Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3230302e302f32322d3234203d3e2034373837.roa
File:                     3130332e3131312e3230302e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          4YJR68XLee95WLqtxgG+yEumRQH94KAHyZ5cEd5EphM=
Subject key identifier:   3F:60:F1:52:8E:25:AA:B1:69:D0:42:29:C5:C6:4C:E9:56:CD:32:51
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       68EDA322468F8D3AA38D9F68937849D2EB91D1BE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3230302e302f32322d3234203d3e2034373837.roa
Signing time:             Fri 24 Dec 2021 08:24:21 +0000
ROA not before:           Fri 24 Dec 2021 08:19:21 +0000
ROA not after:            Sat 24 Dec 2022 08:24:21 +0000
asID:                     4787
IP address blocks:        103.111.200.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ed:a3:22:46:8f:8d:3a:a3:8d:9f:68:93:78:49:d2:eb:91:d1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 24 08:19:21 2021 GMT
            Not After : Dec 24 08:24:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:b9:04:09:08:ef:55:c1:5f:ba:87:9a:3a:
                    33:00:91:89:70:6d:71:fb:04:fd:00:99:16:f1:52:
                    a7:88:c9:f2:ed:c8:ab:78:c2:be:0f:c0:ee:3a:10:
                    b1:de:2c:67:e7:0e:09:78:b5:81:15:5e:57:5b:39:
                    90:3c:ac:d5:d0:bc:c9:76:9e:33:cd:5a:d8:f5:de:
                    2b:36:03:07:06:e2:5a:46:0a:ec:e2:f9:fa:68:90:
                    55:e3:96:16:f0:11:5f:81:c6:8b:26:5f:82:2e:a2:
                    31:e1:46:24:46:18:f5:30:25:45:46:76:9d:1f:9c:
                    78:fc:83:28:6a:8f:2a:73:7e:3a:ac:70:76:16:52:
                    28:f7:f5:8f:6d:1b:aa:c1:26:33:1a:18:13:de:50:
                    74:01:cc:83:cd:30:c9:0e:48:c2:f0:36:b5:46:e4:
                    e5:63:bb:1a:ea:f8:47:00:f3:03:4e:6d:bf:03:9c:
                    53:98:f8:fc:eb:d6:3c:79:6d:07:37:c8:10:67:0d:
                    ed:b1:91:98:b0:bc:c1:5d:1f:61:07:a9:69:91:58:
                    04:09:0f:8b:6e:a2:e7:d5:e8:f9:8f:0f:a6:29:d3:
                    e3:de:b6:5c:2e:6c:d3:2f:e8:2c:84:b4:8f:44:c3:
                    33:56:a8:24:db:95:2c:14:19:01:d9:ca:04:40:8d:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:F1:52:8E:25:AA:B1:69:D0:42:29:C5:C6:4C:E9:56:CD:32:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131312e3230302e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:01:7f:e0:be:ec:c5:ac:3f:f7:2b:c4:91:92:72:9f:1f:
         db:10:0e:29:20:c7:34:73:bc:2b:05:26:c0:37:3f:27:09:31:
         48:f0:fd:6e:bd:a2:12:b4:60:59:cb:4f:05:3a:74:6a:f0:8a:
         22:72:52:3d:ef:b4:13:94:c3:bf:c0:a9:51:e7:06:96:15:18:
         34:d4:88:56:20:8f:0e:b0:1b:ed:ad:88:a5:8a:e6:27:05:52:
         a2:55:79:dc:67:45:8e:9e:83:b9:c9:5c:7d:4e:00:8a:e3:19:
         45:60:9b:bd:3d:4c:1e:a1:37:c3:b6:84:a4:78:83:b2:8a:33:
         96:52:b6:36:dd:34:e9:6d:2b:a4:fc:94:a1:20:73:39:89:c2:
         41:8e:ad:56:cf:7d:22:2f:70:ef:6e:b0:35:ec:46:9b:44:94:
         4a:82:19:e6:36:45:81:f7:5a:57:34:18:1a:b6:23:1b:86:ba:
         19:60:7c:b1:33:1e:2f:dc:d7:f3:fc:56:9a:59:f1:89:30:a2:
         c4:32:62:f6:fd:4f:2b:f7:a0:5d:55:da:cd:b2:ac:b3:6b:3f:
         97:1d:05:3d:82:80:df:6b:3b:90:e3:12:db:a8:b3:71:48:ec:
         70:16:3b:0d:f0:46:c7:4f:28:9a:0d:66:a5:d3:8f:31:c9:e7:
         77:57:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----