Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130342e302f32322d3234203d3e2030.roa
File:                     3130332e3132322e3130342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          J/tfr0kyHbfEGDAAr8BmSWnfERoYus3kMH6b2U7BJ20=
Subject key identifier:   42:64:CE:F3:69:2B:4A:C0:14:2F:1B:91:EA:48:A7:40:E2:29:6A:BD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D710FF1A6D3D9EC5F0CA5E7094FE6F063DE9659
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:25:29 +0000
ROA not before:           Wed 02 Feb 2022 06:20:29 +0000
ROA not after:            Thu 02 Feb 2023 06:25:29 +0000
asID:                     0
IP address blocks:        103.122.104.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:71:0f:f1:a6:d3:d9:ec:5f:0c:a5:e7:09:4f:e6:f0:63:de:96:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:20:29 2022 GMT
            Not After : Feb  2 06:25:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:2e:92:2b:24:ff:ec:0f:dd:67:c8:36:60:
                    83:6d:9a:44:65:08:5e:24:e0:70:0b:03:d8:15:93:
                    5d:6c:b3:15:b8:16:4a:79:dc:4b:f3:58:d0:10:e5:
                    07:61:48:d0:bc:61:17:ce:62:83:ad:61:1b:78:b8:
                    54:ed:1e:c3:b9:67:cf:81:c1:80:d7:ca:49:5f:8a:
                    99:02:ac:24:2a:ed:06:bb:7d:7d:5b:70:28:62:22:
                    b6:c4:f2:a4:eb:5c:72:d7:28:d3:c7:97:ed:f6:40:
                    a3:34:c9:15:37:46:e4:cc:d9:c3:a4:d7:d2:b5:2f:
                    30:d1:19:54:d3:58:92:1f:9f:83:97:9d:1f:d4:34:
                    b6:81:8b:e7:94:da:31:a4:91:be:3a:6c:05:4c:9b:
                    e6:f5:17:d2:59:91:3c:46:f3:6b:13:9a:8d:83:9d:
                    d8:dc:4c:ac:46:77:14:11:41:5e:97:61:7a:06:01:
                    76:9e:e3:10:a0:c0:ff:70:91:92:0c:2b:f1:35:85:
                    2a:c0:bf:5e:f8:fc:3c:bd:31:d6:2a:f2:89:44:20:
                    91:32:6c:34:04:48:4b:0e:da:92:39:96:4f:03:29:
                    95:fb:c4:d6:f6:c5:4c:62:c8:54:bd:3f:56:aa:d9:
                    b8:27:d4:f8:74:47:fb:1d:fa:86:00:21:87:58:13:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:64:CE:F3:69:2B:4A:C0:14:2F:1B:91:EA:48:A7:40:E2:29:6A:BD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e3130342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:5d:2d:64:97:5e:1e:14:11:69:12:da:69:e1:a1:0f:11:
         69:76:fc:d1:74:92:f4:20:77:d9:64:c5:df:90:1b:9d:34:ab:
         e4:97:47:12:47:3c:2d:a2:1f:c4:d4:c4:f7:90:4b:31:15:5b:
         2f:27:86:0f:8c:51:9f:7d:1e:be:b6:24:a9:ad:8f:86:a3:5a:
         9c:d6:aa:57:6d:3f:c3:2a:38:de:08:6e:0b:69:1c:47:18:34:
         1e:41:87:9f:68:8e:8c:17:2a:86:e3:32:e6:5c:86:08:37:b6:
         f1:c3:fb:97:a3:92:71:dc:92:a6:fd:ff:08:6b:ee:52:5d:7b:
         5c:36:f7:f3:24:8c:2f:19:e9:1a:7e:0f:25:68:8f:47:27:f6:
         26:ce:eb:3c:b8:58:97:25:e3:bc:a5:88:e1:1c:54:6f:52:03:
         6c:ab:26:b6:b9:ef:de:8f:49:04:ee:a4:c0:2b:49:f0:f9:fb:
         97:54:ca:43:f6:cd:be:11:0c:90:ae:2e:e4:a1:b9:93:28:6f:
         e5:21:ca:de:1b:85:5c:71:f3:91:42:b1:f3:51:80:66:39:b5:
         17:f5:86:5c:6b:11:31:33:b7:4c:0e:60:8c:f8:7c:82:66:0e:
         bb:2d:d7:06:91:7a:19:24:60:a5:b9:88:d1:9a:d2:b7:11:94:
         44:a5:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----