Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32332d3233203d3e20313439373035.roa
File:                     3130332e3138342e3132322e302f32332d3233203d3e20313439373035.roa (raw, json)
Hash identifier:          6Bp4e2bd/kWH5S4JjFopjcjzzPTrysdTJW28i/5dNwk=
Subject key identifier:   A2:32:F5:B5:E5:1A:DB:80:07:A6:BC:71:7E:89:23:00:6F:2C:73:7E
Certificate issuer:       /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial:       2C23261489F7089FDDA76060BE520DA14DDB6291
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32332d3233203d3e20313439373035.roa
Signing time:             Wed 27 Apr 2022 08:46:33 +0000
ROA not before:           Wed 27 Apr 2022 08:41:33 +0000
ROA not after:            Wed 26 Apr 2023 08:46:33 +0000
asID:                     149705
IP address blocks:        103.184.122.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:26:14:89:f7:08:9f:dd:a7:60:60:be:52:0d:a1:4d:db:62:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
        Validity
            Not Before: Apr 27 08:41:33 2022 GMT
            Not After : Apr 26 08:46:33 2023 GMT
        Subject: CN=A232F5B5E51ADB8007A6BC717E8923006F2C737E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:ee:85:21:c6:53:74:f8:15:95:77:9b:59:
                    5c:0a:1d:4f:82:d2:b4:60:c0:e6:54:0b:2a:ad:66:
                    be:aa:f8:24:b4:5d:b2:86:90:72:79:d0:99:49:a3:
                    04:03:6b:38:ba:03:38:6c:ab:ce:ac:4d:37:f9:f7:
                    d8:33:b5:66:28:89:f8:0e:de:75:48:ee:d3:d8:66:
                    b7:73:c4:a8:69:2b:82:0c:d5:0a:09:67:51:39:b1:
                    88:b4:05:98:b0:37:83:36:90:f5:21:7c:2e:20:ff:
                    c6:0c:cd:9e:30:c0:44:b7:40:b2:9b:c2:04:6c:9a:
                    70:8b:57:5a:69:44:d9:a4:1d:aa:c9:4b:c4:bd:25:
                    70:7e:6d:50:4f:c3:ca:a5:9d:b0:66:b7:81:e7:71:
                    fd:c6:93:7c:ad:b7:c3:7d:e6:45:1e:ca:31:fb:4b:
                    d5:4b:c2:5d:26:8f:ee:de:79:9e:8d:cd:3a:8b:8a:
                    43:e2:45:91:41:1c:78:5b:65:73:6e:e9:c6:e1:b3:
                    b0:26:cb:98:39:a8:f3:9f:f3:0c:36:50:d9:d5:49:
                    ac:4d:c0:c3:05:49:7c:37:2c:13:5e:ce:fe:18:ab:
                    1d:0e:04:46:f2:54:51:3f:68:83:3c:df:db:58:81:
                    e6:78:52:22:0e:38:4d:c8:4b:cd:f0:c9:7a:65:44:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:32:F5:B5:E5:1A:DB:80:07:A6:BC:71:7E:89:23:00:6F:2C:73:7E
            X509v3 Authority Key Identifier:
                keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32332d3233203d3e20313439373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:86:45:86:c0:7c:76:cf:dc:19:b2:f1:6e:83:83:e2:91:b8:
         e4:4d:be:db:93:6e:84:7f:8c:a5:4a:29:66:17:ec:f9:86:1c:
         b9:89:dd:2e:37:b0:d4:94:18:86:38:16:e2:0a:87:4d:71:60:
         05:11:22:02:61:90:80:59:f8:cc:9b:6e:8f:5b:e7:9d:9e:b6:
         a0:32:5c:97:cb:3f:4f:4e:2c:d0:c9:82:fb:0e:e4:97:d7:c0:
         35:ac:78:fd:e6:c1:3f:da:79:88:b2:25:89:9e:c2:10:26:52:
         bb:8e:5a:b2:b5:8a:f3:d0:89:fc:c4:a5:aa:4d:59:52:62:81:
         bd:70:77:67:2d:24:99:8b:4c:54:65:f1:d6:a3:97:cc:d7:ec:
         8a:b3:97:6e:0e:4a:09:09:50:48:f9:52:1e:4e:04:9d:0f:02:
         64:c9:85:9f:56:ae:73:01:f1:88:2c:25:a3:cd:14:66:dd:58:
         d5:4c:ba:b2:bd:c7:c9:89:28:2e:75:d9:fd:7f:ba:7e:3f:7e:
         f3:a5:39:2a:d8:c8:42:eb:d9:eb:2c:49:6d:98:e9:47:b5:ea:
         c8:38:22:3a:2d:da:b4:ff:98:7a:77:a9:d7:77:bd:4f:82:c6:
         5a:72:72:57:71:29:5a:6b:e4:11:7b:4f:44:48:0e:67:37:e9:
         45:bd:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----