Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313439333536.roa
File:                     3130332e3137392e3231362e302f32332d3234203d3e20313439333536.roa (raw, json)
Hash identifier:          qJ0JbGsrX1QRG0N/K+ZB4ezAIFz/aiWPSiDuZut6690=
Subject key identifier:   40:A2:54:00:93:62:D1:E0:7D:5D:9D:87:2C:D9:A6:19:A1:17:F4:0B
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       04F5474729FC24B4AC3667A3877CBCADFC4DA444
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313439333536.roa
Signing time:             Thu 10 Feb 2022 07:50:54 +0000
ROA not before:           Thu 10 Feb 2022 07:45:54 +0000
ROA not after:            Fri 10 Feb 2023 07:50:54 +0000
asID:                     149356
IP address blocks:        103.179.216.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f5:47:47:29:fc:24:b4:ac:36:67:a3:87:7c:bc:ad:fc:4d:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Feb 10 07:45:54 2022 GMT
            Not After : Feb 10 07:50:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:f8:a2:0d:c6:2b:43:61:18:8f:1c:a7:8b:
                    94:4c:a9:f6:ab:e4:ba:09:1e:5a:c3:a8:d9:ee:62:
                    83:ff:15:99:42:6a:35:4d:e8:91:7f:f2:66:c4:35:
                    df:2a:52:01:7a:7b:44:40:1f:76:00:be:38:2b:74:
                    63:f9:e9:66:07:cd:26:aa:a6:75:79:fd:5e:fb:6d:
                    82:85:4d:bb:17:ef:06:34:7e:d9:5f:c8:14:28:36:
                    af:36:75:ca:44:6a:7f:5a:6e:4d:bf:9f:77:a5:e3:
                    ef:21:3d:0d:51:16:93:b7:79:62:52:3d:c8:60:2f:
                    b0:86:95:c8:a2:d3:e1:36:9b:66:09:05:51:97:52:
                    ad:4f:e3:ed:ef:20:61:c0:16:e6:09:c7:3f:38:29:
                    17:d6:b3:fb:0c:3d:b2:64:fc:3b:5e:8d:b3:85:24:
                    16:f2:99:ec:23:63:07:c0:39:37:ba:3b:fd:a8:81:
                    cb:5d:29:62:8a:30:e2:28:87:d8:df:6a:42:78:ca:
                    e8:03:fe:6f:87:54:23:af:a1:b7:fd:a7:c3:1c:b1:
                    9d:f5:67:97:21:6f:0f:a4:d5:d1:7c:b5:61:77:34:
                    4b:9f:62:8b:0b:7e:99:47:36:7a:42:35:ef:e4:71:
                    c1:bc:4a:f9:0d:c3:33:36:93:cd:d3:06:19:a6:1e:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A2:54:00:93:62:D1:E0:7D:5D:9D:87:2C:D9:A6:19:A1:17:F4:0B
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313439333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:49:47:ac:f8:cb:a2:4f:41:99:e8:f5:ef:87:eb:1a:0e:8e:
         4a:b9:16:6b:4d:97:58:cc:a5:32:24:e9:c9:b6:7f:cf:a3:a8:
         07:ea:60:22:d1:b9:98:15:1d:41:00:3e:01:8e:11:ec:dc:7a:
         b1:ac:78:87:3e:89:ea:0b:c4:5a:e8:da:68:01:dc:18:e3:1c:
         bb:d2:62:f7:6e:60:5f:23:c2:1b:ce:b4:db:75:2c:b1:8e:5d:
         d6:db:f7:71:eb:8d:1f:8b:d1:2e:29:92:c8:6a:08:ff:3d:0a:
         51:1a:be:f3:6d:bc:03:90:97:ba:b7:9d:38:00:4c:9e:9b:31:
         b5:ba:49:c0:f9:4f:b2:4f:79:df:f3:66:20:28:ca:32:5c:ac:
         80:65:07:72:37:91:bf:5b:1a:57:46:07:eb:15:f8:e8:61:a9:
         5a:a2:a1:51:ab:37:6c:30:27:dd:c5:76:fa:8e:2a:22:48:fc:
         41:de:1a:6e:e8:fb:7f:b0:e3:af:bf:53:68:f9:e2:ed:dd:52:
         44:0c:f9:91:c5:d4:c6:b2:87:ce:73:48:01:74:7b:64:12:58:
         dd:58:a7:bc:29:3d:85:cf:d1:1d:2b:3f:8c:07:6f:8f:d9:25:
         4d:89:1e:8f:80:83:df:a6:3c:03:02:2b:0e:18:7c:b4:1e:27:
         bf:42:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----