Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3233203d3e20313430333839.roa
File:                     3130332e3137392e38362e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier:          xe6Dms4epMH4MWkb74FoQ486IwuU6iFISayQ0UzRoxU=
Subject key identifier:   95:E7:6B:54:08:38:B1:2B:E2:CD:CE:B4:D3:DA:02:AB:EC:2F:73:52
Certificate issuer:       /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial:       75A445AF19B52EE3306D20158CFF2579468E3E8A
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3233203d3e20313430333839.roa
Signing time:             Thu 13 Jan 2022 09:47:35 +0000
ROA not before:           Thu 13 Jan 2022 09:42:35 +0000
ROA not after:            Fri 13 Jan 2023 09:47:35 +0000
asID:                     140389
IP address blocks:        103.179.86.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:45:af:19:b5:2e:e3:30:6d:20:15:8c:ff:25:79:46:8e:3e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
        Validity
            Not Before: Jan 13 09:42:35 2022 GMT
            Not After : Jan 13 09:47:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:e4:a4:5b:28:5a:fb:b1:be:e3:ea:50:da:
                    79:bd:a3:6f:ce:93:20:45:dc:ff:2c:e1:d7:30:8e:
                    2b:ab:d5:46:55:04:2a:be:ee:39:a3:0f:6d:b4:f3:
                    a1:d0:a7:23:06:dc:35:b4:97:44:0e:86:77:fb:c0:
                    50:06:0a:25:2d:b8:be:41:9b:6a:70:5a:36:d3:b0:
                    23:88:46:74:d8:29:3a:b5:f1:06:c9:16:d1:fe:48:
                    65:36:2b:f6:6f:2f:7e:a0:fb:d2:ae:77:b2:9f:57:
                    16:e7:5e:7e:47:7b:62:ae:e7:f2:f9:df:d6:e0:06:
                    f1:33:15:26:1c:30:e5:cd:a4:61:24:26:4c:d2:45:
                    f1:ec:60:ea:49:b4:ae:41:36:d7:c1:67:e0:a4:21:
                    b0:41:a8:b9:e4:75:80:86:52:7a:d5:6a:90:24:28:
                    0a:34:75:ea:c6:f6:ea:cc:69:2c:79:80:c1:c3:ad:
                    3c:7c:84:d2:d5:63:d8:0b:d0:1b:8c:a9:e5:12:69:
                    32:c2:e7:8e:b5:37:26:f0:73:2e:d7:45:73:c4:83:
                    92:a4:eb:0f:a7:ba:6f:80:aa:41:5c:6e:43:1b:30:
                    01:41:42:4a:37:4b:77:ef:d5:a9:19:75:18:ba:3e:
                    17:03:10:98:7f:50:33:4d:30:2f:a8:1d:f4:cd:b2:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:6B:54:08:38:B1:2B:E2:CD:CE:B4:D3:DA:02:AB:EC:2F:73:52
            X509v3 Authority Key Identifier:
                keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3233203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:a2:dc:57:19:96:f9:1a:b4:4b:7b:cc:b4:0e:f1:c8:50:1e:
         db:74:6b:f6:07:55:5d:e2:93:7b:2b:d9:40:dc:ef:e9:d5:22:
         38:b3:4d:f6:6d:ee:e4:c9:86:3f:92:bf:55:61:cd:8e:ba:85:
         b8:31:62:a5:a8:bc:3c:49:7b:66:55:43:e9:7f:7f:a5:24:ec:
         35:61:a5:73:95:ad:53:26:a4:c3:fa:54:94:1a:5c:1e:b7:0d:
         b1:af:b3:d5:33:97:87:cf:94:85:e5:28:73:3d:eb:48:52:e1:
         07:a3:93:00:c3:dd:67:84:ed:ea:16:66:34:b8:cd:99:0e:9b:
         70:1a:f2:24:69:5c:7e:2e:6b:ec:a3:56:ec:92:53:0f:8d:c0:
         4e:c1:66:85:41:d5:b6:4a:1a:d6:fe:70:3c:1f:f5:2c:ec:b4:
         da:02:9c:eb:c5:45:52:74:27:45:94:4d:83:11:5a:78:98:9b:
         2c:e6:ea:08:95:01:cf:96:69:74:92:cc:ff:48:ba:af:87:a4:
         26:20:8f:74:48:8d:b5:55:0e:b7:90:a0:18:90:fe:db:de:66:
         6c:6c:77:ca:36:33:77:cb:7e:58:fe:c1:ac:16:61:31:d4:33:
         3a:be:54:4e:16:a2:21:c2:aa:de:cf:67:51:62:5e:e7:d5:64:
         57:5f:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----