Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3134342e302f32342d3234203d3e20313431303631.roa
File:                     3130332e3135352e3134342e302f32342d3234203d3e20313431303631.roa (raw, json)
Hash identifier:          vMQGBp6L3/hKPicwldgSkfDpZm4Z+CxtGDmuqQFimT4=
Subject key identifier:   4A:C0:B7:58:A7:02:E6:47:3C:C6:BB:6E:D5:BE:A7:F5:08:AC:A1:4D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       21D9DDBD9048B0C10DD305DCAAD4457D31F12514
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3134342e302f32342d3234203d3e20313431303631.roa
Signing time:             Fri 12 Nov 2021 04:00:01 +0000
ROA not before:           Fri 12 Nov 2021 03:55:01 +0000
ROA not after:            Sat 12 Nov 2022 04:00:01 +0000
asID:                     141061
IP address blocks:        103.155.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d9:dd:bd:90:48:b0:c1:0d:d3:05:dc:aa:d4:45:7d:31:f1:25:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 03:55:01 2021 GMT
            Not After : Nov 12 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:20:96:80:70:41:06:68:2f:71:32:fc:fc:
                    7f:ac:7f:55:72:63:23:74:8d:ff:48:45:3f:5d:5d:
                    07:f8:08:67:63:be:d3:9e:8c:e4:e1:bb:25:b5:68:
                    f4:96:a7:39:60:18:ed:e9:1b:d8:08:7c:d7:e3:2a:
                    00:70:31:3d:74:8c:f5:d6:58:1e:2f:1b:12:30:81:
                    e2:9c:08:c8:06:02:30:35:cb:53:bf:74:d4:14:cb:
                    0e:33:da:a4:36:e4:05:65:d7:b9:23:e0:99:49:2a:
                    30:79:3b:1a:04:0f:0b:32:83:f0:89:d9:39:e2:1b:
                    24:8d:44:e7:2f:c3:a9:83:c4:0f:67:92:ba:44:9d:
                    9f:3c:11:87:4e:98:fb:38:a9:90:e8:7e:f2:e8:94:
                    ea:40:96:f1:ee:0e:11:4d:b7:39:4b:d8:fe:13:51:
                    5a:1a:ce:4f:56:42:14:24:07:f5:9c:89:30:02:83:
                    9a:ea:a4:f7:b4:c9:eb:e6:2a:a0:11:58:f9:f4:21:
                    46:75:6e:94:78:1f:04:b4:01:73:d4:c3:d6:a4:7f:
                    57:cc:14:97:bb:ad:cf:91:03:e8:26:b1:f3:2d:36:
                    14:f5:8a:c3:0f:60:2a:32:c0:69:91:3d:b9:1a:8e:
                    3f:ca:ca:6d:ea:73:76:cf:ec:fb:24:75:ac:fa:42:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C0:B7:58:A7:02:E6:47:3C:C6:BB:6E:D5:BE:A7:F5:08:AC:A1:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3134342e302f32342d3234203d3e20313431303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:9b:50:20:19:90:8f:7c:8e:18:b9:c3:76:83:a9:39:55:
         ca:f4:87:9d:fc:05:bb:70:b2:e3:c6:c0:bf:4f:bd:a3:5a:08:
         81:36:71:79:ee:18:80:85:a1:ff:c6:e7:af:e6:42:24:d4:b1:
         72:26:73:2e:2e:a2:43:bb:40:62:46:c2:60:31:8c:72:ba:a5:
         46:f3:64:bd:5d:0c:bc:f0:f1:a9:a7:40:81:58:31:e7:b9:61:
         57:8b:75:da:9a:d6:32:5d:e0:88:6d:6a:64:40:27:ef:30:40:
         c1:9f:6a:a5:8c:16:b6:c7:72:8a:9f:4a:b4:75:34:6d:c7:0e:
         32:10:f7:b7:97:a1:9a:46:6d:6f:7a:4e:7a:f4:fc:52:8e:79:
         93:cb:a6:e2:d9:69:0f:bd:c8:bf:e4:be:f1:26:7d:1c:26:71:
         3b:ea:37:b2:0c:95:9e:33:df:bc:4c:31:3b:ba:c6:85:a1:bc:
         c5:5b:57:92:37:a6:17:32:52:09:b8:37:66:33:16:03:8e:18:
         6f:32:b6:11:73:66:e4:32:d6:87:61:ff:fa:c1:16:30:4c:f4:
         fd:06:55:13:4c:b4:2f:20:3b:9a:af:9a:47:29:d3:23:a1:d9:
         8f:94:9c:a8:a5:cc:3d:15:e9:ff:3b:9b:ff:8e:e9:7f:14:12:
         87:9b:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----