Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/3131342e3139382e3234312e302f32342d3234203d3e203535363832.roa
File:                     3131342e3139382e3234312e302f32342d3234203d3e203535363832.roa (raw, json)
Hash identifier:          TE/NEj3HzYshUnBucfToHTADOxto1Nd0WnORUlmRbM8=
Subject key identifier:   74:60:8B:6C:E3:C3:51:27:36:14:79:86:06:4F:A4:91:61:ED:A6:EB
Certificate issuer:       /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E
Certificate serial:       7288DE750B14FF4EAAD5296E60390B9C8E887D46
Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/3131342e3139382e3234312e302f32342d3234203d3e203535363832.roa
Signing time:             Wed 13 Apr 2022 12:00:01 +0000
ROA not before:           Wed 13 Apr 2022 11:55:01 +0000
ROA not after:            Wed 12 Apr 2023 12:00:01 +0000
asID:                     55682
IP address blocks:        114.198.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:88:de:75:0b:14:ff:4e:aa:d5:29:6e:60:39:0b:9c:8e:88:7d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E
        Validity
            Not Before: Apr 13 11:55:01 2022 GMT
            Not After : Apr 12 12:00:01 2023 GMT
        Subject: CN=74608B6CE3C3512736147986064FA49161EDA6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:92:7e:1d:dc:40:53:4c:ac:79:65:c4:fe:
                    27:90:04:1b:12:c7:f0:3d:d4:e2:bf:3d:8c:27:fd:
                    62:0b:9d:33:6b:88:3c:65:70:1d:1f:1e:1f:6f:29:
                    15:a8:50:bd:fc:79:de:34:fc:4e:5b:4e:9b:ee:85:
                    fb:7b:8d:da:75:22:13:71:92:bf:1b:8c:3e:57:01:
                    5c:05:1e:a8:c1:f8:9a:22:f9:fa:bd:30:2f:46:5d:
                    66:fc:80:c4:1f:ec:06:11:43:77:6c:fa:05:69:cf:
                    2f:b5:ac:5a:2d:0c:13:58:1b:8c:12:8b:7f:35:a6:
                    39:70:d6:6d:ac:7c:e8:a7:b4:b3:05:71:54:8a:88:
                    80:dc:4e:51:f7:2f:e1:ff:4f:fe:11:92:c8:32:82:
                    ef:84:23:b9:c2:6a:04:8c:7b:cd:9a:b1:a0:5d:cf:
                    b6:c5:94:b7:2e:80:91:a8:02:1c:a2:66:fc:52:ef:
                    c8:24:d4:81:86:fa:80:7a:ec:a8:7e:48:79:0d:86:
                    68:52:5a:cf:a0:4a:bd:4d:3d:23:b1:5e:ac:5c:54:
                    35:32:71:e6:ae:09:a9:92:94:67:f4:c3:0d:38:18:
                    72:8e:d5:97:51:01:7e:aa:cc:37:67:9e:11:da:5a:
                    2f:21:ea:c8:61:4d:e7:07:c1:b7:63:66:70:e8:b7:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:60:8B:6C:E3:C3:51:27:36:14:79:86:06:4F:A4:91:61:ED:A6:EB
            X509v3 Authority Key Identifier:
                keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/3131342e3139382e3234312e302f32342d3234203d3e203535363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:30:43:06:cb:52:40:6a:8f:5f:95:d4:3c:d8:ce:6b:08:a0:
         04:f9:2f:0c:c9:83:62:df:b7:3b:f8:d1:99:67:84:7b:20:b2:
         74:21:a9:3a:24:33:13:76:bd:0b:11:1e:94:6b:8d:fd:ea:cc:
         41:59:e4:f1:2a:d6:4a:f8:87:d7:f4:63:eb:68:f7:e9:76:1b:
         65:e6:3b:b6:f2:44:75:2e:3d:a8:b6:ee:ba:1e:e7:53:f8:5a:
         85:ab:43:eb:9e:52:e2:2c:f3:13:fd:00:d3:32:b2:12:dc:c7:
         76:af:87:73:81:a4:55:9e:86:58:f2:89:d8:73:5e:39:dc:ad:
         12:03:cf:52:9c:dc:9c:79:68:76:ee:52:2e:a4:ba:09:67:15:
         65:3f:ce:fc:fc:ff:0d:db:b3:17:84:b3:3f:25:ca:a0:08:a1:
         ea:81:f2:85:e4:64:d0:88:fc:e7:e5:e1:88:e4:22:ef:87:1e:
         36:c1:0f:43:25:aa:d7:c5:49:0a:b4:c5:77:46:c9:2b:64:6f:
         c2:c6:fc:c9:71:60:68:d9:8c:48:98:55:7d:cd:3f:d5:6b:e5:
         4d:8e:11:97:85:85:0f:72:00:0f:be:79:88:62:bf:da:7a:20:
         36:a1:66:c4:71:06:4d:f0:7b:58:a5:43:39:3c:0b:b6:4d:5b:
         25:c3:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----