e:d7:05:06:1c:7b:3e:70:51:b9:1a:f4:f5:
                    63:1d:d8:89:04:d7:0a:41:33:fa:86:6e:bc:2d:b5:
                    69:cb:42:00:e7:41:14:fa:d0:e5:b5:89:be:b5:52:
                    b6:b2:6e:a3:84:f4:41:fb:37:40:75:f1:9e:a5:75:
                    37:cb:81:c4:e3:5a:ab:b8:dd:c6:90:ad:bc:fc:77:
                    77:5e:68:21:88:b6:7d:9d:68:79:8c:06:5e:9f:dc:
                    70:9e:aa:ee:7f:f2:3e:04:3e:49:00:2f:b1:dc:03:
                    5a:d8:32:ed:b4:70:1e:e7:1c:e4:25:49:83:0b:2e:
                    89:d4:b4:f1:ad:1e:f5:a3:34:b7:0c:5d:7f:38:83:
                    24:d5:1c:3d:fe:e1:be:60:ac:71:04:46:90:75:3f:
                    1e:db:36:13:0c:6d:8d:68:e7:a7:88:de:b4:cd:e3:
                    b3:0c:9f:61:57:02:4a:97:9a:5d:d0:46:db:f0:91:
                    18:30:66:00:0b:14:9a:b3:4c:27:f0:3f:e8:29:a8:
                    2d:ad:44:63:9a:de:9d:b8:25:ac:c6:ba:b0:04:1e:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:C1:B1:8B:EF:7D:12:7C:87:15:56:A3:BE:F2:D3:A2:99:1C:00
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3139342e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:25:4a:99:d6:f8:21:05:fb:1a:5d:ca:13:88:f3:98:e7:
         0a:81:10:d2:d5:18:e6:08:f9:29:47:20:1d:a1:0a:13:a5:8a:
         76:ee:5b:78:1d:c6:c6:b3:fc:c4:27:aa:3f:d7:e3:d4:bd:7d:
         e9:b7:9d:54:63:e1:43:f6:c5:d7:33:2f:cb:c2:b1:0c:9a:ae:
         73:18:fc:10:3a:13:e1:f5:75:d3:5f:e6:3e:bb:db:c6:91:c5:
         ba:03:5f:11:e5:ff:12:4d:8b:3c:2f:dc:cc:db:1c:05:b0:4e:
         48:19:41:27:ed:af:52:39:ca:bf:19:de:aa:39:2c:30:1d:88:
         3b:76:42:3c:b2:98:2f:30:0d:7e:b4:d7:95:df:ca:db:4a:8f:
         a3:ee:db:e7:e9:57:c6:c7:21:b2:20:02:99:58:a2:d8:4d:67:
         8d:67:1d:90:e4:bd:de:ed:41:c9:56:5f:ad:e1:12:3f:f1:58:
         69:98:35:55:f7:a5:85:d2:9c:b0:71:1d:f8:77:bf:ac:c7:51:
         ae:46:86:c6:50:88:0b:be:6c:f9:a3:c8:a4:c4:5c:d4:37:67:
         ee:38:73:c0:aa:ef:dd:3b:23:95:1c:27:09:23:d5:33:ec:c8:
         a5:e2:a2:23:0c:e8:2e:f3:61:c0:5a:ff:98:75:a4:33:ef:a3:
         3e:01:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----