Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e36302e302f32322d3234203d3e203633383539.roa
File:                     3130332e3131392e36302e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          1ZTObT49uPWwgwJBcELURbVum1qIxbk7r05JGU/q9Xk=
Subject key identifier:   3E:50:F9:3C:A7:FA:E4:8F:5D:66:EA:59:A9:C3:EE:94:1B:E7:E6:B3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2716AFAE7429A4300887B6B69F2895072DB41961
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e36302e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:01 +0000
ROA not before:           Wed 10 Nov 2021 06:55:01 +0000
ROA not after:            Thu 10 Nov 2022 07:00:01 +0000
asID:                     63859
IP address blocks:        103.119.60.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:16:af:ae:74:29:a4:30:08:87:b6:b6:9f:28:95:07:2d:b4:19:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:01 2021 GMT
            Not After : Nov 10 07:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:78:0b:d0:c4:09:91:d7:34:9f:2d:05:56:
                    12:27:7c:c6:c5:dc:17:b0:00:f3:6c:31:91:87:cd:
                    94:20:b4:3b:1b:88:7f:a0:05:7f:43:44:dd:bd:2b:
                    fd:ef:1e:2e:9a:a7:1e:eb:42:e1:cc:9d:67:01:52:
                    64:6c:09:32:d7:79:e6:8b:b7:92:19:5e:67:c2:56:
                    40:7f:eb:19:79:aa:85:3f:52:a2:58:89:ca:83:30:
                    83:eb:6c:ce:cc:c2:1e:7a:ff:2a:55:0a:63:86:0a:
                    74:8d:9b:57:82:37:d2:56:78:4c:f3:7c:67:26:04:
                    71:17:80:d4:5d:73:33:8c:22:ef:c4:81:d1:3e:36:
                    03:de:74:7f:ff:61:e7:aa:d7:cd:d0:d2:ab:78:1b:
                    cc:c0:e6:8b:6f:ff:b5:4d:b5:18:47:ed:64:5b:99:
                    72:72:34:af:5f:cb:21:66:c9:40:5b:70:9e:e9:90:
                    6c:8e:43:72:ec:77:ac:dd:17:c2:52:27:93:30:bb:
                    ba:80:ac:80:69:5a:75:c5:2a:4c:f1:40:c5:68:f2:
                    26:6c:d1:f3:fd:dc:7b:08:91:02:56:02:6e:be:9e:
                    7c:d3:43:0f:08:7c:e6:9c:57:80:0a:04:41:0b:02:
                    8d:bb:dd:36:72:af:a4:47:83:db:c6:05:ef:92:76:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:F9:3C:A7:FA:E4:8F:5D:66:EA:59:A9:C3:EE:94:1B:E7:E6:B3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e36302e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:ca:b2:a5:88:c9:32:51:58:f4:03:d3:4e:fe:c3:8a:8a:
         3c:f1:f5:b5:19:1c:c2:58:1e:8d:cd:e2:df:11:78:a4:12:a7:
         68:4a:1c:55:76:3a:2b:cc:b2:95:3b:6a:82:dd:58:7f:cc:b7:
         81:18:8e:dc:e1:d1:14:e5:ff:a9:16:25:8d:e4:5d:f4:16:93:
         d5:a5:e2:3c:af:5d:8d:29:e0:49:64:99:86:98:62:3d:92:d7:
         e2:4d:54:7a:c5:4b:31:15:86:8e:a4:64:a7:47:a1:de:10:2a:
         9d:65:e6:43:97:35:32:e7:38:8f:75:2a:c0:94:81:54:06:94:
         ef:d6:21:48:51:af:5d:b4:93:9b:63:33:1d:ec:69:41:6c:38:
         e8:c7:b1:d4:d7:20:de:b1:71:80:30:25:0e:61:a5:5d:de:4c:
         2c:bd:bd:43:c2:a8:2e:6e:9b:8c:93:39:94:cb:a9:39:4d:bf:
         bd:4c:37:1a:de:38:00:65:d8:b2:61:4a:06:65:45:44:b3:b2:
         66:1e:a0:96:65:56:68:c3:7d:27:0f:16:13:f5:2b:8a:6d:16:
         dd:12:52:de:47:33:1a:12:e2:da:8f:53:4d:06:15:31:03:32:
         40:8d:b5:fa:9e:b6:2c:81:ad:04:90:d2:6d:8c:af:65:e6:83:
         f5:2e:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----