Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3131342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135372e3131342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          yFeKgYm+mSbCANU/+ItiXymz53z3Ag7ya/5VXQI34NY=
Subject key identifier:   AC:61:3D:B8:BA:33:18:CD:0B:94:43:B1:22:66:47:B4:BC:97:4A:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57D4697ECB26A642B9FE4FF387E96A9377CF61B1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3131342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 16 Nov 2021 05:00:01 +0000
ROA not before:           Tue 16 Nov 2021 04:55:01 +0000
ROA not after:            Wed 16 Nov 2022 05:00:01 +0000
asID:                     17995
IP address blocks:        103.157.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:69:7e:cb:26:a6:42:b9:fe:4f:f3:87:e9:6a:93:77:cf:61:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 16 04:55:01 2021 GMT
            Not After : Nov 16 05:00:01 2022 GMT
        Subject: CN=3082010A0282010100CE510B94D70007C2EE234BFB8A1E4049FA20DBEE4725D2456FDADE836AF3C77BE95BBF7B51DD8F44DC3B932E9E04288C311CD3DDBED056BA9641274FBE0BEAE7CA0015F8029AB62270A2C09C56E28D3E1C90C221CB76B262A3B972678BFFCE42F2A6DB34BED8C4F50B777A33D0458EAE5149205C4F5F388180040886DE12AF23C985C4C8B6753C2C1C01D8A9C6B2DD56E6E42C82AC15A1C6C875B1EF45168C78127450E770C35B31FA2DB4583C2A85A98A570D98B08ADD795235884A2B403940C69E684CA455124EA7EA774080719612C36E8CF92FB2B49F8936C50AF3C33F616346ACA75620EEE348733721FD79F039657088F8F7D86A36ABDA226AB38C9D7D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:0b:94:d7:00:07:c2:ee:23:4b:fb:8a:1e:
                    40:49:fa:20:db:ee:47:25:d2:45:6f:da:de:83:6a:
                    f3:c7:7b:e9:5b:bf:7b:51:dd:8f:44:dc:3b:93:2e:
                    9e:04:28:8c:31:1c:d3:dd:be:d0:56:ba:96:41:27:
                    4f:be:0b:ea:e7:ca:00:15:f8:02:9a:b6:22:70:a2:
                    c0:9c:56:e2:8d:3e:1c:90:c2:21:cb:76:b2:62:a3:
                    b9:72:67:8b:ff:ce:42:f2:a6:db:34:be:d8:c4:f5:
                    0b:77:7a:33:d0:45:8e:ae:51:49:20:5c:4f:5f:38:
                    81:80:04:08:86:de:12:af:23:c9:85:c4:c8:b6:75:
                    3c:2c:1c:01:d8:a9:c6:b2:dd:56:e6:e4:2c:82:ac:
                    15:a1:c6:c8:75:b1:ef:45:16:8c:78:12:74:50:e7:
                    70:c3:5b:31:fa:2d:b4:58:3c:2a:85:a9:8a:57:0d:
                    98:b0:8a:dd:79:52:35:88:4a:2b:40:39:40:c6:9e:
                    68:4c:a4:55:12:4e:a7:ea:77:40:80:71:96:12:c3:
                    6e:8c:f9:2f:b2:b4:9f:89:36:c5:0a:f3:c3:3f:61:
                    63:46:ac:a7:56:20:ee:e3:48:73:37:21:fd:79:f0:
                    39:65:70:88:f8:f7:d8:6a:36:ab:da:22:6a:b3:8c:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:3D:B8:BA:33:18:CD:0B:94:43:B1:22:66:47:B4:BC:97:4A:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e3131342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:56:f6:21:d6:15:9f:42:43:cc:e7:38:bd:1b:43:3e:a5:37:
         ff:8c:f1:9d:9a:de:40:69:b1:e9:d4:4d:d1:98:6a:91:78:df:
         c7:38:43:26:47:75:c9:90:b4:b2:2e:25:3c:cb:a8:d2:20:ae:
         29:cf:6b:51:5c:b9:e2:fc:95:a8:29:15:66:d3:c2:ed:ad:ee:
         26:3f:4f:6d:d2:b1:da:11:92:a8:3e:04:56:aa:e5:ef:82:44:
         df:8a:ea:18:1d:78:3a:e3:61:10:42:40:6a:a0:8e:95:21:39:
         19:92:5e:e3:c7:02:68:0f:b6:e2:4e:30:f2:c2:a3:84:17:90:
         3f:53:21:18:32:23:c2:32:52:4e:fe:19:07:47:df:2c:da:c7:
         34:60:9b:02:e5:76:4e:37:c3:ce:42:73:b3:ed:40:66:78:d2:
         19:84:da:a5:64:41:1c:4e:a7:2c:f1:c9:e6:55:7f:03:70:c2:
         ff:d8:8f:0f:ab:24:33:56:8e:ea:2e:9c:9e:6f:54:46:c4:1b:
         c7:b7:45:85:fe:bc:73:37:24:8b:75:51:18:5e:26:fe:ce:65:
         8b:26:46:f6:b4:45:82:2c:58:cc:0c:87:8f:2d:cd:a5:44:ad:
         02:ad:6c:2b:5e:20:12:10:85:6b:5e:36:07:25:5e:1a:fb:a8:
         0a:17:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----