Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132372e302f32342d3234203d3e20313337333736.roa
File:                     3130332e3131382e3132372e302f32342d3234203d3e20313337333736.roa (raw, json)
Hash identifier:          Qz6JCNwetUm22El9t7z3gnkLsdXJsMX8vFj8gCi2SCw=
Subject key identifier:   D7:26:A2:CA:12:F8:D2:DB:28:65:5A:59:C9:7F:D8:B7:BE:F5:7B:80
Certificate issuer:       /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
Certificate serial:       4B615A4F84C26276EA8A507664E739533FF66384
Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132372e302f32342d3234203d3e20313337333736.roa
Signing time:             Fri 11 Feb 2022 09:26:08 +0000
ROA not before:           Fri 11 Feb 2022 09:21:08 +0000
ROA not after:            Sat 11 Feb 2023 09:26:08 +0000
asID:                     137376
IP address blocks:        103.118.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:5a:4f:84:c2:62:76:ea:8a:50:76:64:e7:39:53:3f:f6:63:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
        Validity
            Not Before: Feb 11 09:21:08 2022 GMT
            Not After : Feb 11 09:26:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:5f:40:67:49:f8:f9:4e:81:80:6a:82:53:
                    73:d9:81:e5:2b:01:af:aa:59:5a:1d:0e:61:64:7b:
                    76:82:8e:53:98:f8:94:df:17:91:c7:43:83:47:cb:
                    48:82:1d:21:9e:7e:87:81:7e:40:3c:38:7b:9b:a2:
                    56:00:75:02:1b:03:56:50:d8:24:6d:79:58:e9:d1:
                    f4:12:d8:69:df:7b:87:93:25:41:f7:34:5b:24:93:
                    fb:4f:11:0d:6b:3e:fe:91:a2:24:49:a8:47:9f:06:
                    91:43:80:0a:41:d1:4e:df:80:d5:90:ec:d6:5c:f6:
                    cf:35:3e:b8:5e:83:ba:f5:c0:d7:34:a7:2d:c8:45:
                    2a:fc:e8:f7:25:ac:87:50:97:15:a3:d7:d1:08:af:
                    48:b2:4f:4c:98:79:59:a0:a6:e3:8a:b3:56:c8:b0:
                    ab:9c:3b:39:f0:32:a7:e7:49:94:0a:02:96:24:84:
                    06:51:a9:d8:00:7a:b6:da:c9:b6:c8:4e:dc:b9:31:
                    1a:a0:8b:b7:ef:fa:2a:d4:f3:2d:10:31:65:89:ed:
                    92:56:87:bc:21:ce:2a:ef:7e:10:94:bb:d2:ea:67:
                    98:cd:f4:fa:87:10:89:7e:17:ba:bb:e1:8f:dc:0f:
                    19:99:b5:42:78:c0:cb:a8:9b:b2:3a:46:a1:ef:df:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:A2:CA:12:F8:D2:DB:28:65:5A:59:C9:7F:D8:B7:BE:F5:7B:80
            X509v3 Authority Key Identifier:
                keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132372e302f32342d3234203d3e20313337333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:82:11:a5:af:e6:af:bd:d4:2c:30:c7:2d:bc:bd:93:a7:
         ee:62:78:c2:76:d3:8b:dc:13:6b:ce:10:44:ac:e9:1d:17:cc:
         a1:3a:11:0a:ef:79:cc:a5:cf:24:d3:4a:bc:52:c3:1b:25:bd:
         76:d0:db:68:d1:61:6c:97:58:a3:9d:ac:59:eb:3f:79:49:ac:
         c9:60:0c:bf:b4:8b:f1:d5:e9:5c:67:65:28:9a:03:29:c9:2b:
         de:a9:ce:74:fa:01:e9:e7:4f:a8:7d:de:02:18:ce:6a:f4:d1:
         f0:00:3e:f2:a2:22:27:86:fb:75:73:cd:5f:e4:6e:55:59:af:
         ca:ed:8c:97:39:e6:ee:11:44:37:54:c6:77:c9:3b:19:10:3e:
         8a:48:e5:0d:11:85:b5:41:e1:a4:64:c3:bd:14:4e:e4:df:b8:
         be:ac:a6:05:a9:39:63:8a:a2:52:61:7f:2f:a4:fd:d7:79:f4:
         e2:4d:e7:34:e0:b2:ee:45:15:69:2b:58:86:21:27:07:a1:3c:
         88:0a:dc:ce:67:47:ad:80:69:21:67:01:a9:62:c4:0f:d7:7e:
         d0:fe:9c:96:b0:1e:48:12:e1:f6:6b:6c:4c:3d:70:0b:ba:47:
         d1:7f:f4:66:13:19:b5:19:4b:67:ef:19:f6:25:98:11:80:5d:
         12:3c:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----