Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          4ujTF2x+ta9IRsxWxQ4Cs9kZxC8ZD71oH/PK0v5ad/U=
Subject key identifier:   36:F0:21:AB:E6:19:90:78:CC:7F:C8:FB:E4:C9:3A:7F:6B:3E:FA:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2694983B2AC6F549D3858C04A484B0472C17D1CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
Signing time:             Thu 09 Dec 2021 03:44:31 +0000
ROA not before:           Thu 09 Dec 2021 03:39:31 +0000
ROA not after:            Fri 09 Dec 2022 03:44:31 +0000
asID:                     136842
IP address blocks:        103.100.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:94:98:3b:2a:c6:f5:49:d3:85:8c:04:a4:84:b0:47:2c:17:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  9 03:39:31 2021 GMT
            Not After : Dec  9 03:44:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:03:f8:b7:cc:86:ba:61:26:01:f9:a9:90:
                    b1:b8:16:a4:21:ff:cd:d6:3f:89:37:ea:ef:5d:d9:
                    c8:3c:04:d8:d9:40:9e:1c:f9:c6:cd:08:66:bc:be:
                    7f:a5:40:46:e4:19:fd:39:9b:38:7d:52:d8:8b:d5:
                    f5:09:16:54:db:eb:61:aa:bd:2f:63:26:d8:93:a2:
                    f9:c7:99:ca:18:37:e5:ad:d6:eb:1c:42:04:ed:65:
                    a5:66:56:dd:8f:69:9a:3a:62:82:77:e6:0f:3e:6d:
                    73:c3:40:e8:67:0a:e3:8e:4d:cb:5d:a8:61:a3:5a:
                    a0:42:89:0a:6b:5f:ff:dc:53:57:29:16:de:a8:11:
                    8e:13:d5:44:cd:f8:6e:a3:f9:b9:57:80:13:a8:fc:
                    2f:30:a3:89:ad:87:0e:c8:e5:8e:ef:02:34:9b:56:
                    17:79:a4:df:42:b1:19:23:dc:c8:d8:d8:66:bb:16:
                    e7:5f:d8:62:3a:05:83:d8:30:9f:fd:1e:24:e6:32:
                    b8:bc:b1:ac:6b:6b:31:d4:b4:f5:56:57:f8:10:84:
                    42:0f:db:1e:2a:1f:f4:20:0e:c6:5e:2d:b0:19:c8:
                    9f:72:6c:91:00:d4:8f:1a:5a:80:bf:a7:8b:b8:0b:
                    6a:ca:1a:bf:94:b6:a3:39:86:25:2e:de:2d:ad:1c:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F0:21:AB:E6:19:90:78:CC:7F:C8:FB:E4:C9:3A:7F:6B:3E:FA:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:1c:51:9e:d7:64:29:4c:eb:8f:2e:87:2e:1e:20:7d:1e:
         41:b5:89:26:d1:aa:c6:0a:77:71:27:57:04:7d:78:9c:27:67:
         c0:08:b4:24:85:34:42:87:4d:2a:c2:84:9f:50:ef:ea:77:2f:
         4c:b4:fd:7a:10:e2:1c:b9:2e:89:d7:80:b7:10:54:25:7e:5f:
         ab:35:5c:1a:f9:cd:d5:0d:7f:43:8a:ad:53:90:82:c0:a3:e6:
         91:2b:a4:f6:a0:5e:f5:ab:2b:78:2b:02:9d:89:ec:23:f1:f8:
         c0:39:9c:68:c0:ec:c4:5c:f5:2c:d3:58:4d:78:1f:bd:64:9c:
         bf:c4:3e:de:16:89:ba:18:70:52:f5:7b:f6:b6:43:85:9b:e5:
         d5:c8:10:9c:9f:d2:7c:c4:8c:21:5f:cf:48:3c:3a:0a:ae:83:
         d2:df:fd:95:2f:bc:8e:af:98:be:e4:ae:d2:47:f6:14:50:bf:
         42:bd:6a:bf:74:ba:9b:92:4f:61:95:79:b4:1a:0d:50:1a:ce:
         75:69:03:a4:d1:f2:48:c0:d8:08:5a:15:96:21:7b:03:d1:e1:
         62:5b:9f:60:2a:55:95:6d:0e:eb:92:fa:62:41:f0:13:1b:e7:
         98:0d:91:79:3e:c7:9e:93:af:83:4f:1a:08:fc:8d:ae:0c:30:
         3e:83:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----