Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3133322e302f32332d3234203d3e20313338383239.roa
File:                     3130332e31312e3133322e302f32332d3234203d3e20313338383239.roa (raw, json)
Hash identifier:          J/gWdBt5qmMQYkb6s3Gkbesv34UeuSkY6Wzn1A5gLNA=
Subject key identifier:   0D:B9:5B:C2:1F:A2:D5:C6:5B:71:9F:00:0D:98:A5:22:B1:B5:ED:C9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7450F87EA4A11B3B07E1D705B35F768616EF9748
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3133322e302f32332d3234203d3e20313338383239.roa
Signing time:             Wed 12 Jan 2022 07:54:06 +0000
ROA not before:           Wed 12 Jan 2022 07:49:06 +0000
ROA not after:            Thu 12 Jan 2023 07:54:06 +0000
asID:                     138829
IP address blocks:        103.11.132.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:50:f8:7e:a4:a1:1b:3b:07:e1:d7:05:b3:5f:76:86:16:ef:97:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 12 07:49:06 2022 GMT
            Not After : Jan 12 07:54:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:26:d8:38:9b:c3:9b:40:27:70:65:b5:89:
                    f1:84:90:c3:c0:3a:e7:aa:97:e4:d6:c9:46:c0:0d:
                    e9:1b:b1:75:c5:1c:ff:29:46:1a:81:2d:1b:84:b5:
                    14:3c:2f:8d:81:9d:8c:43:b8:89:b9:b0:0e:7d:83:
                    85:6f:06:25:a7:de:30:7a:e6:89:6e:47:9c:5e:20:
                    29:26:da:cf:20:28:95:ff:84:fb:79:3f:df:0d:a6:
                    5e:67:2a:11:63:f8:f1:46:ac:46:81:ce:cf:71:7b:
                    41:86:22:65:29:7b:62:29:ce:d7:c6:f0:73:aa:a7:
                    e6:31:30:a5:61:f1:67:7e:38:df:a5:e4:f8:da:35:
                    3d:0d:e8:13:27:66:80:89:5f:f4:f1:f4:57:e8:5f:
                    06:ad:59:3b:5d:4f:f6:a7:28:7c:9b:43:f0:22:cf:
                    fa:c9:57:0a:f8:59:b1:c2:33:f4:fd:2c:21:7a:c9:
                    04:48:42:c6:d8:72:ca:50:9b:d2:3b:26:71:bd:83:
                    8a:f1:d7:57:35:65:2d:af:80:ce:3f:07:a8:28:a0:
                    97:ed:9e:83:4c:94:e7:ce:39:c1:3c:73:7f:b9:10:
                    84:69:49:30:db:b5:08:db:bb:62:58:33:79:ae:54:
                    c1:ac:0c:74:03:66:fc:18:eb:8c:0c:36:3a:e1:f5:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:5B:C2:1F:A2:D5:C6:5B:71:9F:00:0D:98:A5:22:B1:B5:ED:C9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3133322e302f32332d3234203d3e20313338383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:f2:4c:2b:57:db:1a:14:55:7f:8f:2b:cc:18:67:e9:df:
         f9:3c:bc:9d:b5:41:e3:30:30:b4:44:00:b7:8e:e4:2f:d6:81:
         5f:4a:64:6e:96:01:bd:a6:39:69:14:56:7a:31:a0:0a:ee:e2:
         8c:bd:9c:a5:2b:21:3e:c7:fd:ae:64:7d:29:ec:f8:bd:0e:ee:
         21:cc:1e:3a:3a:52:56:ad:d5:04:14:05:80:93:4f:29:1f:ca:
         95:5d:f9:2d:06:11:40:f1:41:9a:38:5b:74:1b:04:44:1c:b1:
         39:e5:5d:e6:8d:5d:78:ba:96:36:95:a1:02:8e:a9:87:91:f9:
         62:49:1f:ca:a5:b5:41:23:6a:0f:cb:a4:73:f4:2e:a5:8b:d4:
         f3:c4:f6:34:e3:ec:aa:93:0c:67:76:d7:aa:b4:cc:60:b0:71:
         59:20:2b:8d:af:eb:b1:71:ba:43:f6:fb:ed:5d:9c:cd:57:71:
         0a:85:12:be:fc:37:01:e2:ac:06:63:08:3f:99:61:ea:d6:a2:
         cf:39:6d:bf:46:55:d6:f8:21:99:b4:5c:76:8f:be:ba:08:2a:
         dc:fe:a8:d8:89:12:6f:21:e1:54:e1:96:29:c0:a9:46:cc:58:
         8e:f7:fd:eb:2b:54:b1:85:8a:82:06:df:78:5a:89:b9:8d:d8:
         b1:8f:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----