Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e38372e302f32342d3234203d3e20313337333031.roa
File:                     3130332e3130382e38372e302f32342d3234203d3e20313337333031.roa (raw, json)
Hash identifier:          sCocpnCidsrph4TIRPDDGSoRLPsRmGo+SbE0+Kv6YMU=
Subject key identifier:   83:3D:EC:74:4F:2C:B0:7D:A2:78:0A:9B:0C:25:6E:FF:FC:FA:95:25
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A4E0A5A09AE1915942B4F6F683D370BF6142C66
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e38372e302f32342d3234203d3e20313337333031.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     137301
IP address blocks:        103.108.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4e:0a:5a:09:ae:19:15:94:2b:4f:6f:68:3d:37:0b:f6:14:2c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:27:aa:e3:13:40:c4:7a:db:d5:e4:49:bb:
                    25:5a:be:66:2e:bf:fc:a6:89:f5:45:40:93:e5:2f:
                    de:46:4c:d2:92:b8:28:b1:1c:ca:82:e3:65:50:5c:
                    1e:34:00:90:a4:8e:af:df:a7:71:af:1e:a5:f2:41:
                    41:21:b6:aa:00:18:38:d2:fd:47:db:b6:3f:36:b2:
                    37:aa:7f:f8:aa:a8:16:54:bc:29:1d:82:63:1a:69:
                    89:e5:fd:b0:0c:10:c9:dc:78:74:e7:31:fb:64:29:
                    fd:84:bc:c3:9f:9a:00:db:97:cf:28:6b:b8:79:f2:
                    74:48:89:76:c1:c6:54:b6:94:e9:5e:ed:d2:82:54:
                    57:cb:3d:d0:fc:0f:1c:60:96:9e:49:0e:b3:b2:43:
                    db:b5:ae:cc:ea:65:cd:6a:2f:14:70:e4:c7:b9:a1:
                    74:df:a3:c6:92:90:ae:6f:48:7b:6b:bd:75:9f:74:
                    9d:5b:b8:9f:57:91:73:6e:65:33:a9:75:7c:e9:aa:
                    89:2e:6f:f6:f6:61:7c:db:33:49:c2:0c:c5:36:ee:
                    ee:45:b7:c8:81:f7:35:58:a9:37:46:69:de:80:f5:
                    b2:ff:e9:b8:d5:cc:ab:fb:e8:66:d6:79:ce:a1:cc:
                    5c:f9:85:38:47:fa:4e:a2:b7:39:58:7d:cb:88:d8:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:EC:74:4F:2C:B0:7D:A2:78:0A:9B:0C:25:6E:FF:FC:FA:95:25
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130382e38372e302f32342d3234203d3e20313337333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f5:11:c7:99:e3:04:b8:1d:49:b6:7e:38:44:e9:67:f4:75:
         b7:ea:5d:d4:9f:12:46:f7:0d:b9:9e:0a:05:60:1c:f2:17:37:
         d3:68:38:17:fb:2c:eb:03:26:00:3a:3c:22:8e:ae:8b:1a:06:
         bc:b3:55:2c:ad:bf:70:7c:bc:3a:6c:eb:b9:12:58:14:df:e0:
         fb:bc:ef:56:1b:37:8a:78:ab:ea:d9:55:13:ae:a3:c0:3c:3b:
         38:a9:17:9c:1c:0c:6c:d3:37:f9:5e:e8:01:9c:26:fb:9a:22:
         84:ee:98:74:ac:c9:92:f6:7b:f4:57:d0:d2:6e:a0:66:13:73:
         09:75:76:58:33:8a:be:70:a9:7a:45:ad:1b:df:d5:c1:2d:db:
         a3:b5:56:38:21:5d:61:2c:05:78:2b:a1:36:17:44:b0:1e:ad:
         f0:ed:44:f1:0f:5e:25:46:41:bf:d9:4f:83:21:97:73:3e:a3:
         85:a1:d7:89:a6:4a:11:47:d9:fc:8b:62:66:66:3f:07:e2:d2:
         cd:22:f1:4e:79:aa:da:b9:e5:9e:03:f1:6f:d3:80:53:91:ee:
         ff:28:f5:a2:15:f3:8c:da:91:50:1e:c2:fc:5d:e5:c2:21:fc:
         ff:20:b2:35:76:3f:a7:5e:6c:91:e4:ba:38:66:a6:9b:56:fd:
         f1:3c:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----