Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3137322e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132302e3137322e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          eqTnrVWAOvAJQ9JL05DOpSnuydyNRJoLLvrykbXApVs=
Subject key identifier:   FB:5B:3E:65:CC:19:8B:75:2D:92:2E:1C:A9:71:9A:1B:99:1C:9F:FF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3D9B796F46EF479CDC1ABAACD77DF3AD8D2C43CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3137322e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:01 +0000
ROA not before:           Wed 10 Nov 2021 06:55:01 +0000
ROA not after:            Thu 10 Nov 2022 07:00:01 +0000
asID:                     63859
IP address blocks:        103.120.172.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9b:79:6f:46:ef:47:9c:dc:1a:ba:ac:d7:7d:f3:ad:8d:2c:43:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:01 2021 GMT
            Not After : Nov 10 07:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:9f:cc:6c:4b:58:84:4b:9c:91:57:46:68:
                    b7:a7:fa:ee:3e:8e:1a:13:85:52:49:97:9b:e0:0a:
                    ef:ae:0c:26:71:6f:79:bd:8a:b9:53:ab:72:0c:a4:
                    e7:ce:63:8d:06:25:3d:14:65:4c:1d:92:f2:79:08:
                    5b:7b:8d:ff:b5:a1:fb:61:7d:29:1d:8c:b5:04:c5:
                    9f:a0:eb:a0:44:fb:e5:53:77:23:10:21:23:6b:b7:
                    8d:d2:c2:9e:19:36:e0:92:f4:92:52:46:58:cb:8b:
                    f0:6f:1d:be:90:a3:b0:5a:2f:34:29:45:9d:6f:f7:
                    1f:a1:f8:69:cf:df:dd:62:eb:fe:8e:98:f3:fa:e0:
                    f2:ea:2c:99:36:7a:b8:17:5b:3f:c3:8c:dc:77:70:
                    0f:65:28:f4:08:c3:97:47:1c:a9:67:fe:f8:72:6c:
                    fd:aa:2c:7f:85:b9:69:e6:5a:9e:7e:96:81:e5:09:
                    fc:b9:5b:50:4c:22:91:ed:32:51:64:da:01:d5:1d:
                    95:ef:0d:3a:57:cc:18:69:a1:e3:d1:61:cf:95:27:
                    c4:2a:ac:a2:d6:40:6f:6f:ac:29:d9:17:b8:03:6c:
                    ad:e6:52:4d:2b:fc:e8:8f:31:d7:9f:2c:53:61:15:
                    68:28:3d:f5:00:c8:15:79:8f:a4:e8:1e:ab:d5:ce:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:3E:65:CC:19:8B:75:2D:92:2E:1C:A9:71:9A:1B:99:1C:9F:FF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3137322e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:29:7c:c9:3e:f9:7c:d9:92:81:5b:6a:9f:9e:3f:14:dc:
         81:a8:58:af:69:95:30:a8:e4:5f:1e:8b:8f:f7:98:8b:42:70:
         65:2c:32:79:58:a0:a4:a5:ed:bd:fe:4d:b1:84:0d:fc:17:cf:
         e3:ef:19:0a:73:3f:a9:2d:cd:f5:38:6d:a1:f7:c7:4e:68:9d:
         6e:c5:6b:ee:85:9b:67:29:e5:88:82:66:94:c2:42:2a:16:4e:
         53:b1:93:62:f3:18:3f:87:07:42:53:82:06:a1:46:a2:50:2b:
         94:d1:98:b9:f9:33:ad:8a:ba:85:18:45:5c:4d:cd:0d:79:88:
         b5:52:8d:c1:8f:c0:dc:64:53:f0:09:f7:f2:27:de:61:88:d9:
         e8:8c:8a:ce:39:90:92:f1:be:91:d4:df:ab:22:c5:d3:68:d1:
         0a:b0:22:8e:a8:93:0d:a2:c5:2e:b2:5b:86:fe:e2:0d:36:f6:
         57:bc:aa:4f:95:79:8e:1f:55:a2:de:80:dc:be:b7:34:54:89:
         4d:ed:46:a6:e2:67:55:46:9d:6f:29:0a:9d:8c:1f:a9:a8:6a:
         5f:4a:d9:a3:ef:38:ac:86:53:4c:ce:98:35:ef:19:c1:30:91:
         bb:98:d1:f9:0c:e5:84:22:94:82:51:74:3a:54:96:a0:12:64:
         01:6a:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----