Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134342e302f32322d3234203d3e20313336313139.roa
File:                     3130332e3131392e3134342e302f32322d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          1coeDloP4ip1qwT3uGNS8yxbHZLLKF44o2CUE43Zvv0=
Subject key identifier:   CA:79:D2:36:FA:1A:DD:AC:CE:C1:79:37:12:EF:53:EE:CB:21:1E:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FCEB4DA222727148436F7212510D0D673AA1240
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134342e302f32322d3234203d3e20313336313139.roa
Signing time:             Tue 16 Nov 2021 03:31:18 +0000
ROA not before:           Tue 16 Nov 2021 03:26:18 +0000
ROA not after:            Wed 16 Nov 2022 03:31:18 +0000
asID:                     136119
IP address blocks:        103.119.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:b4:da:22:27:27:14:84:36:f7:21:25:10:d0:d6:73:aa:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 16 03:26:18 2021 GMT
            Not After : Nov 16 03:31:18 2022 GMT
        Subject: CN=3082010A0282010100D87D50863A1242D4BB30941EFBF91616FEEC18A9DB6E0F1710AEB01FC03EEEE7ED94F7105C26297CFE49D73244F30E3325680EEF222225F23E6DFC1AEDE0405A7459F4D286847F25E71FDA05DB530DBAB6E4DE3BE3C26A78E5F8CC97C6607EB90E48E8A04848CCC59A24175C2BE5F9840D9532408FDA6D3855EEC3BA8CF49B51F20270CD2A107D94B5EA6F27A2AE677BC17A21B3DEEB515E6BE5024BA01E72A2E190B8D6E0A536639609312C7A99955A48DF394169E990ACE675F0894EA92FD06492D076D2D61FE5C75A5E864B34CA1A902B06C31B2D13131F86D888FFFAC1486CF7B3C9EBA8E0D821C84A4AA504F38A7FBF034FAF272DC1B1C7649376B08A1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:50:86:3a:12:42:d4:bb:30:94:1e:fb:f9:
                    16:16:fe:ec:18:a9:db:6e:0f:17:10:ae:b0:1f:c0:
                    3e:ee:e7:ed:94:f7:10:5c:26:29:7c:fe:49:d7:32:
                    44:f3:0e:33:25:68:0e:ef:22:22:25:f2:3e:6d:fc:
                    1a:ed:e0:40:5a:74:59:f4:d2:86:84:7f:25:e7:1f:
                    da:05:db:53:0d:ba:b6:e4:de:3b:e3:c2:6a:78:e5:
                    f8:cc:97:c6:60:7e:b9:0e:48:e8:a0:48:48:cc:c5:
                    9a:24:17:5c:2b:e5:f9:84:0d:95:32:40:8f:da:6d:
                    38:55:ee:c3:ba:8c:f4:9b:51:f2:02:70:cd:2a:10:
                    7d:94:b5:ea:6f:27:a2:ae:67:7b:c1:7a:21:b3:de:
                    eb:51:5e:6b:e5:02:4b:a0:1e:72:a2:e1:90:b8:d6:
                    e0:a5:36:63:96:09:31:2c:7a:99:95:5a:48:df:39:
                    41:69:e9:90:ac:e6:75:f0:89:4e:a9:2f:d0:64:92:
                    d0:76:d2:d6:1f:e5:c7:5a:5e:86:4b:34:ca:1a:90:
                    2b:06:c3:1b:2d:13:13:1f:86:d8:88:ff:fa:c1:48:
                    6c:f7:b3:c9:eb:a8:e0:d8:21:c8:4a:4a:a5:04:f3:
                    8a:7f:bf:03:4f:af:27:2d:c1:b1:c7:64:93:76:b0:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:D2:36:FA:1A:DD:AC:CE:C1:79:37:12:EF:53:EE:CB:21:1E:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134342e302f32322d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:2c:2c:1c:85:33:b1:3e:83:aa:db:2d:2c:b6:c8:69:06:
         95:77:cf:b2:69:ab:9a:ac:dd:1f:57:6e:03:bc:bf:93:6a:cf:
         a9:8d:01:8b:87:df:1f:d6:e9:a3:af:54:ab:fd:da:68:eb:26:
         ed:10:94:8c:04:5e:3c:a6:a9:83:c7:b7:8c:4b:48:5e:23:ff:
         eb:5c:75:6f:32:f0:6c:2b:b6:81:76:1d:58:25:fb:20:2f:5c:
         d5:42:8f:3c:b5:0f:15:d7:07:c7:e5:6a:a3:15:ab:e6:dc:de:
         39:99:7f:66:85:bc:31:64:0c:99:4f:fb:20:7e:bc:10:6c:45:
         84:8f:0d:53:da:61:79:b7:f5:82:fd:3f:99:15:f7:12:13:7c:
         80:a1:fe:69:75:66:ae:cc:8a:f3:c9:ad:3d:df:7f:cb:49:a8:
         a1:af:cb:b7:96:c9:88:89:18:13:db:4e:bd:bc:f7:04:d9:61:
         da:8c:6b:19:41:4b:6f:b3:1a:2f:d5:45:53:0e:c4:bb:0c:93:
         a9:ed:2b:72:ea:67:8b:a7:e2:b2:c0:ae:14:48:75:ed:4e:0c:
         84:8f:7f:0d:f4:e3:f2:b5:07:9e:6b:dc:8c:35:8c:fc:da:80:
         55:fc:79:2a:b5:24:9f:ce:3e:f4:d3:dc:f6:6f:98:88:ac:93:
         5c:4b:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----