Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e36382e302f32322d3234203d3e203137393935.roa
File:                     3130332e3130352e36382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          WU/KJS3ieVLz8VvzinYjj5ztj+F2HC3lN5ZCmqId7rI=
Subject key identifier:   A1:F1:3B:7F:15:D9:A9:BC:0D:4D:A3:A4:A8:47:4A:22:17:EE:CF:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5432E9671CDB0435EAA51E6D80645D7302AFC767
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e36382e302f32322d3234203d3e203137393935.roa
Signing time:             Fri 29 Oct 2021 05:00:01 +0000
ROA not before:           Fri 29 Oct 2021 04:55:01 +0000
ROA not after:            Sat 29 Oct 2022 05:00:01 +0000
asID:                     17995
IP address blocks:        103.105.68.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:32:e9:67:1c:db:04:35:ea:a5:1e:6d:80:64:5d:73:02:af:c7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 29 04:55:01 2021 GMT
            Not After : Oct 29 05:00:01 2022 GMT
        Subject: CN=3082010A0282010100A30CFDCC43B7958495B558869A26A6EAE7FEE68C71F14890314BACF23E6093706BF05672D44A5D7A3532DDB0A9AD422C3B19C62D590AF43162D50775196AB51DCB07FDF068B7A0497AC839560F599AD11A44E66FD0430EC76954CA91C4539E0F15C54F34C597309FEBAC562E13CF1DFB0ED0459459A3B3D2B59F72795EE80C4301780A1F4A32694390B90B96C0DCB540D1920E6795D1427F1FDF277A038E12DE9140849FCCD6E377747AA7D9BA91C45B5604CAAC7D360A0C2D944F66091D839929B54C283F21E41DB376E8BB6C777ED3C8796E6BAF25D0D4F838171AE0AE303DD5A7C44656B09C67470E3EF9658974C40369A2E4EE5F5EA8C963699275A29F430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:fd:cc:43:b7:95:84:95:b5:58:86:9a:26:
                    a6:ea:e7:fe:e6:8c:71:f1:48:90:31:4b:ac:f2:3e:
                    60:93:70:6b:f0:56:72:d4:4a:5d:7a:35:32:dd:b0:
                    a9:ad:42:2c:3b:19:c6:2d:59:0a:f4:31:62:d5:07:
                    75:19:6a:b5:1d:cb:07:fd:f0:68:b7:a0:49:7a:c8:
                    39:56:0f:59:9a:d1:1a:44:e6:6f:d0:43:0e:c7:69:
                    54:ca:91:c4:53:9e:0f:15:c5:4f:34:c5:97:30:9f:
                    eb:ac:56:2e:13:cf:1d:fb:0e:d0:45:94:59:a3:b3:
                    d2:b5:9f:72:79:5e:e8:0c:43:01:78:0a:1f:4a:32:
                    69:43:90:b9:0b:96:c0:dc:b5:40:d1:92:0e:67:95:
                    d1:42:7f:1f:df:27:7a:03:8e:12:de:91:40:84:9f:
                    cc:d6:e3:77:74:7a:a7:d9:ba:91:c4:5b:56:04:ca:
                    ac:7d:36:0a:0c:2d:94:4f:66:09:1d:83:99:29:b5:
                    4c:28:3f:21:e4:1d:b3:76:e8:bb:6c:77:7e:d3:c8:
                    79:6e:6b:af:25:d0:d4:f8:38:17:1a:e0:ae:30:3d:
                    d5:a7:c4:46:56:b0:9c:67:47:0e:3e:f9:65:89:74:
                    c4:03:69:a2:e4:ee:5f:5e:a8:c9:63:69:92:75:a2:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F1:3B:7F:15:D9:A9:BC:0D:4D:A3:A4:A8:47:4A:22:17:EE:CF:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130352e36382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:5f:42:2c:94:e1:cd:ef:54:28:16:b3:be:41:0a:b8:75:
         e7:db:e8:75:f5:70:8b:f8:9d:d2:fc:1a:07:d4:ba:19:45:c3:
         67:79:a2:3d:00:b2:87:ed:f3:11:5e:06:c2:fc:86:8f:76:27:
         e0:83:7c:c8:6d:56:72:37:e9:1f:cf:6b:d7:08:0f:48:f5:52:
         5f:58:8e:98:23:be:32:98:33:47:4b:4f:ea:31:4b:25:54:3a:
         bb:45:f2:c5:3e:18:2e:20:9d:d5:84:64:b7:38:12:f2:67:0b:
         6e:00:27:15:45:88:01:97:62:35:0d:19:94:68:19:c1:d2:7b:
         51:02:8f:a4:8a:5f:26:e7:0d:28:0d:8f:00:c1:b6:df:9d:73:
         da:5d:24:b1:44:08:4b:97:c4:06:32:65:8d:42:5c:9a:3b:3f:
         41:f0:86:89:ce:e8:53:19:da:e4:a9:ac:75:c8:da:45:88:b1:
         a6:7c:03:55:b0:b5:83:23:22:f5:eb:3d:ad:f1:35:8e:f5:d6:
         56:d8:5f:b9:11:28:4f:28:2e:92:f5:55:0e:37:e2:05:af:8e:
         b9:bd:32:80:6c:64:26:96:da:98:ee:8a:95:e4:c3:1b:41:b6:
         db:88:af:b6:2b:7e:8b:df:57:62:0d:e0:3a:e4:e3:c5:5d:31:
         8a:c4:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----