Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131362e3231302e302f32342d3234203d3e20313337333638.roa
File:                     3130332e3131362e3231302e302f32342d3234203d3e20313337333638.roa (raw, json)
Hash identifier:          iEYOAAQY2q9fHzuRpudpz7bQjwI4C8/ABiasvJmZXes=
Subject key identifier:   E7:E4:62:BA:6D:9A:C3:F3:48:A8:B5:E5:22:41:07:E6:FA:A7:A0:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       768E60915DA75C8953D10147D5A2A8673706CBC9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131362e3231302e302f32342d3234203d3e20313337333638.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 04:55:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     137368
IP address blocks:        103.116.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8e:60:91:5d:a7:5c:89:53:d1:01:47:d5:a2:a8:67:37:06:cb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:00 2021 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:f1:93:08:f9:78:97:69:84:73:b0:f2:5e:
                    9c:32:f5:fa:16:bd:6a:3d:dc:d0:46:f7:45:85:c5:
                    c6:2f:2a:89:bc:16:00:a7:46:9c:a7:93:53:08:3d:
                    1f:89:53:b7:76:51:df:84:07:80:ee:10:b2:5e:b4:
                    2c:04:c3:2a:76:bd:32:2c:fc:43:c0:16:e5:1f:24:
                    46:0b:09:d4:1e:27:63:76:22:79:70:db:30:5c:af:
                    fd:ea:af:39:c4:7a:d3:23:4b:3d:4d:f5:f2:76:58:
                    a0:1b:d2:b4:9a:cc:e7:8e:6d:64:08:b8:3e:9b:eb:
                    ad:29:e6:90:be:0f:65:83:ec:40:d5:73:28:5b:7a:
                    52:45:4f:d3:10:13:89:10:67:9d:f9:a9:da:f6:9b:
                    17:dc:54:95:c3:a5:56:ad:1e:05:25:6e:d1:c9:80:
                    c7:88:4e:71:9c:38:a6:ba:65:a4:0f:ea:de:fb:b0:
                    6b:7f:9d:1e:82:c2:b4:c6:f0:16:4d:db:70:75:82:
                    bc:42:93:e6:f0:be:2e:e5:e1:37:fb:fa:0f:ad:ba:
                    2a:22:78:cf:5b:a5:19:d4:e5:20:23:19:7a:da:7f:
                    f1:a7:f1:6f:07:ef:07:f4:fb:42:81:33:dd:ae:22:
                    18:a0:57:0e:43:75:bb:b4:b4:fd:f9:e0:cf:94:b6:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E4:62:BA:6D:9A:C3:F3:48:A8:B5:E5:22:41:07:E6:FA:A7:A0:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131362e3231302e302f32342d3234203d3e20313337333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:10:c6:16:41:bc:f7:30:e9:16:48:d2:c9:2d:38:45:26:
         bb:bf:6d:d2:c1:a5:fd:74:6a:9d:f3:26:0b:2c:85:b8:2f:b2:
         2b:a2:27:71:e0:c7:51:21:6f:a1:3b:ef:5f:06:88:a5:e5:34:
         59:63:e2:c1:0d:1b:69:59:32:4a:20:23:b5:37:ae:8e:e0:7b:
         dc:b6:2e:54:ad:d4:2f:3a:75:15:25:10:77:d0:de:bc:33:56:
         41:ce:0d:79:99:4c:03:39:62:db:11:4e:a5:82:84:4b:0d:b8:
         4d:cd:22:46:18:b1:ef:8a:32:89:df:65:c7:b2:62:9d:10:06:
         1c:c3:a2:67:da:8a:07:fd:73:67:12:16:1b:f9:32:5e:2c:0f:
         c8:f5:c6:78:70:6c:28:3a:d2:e2:aa:74:6d:96:54:39:ee:c5:
         b1:b6:67:75:b6:23:e7:2b:35:11:33:17:d3:5f:48:dc:1e:3d:
         3c:ec:d7:4a:3f:d5:2c:1a:05:09:d7:00:ae:b4:aa:61:17:17:
         b3:40:82:8f:47:6d:d8:61:01:03:0b:0a:24:71:33:41:f9:f7:
         cb:a3:d6:a3:6b:b3:5e:0e:1f:1a:28:8b:60:79:a4:ac:31:89:
         27:88:68:56:69:c6:80:41:6f:56:1d:45:51:6b:1d:2c:04:9d:
         21:f3:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----