Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3137382e302f32332d3234203d3e20313431353932.roa
File:                     3130332e3136302e3137382e302f32332d3234203d3e20313431353932.roa (raw, json)
Hash identifier:          dOWpZ6oOPx46NT+t3Zli3JRD+ezqbAoTjMLhs/vXlwI=
Subject key identifier:   5D:A8:67:60:EB:FA:F0:A9:97:39:51:0A:F3:BD:CB:0B:84:E9:CB:BA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       09396032A407B75C9BFBB197C1EE17F4F7AD8824
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3137382e302f32332d3234203d3e20313431353932.roa
Signing time:             Thu 25 Nov 2021 09:00:01 +0000
ROA not before:           Thu 25 Nov 2021 08:55:01 +0000
ROA not after:            Fri 25 Nov 2022 09:00:01 +0000
asID:                     141592
IP address blocks:        103.160.178.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:60:32:a4:07:b7:5c:9b:fb:b1:97:c1:ee:17:f4:f7:ad:88:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 25 08:55:01 2021 GMT
            Not After : Nov 25 09:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:9c:b5:1f:9e:e2:99:9a:90:41:69:27:ce:
                    b1:d0:0a:3d:14:d1:9e:55:69:42:1b:40:3c:8a:11:
                    0a:4f:20:24:fd:6e:6a:ca:34:ea:83:11:e0:1d:01:
                    9a:65:80:78:04:2e:54:af:37:c9:db:95:17:f3:9e:
                    91:7f:a0:3b:6d:a7:d1:a4:b1:34:78:5d:d4:6a:93:
                    e5:30:0c:ab:be:84:44:1b:fa:32:82:cd:84:63:d7:
                    c6:42:c7:62:93:93:2e:f7:e7:31:93:7a:ca:e8:ec:
                    9a:57:5d:05:7b:7e:b3:cb:00:f4:83:86:65:a9:8f:
                    41:e7:5b:a5:45:18:eb:df:f8:c0:8d:f0:fb:ba:78:
                    87:b2:7a:91:15:5d:60:17:e1:0e:93:93:a9:ac:a0:
                    8c:37:3f:4b:25:1c:f1:a5:11:54:6f:af:fe:e5:16:
                    a0:6e:18:ec:81:1b:63:70:11:0d:07:af:aa:d8:86:
                    6d:f2:85:7b:49:c9:b8:58:f1:1b:a3:94:e8:d2:9f:
                    e4:39:ba:da:8c:8b:83:2a:8e:8e:ab:d2:ab:0a:38:
                    d6:b5:b9:58:96:dc:9b:9a:ac:e2:bc:35:86:e8:a8:
                    55:90:9b:2b:be:21:48:db:4f:81:f3:f6:5c:c2:0d:
                    05:8a:0b:3e:da:34:da:90:d3:9c:cf:50:12:65:37:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:67:60:EB:FA:F0:A9:97:39:51:0A:F3:BD:CB:0B:84:E9:CB:BA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3137382e302f32332d3234203d3e20313431353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:ef:b1:28:b1:86:94:80:fa:54:f7:45:13:60:28:32:82:
         5d:e1:6d:55:f0:3d:70:0e:b2:c6:4a:d1:ab:88:9e:c8:69:a7:
         bd:b8:ce:77:ea:63:05:0c:cb:95:4d:22:72:6b:e2:26:38:51:
         c6:34:92:1b:36:b4:e7:67:2d:55:a4:29:b7:1f:09:85:1e:a9:
         63:e6:fb:d4:b9:07:2e:fb:df:44:45:15:50:d1:4a:94:ff:b1:
         da:08:14:cb:dc:6d:a9:d3:38:ab:a0:09:42:88:5e:ac:f0:70:
         4c:28:81:dd:4e:14:90:a1:9e:fd:7d:4a:91:c8:32:c6:18:ca:
         a6:00:40:76:63:77:39:10:e4:a6:b3:b9:0a:21:2b:d9:e3:cc:
         ce:11:69:fb:b5:de:2b:84:29:30:b2:47:af:2e:1e:09:8d:f6:
         81:7a:7e:ee:94:71:4e:93:ed:3b:04:a2:bc:e3:bf:2a:3e:ce:
         0b:83:bc:62:ba:c5:2b:85:10:d4:43:0d:94:db:66:87:0d:04:
         b5:4e:29:be:47:4d:61:18:04:03:aa:0d:e7:1e:c4:91:e4:24:
         65:c0:99:a6:b3:e3:84:dd:97:fa:90:5f:58:73:35:0b:b3:6c:
         02:5d:3a:83:ff:00:5c:93:c7:28:71:03:2d:ed:d5:49:f5:ff:
         2c:9f:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----