Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3133322e302f32322d3234203d3e20313333383030.roa
File:                     3130332e39332e3133322e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          6Qdn2eLnftgeB5AjzO1Qc81sSJmMsosPeYuO5xhQUN4=
Subject key identifier:   B5:DE:63:77:0B:12:39:0E:46:C0:E8:C7:A9:F6:4D:67:27:F4:62:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3170BF1D3679AFC83EA1456F96C5F77BD3698759
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3133322e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:01 +0000
ROA not before:           Sat 09 Oct 2021 03:55:01 +0000
ROA not after:            Sun 09 Oct 2022 04:00:01 +0000
asID:                     133800
IP address blocks:        103.93.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:bf:1d:36:79:af:c8:3e:a1:45:6f:96:c5:f7:7b:d3:69:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:01 2021 GMT
            Not After : Oct  9 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:86:9b:7d:a0:14:ca:84:78:7a:58:b1:dd:
                    99:a3:07:f7:c1:82:ed:3a:b6:c3:cf:5a:e8:86:c2:
                    cd:1d:44:2c:ac:23:4d:de:9d:db:13:da:7c:2a:2f:
                    50:7c:e8:ce:28:77:49:b6:ad:1f:f3:92:ef:1f:11:
                    c4:ca:c0:af:46:92:55:75:f8:7f:52:bc:67:98:a5:
                    7f:e7:82:2d:5f:06:20:48:b1:73:61:20:ba:da:c8:
                    48:bf:e8:df:c0:7f:79:f3:84:70:cf:88:14:d6:01:
                    34:f1:d2:53:09:d3:57:25:79:88:c8:a9:f0:6a:15:
                    7c:7d:8e:e4:c2:fd:4a:c5:02:18:c9:7d:2b:6c:9a:
                    67:9b:b3:c5:b3:8d:73:e7:30:17:b8:f0:a8:8b:b8:
                    e1:32:68:c0:2c:e0:8b:94:c9:94:14:64:2e:95:de:
                    f7:19:f4:a5:f9:2b:a2:d4:d1:7c:f6:5a:33:c9:87:
                    5d:9d:a1:98:73:44:91:cf:79:ab:ac:74:8d:40:90:
                    6e:9a:c2:7a:e4:99:65:5f:f8:50:8d:46:d3:77:b4:
                    ed:bc:8f:a1:46:a1:42:2f:59:1c:cf:e5:aa:cd:06:
                    e9:7d:82:75:85:52:88:9d:c1:6a:c5:85:96:36:87:
                    75:89:23:bd:b0:21:b8:bc:16:dc:e9:79:e7:36:c5:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:63:77:0B:12:39:0E:46:C0:E8:C7:A9:F6:4D:67:27:F4:62:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e3133322e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:09:41:9a:04:c5:7a:5c:e8:13:2f:cb:82:18:dd:57:a4:
         6e:a6:41:ae:ce:52:cd:0b:c5:48:13:8e:26:62:67:62:31:d2:
         f1:6d:dd:b7:f4:0e:fc:16:e1:2a:b6:05:3b:c3:bc:f2:8f:cf:
         9b:72:64:5e:9b:f8:51:c2:f8:a8:5f:fd:81:b1:ea:b5:e9:b8:
         20:0e:35:c8:c3:f3:fe:fd:0a:bf:06:44:94:2a:6f:12:a6:cf:
         8d:19:dd:0b:69:ce:ae:a6:c1:ba:d7:83:dd:3e:b5:2c:65:7b:
         06:48:cd:72:8d:d9:ec:2b:c8:23:87:1e:70:0c:df:60:67:06:
         f3:2a:ca:9c:69:3d:7d:b1:d2:19:5a:11:ae:a7:d4:fa:61:cf:
         24:5a:5d:83:a1:19:e3:b0:05:9a:18:e9:6e:d3:e2:e8:d8:2c:
         68:46:e3:85:ec:58:a5:95:26:a1:95:37:d4:53:ef:9e:0e:24:
         8f:cf:02:00:81:4d:a3:be:f6:6a:e3:bc:f0:5e:af:91:fa:3e:
         ba:5a:9f:25:41:4b:c8:45:0c:2d:1f:af:1b:40:b4:90:f3:a0:
         5a:03:72:23:d3:08:b3:a3:85:85:4c:d8:ff:e5:e2:05:e0:22:
         bd:f4:7b:39:32:fc:4f:44:72:20:92:1a:a7:39:ae:57:4a:2f:
         15:ef:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----