Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36322e302f32332d3234203d3e20313430343433.roa
File:                     3130332e3136302e36322e302f32332d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          xJZmUXMSWgSMF2xlseoPpfsa1OjLtc9KFY4CSI6WaTk=
Subject key identifier:   1B:63:B5:46:0F:2E:E5:3A:C6:5C:79:C7:21:EC:C9:F1:1E:6C:C0:2B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       73D966DDDEC2A3F9AA426B07074E0E1407AB8087
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36322e302f32332d3234203d3e20313430343433.roa
Signing time:             Wed 01 Dec 2021 09:00:00 +0000
ROA not before:           Wed 01 Dec 2021 08:55:00 +0000
ROA not after:            Thu 01 Dec 2022 09:00:00 +0000
asID:                     140443
IP address blocks:        103.160.62.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d9:66:dd:de:c2:a3:f9:aa:42:6b:07:07:4e:0e:14:07:ab:80:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  1 08:55:00 2021 GMT
            Not After : Dec  1 09:00:00 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:af:cc:9c:6e:3a:0e:10:2d:41:fd:1c:98:
                    c8:5b:37:ea:cc:52:2c:47:86:3b:d5:bf:d5:90:e8:
                    94:5e:12:12:e5:cd:c5:16:59:ec:82:15:a6:81:39:
                    ea:04:b4:4d:7a:aa:6d:44:a3:d8:21:b4:e9:bd:ac:
                    4f:10:ae:59:3b:f8:04:fb:f9:64:c9:db:3d:3b:4e:
                    e6:e8:35:bf:9f:47:6a:09:0c:3c:83:21:6c:be:5f:
                    7c:3c:46:6d:88:74:b4:ef:a6:c6:40:8e:29:e5:bf:
                    2f:13:71:6b:e0:c8:43:59:69:89:0e:7a:f5:46:de:
                    4e:e6:eb:e9:59:f4:58:13:63:4b:a2:e0:2e:c4:da:
                    60:38:77:f4:79:75:fa:e6:1e:b9:42:61:09:05:05:
                    fe:56:e6:39:ad:ce:5f:71:7c:c7:e4:59:b6:3e:3b:
                    a7:dc:3c:3c:ae:ee:14:35:d6:6a:a9:74:66:de:51:
                    4e:dd:78:6f:d7:84:44:bc:9e:af:b1:eb:59:64:be:
                    a5:7b:e5:32:a4:92:b2:f5:28:f3:8a:0f:a7:10:07:
                    e2:aa:3d:2b:de:33:18:aa:52:c2:de:d3:c3:1e:8a:
                    6b:e1:ee:e2:e8:9e:84:70:55:08:02:9a:63:0e:57:
                    bb:f3:2f:36:65:b6:b7:4f:59:6b:8a:ee:1c:41:4c:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:63:B5:46:0F:2E:E5:3A:C6:5C:79:C7:21:EC:C9:F1:1E:6C:C0:2B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36322e302f32332d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:66:eb:e2:3b:fc:a4:dd:53:99:1d:07:7a:24:15:bc:3e:d1:
         e9:8b:b9:84:68:49:cc:4f:9b:b0:03:6f:09:29:9b:57:28:1d:
         f4:eb:ca:e5:35:37:59:f6:92:85:48:3d:b6:6e:75:83:7f:97:
         77:91:99:e0:35:34:4d:c5:7f:e2:2d:38:39:e3:34:e3:78:d3:
         63:f9:0f:1b:e8:8c:00:9d:52:d4:07:cf:5a:4b:7d:b8:4a:29:
         f0:a4:84:e4:8e:fd:48:98:34:7d:c7:b2:19:66:75:6d:c3:53:
         8d:d5:23:8e:61:bd:77:dc:fc:27:09:d7:7a:0b:67:b2:36:d3:
         49:d1:07:15:1d:f6:64:62:67:6d:32:7d:d6:0a:4c:52:84:1a:
         34:da:d3:7b:99:ce:4a:5e:ff:e5:e2:d2:39:ae:71:22:ab:49:
         e4:bd:c7:34:da:1d:9a:e9:f7:2a:60:f3:0e:bb:cf:f4:57:6e:
         f7:4a:ef:bb:8a:b8:36:78:84:bf:45:7d:5c:66:f0:da:d5:87:
         7f:07:01:60:ea:de:ef:04:41:a1:fe:3d:62:4c:40:3f:37:aa:
         07:1c:af:c5:41:2d:02:4c:2e:0a:07:c6:2a:01:43:87:a4:91:
         30:cb:c8:4f:d5:d2:ad:10:50:cd:37:dc:15:82:c5:e0:60:df:
         ac:ec:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----