Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132322e33322e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          QRDhYYXqbgz2hJm/K04u4dXC7loJhdVAyksG1AJSmsc=
Subject key identifier:   52:E2:2B:EA:A5:F1:C4:49:A9:CF:AF:87:B7:16:A5:3E:0C:40:E9:AC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7DC2C93ABA50033B6C1D051D3E2051F3CE39D1F2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.122.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c2:c9:3a:ba:50:03:3b:6c:1d:05:1d:3e:20:51:f3:ce:39:d1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject: CN=3082010A0282010100B098CBDB5E7729300662F40F6BA05864C6A150E464DFE8B9CC94F00A245A590CAACB7CF0355BAF98261C08F573566BBCCDA7B6FFDA80BD3C38B5AC949EF32734B4F2C1FD61631D60D6073BB3A9447ECF75931249DA7168C418580BDE8EDB8E756E058C2DDC3259D02B8799CA9487B4A26376301EB0B667C4473727F809B653E833FBDE21290132974702902A4126B79DC64F0E1CE8C23A55A2255787319D2BF59398F822FD605105A52949D7E1870CC4717774F544641CADF6B14C6081E229EB29E750A530F70072CBF3CA6767123182479B483FA3B1B0DB59A9208F4738330360CF7195288A5CFE17CBA3D12390AFD73BF730DC385C87937630FBBC99EA29FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:cb:db:5e:77:29:30:06:62:f4:0f:6b:a0:
                    58:64:c6:a1:50:e4:64:df:e8:b9:cc:94:f0:0a:24:
                    5a:59:0c:aa:cb:7c:f0:35:5b:af:98:26:1c:08:f5:
                    73:56:6b:bc:cd:a7:b6:ff:da:80:bd:3c:38:b5:ac:
                    94:9e:f3:27:34:b4:f2:c1:fd:61:63:1d:60:d6:07:
                    3b:b3:a9:44:7e:cf:75:93:12:49:da:71:68:c4:18:
                    58:0b:de:8e:db:8e:75:6e:05:8c:2d:dc:32:59:d0:
                    2b:87:99:ca:94:87:b4:a2:63:76:30:1e:b0:b6:67:
                    c4:47:37:27:f8:09:b6:53:e8:33:fb:de:21:29:01:
                    32:97:47:02:90:2a:41:26:b7:9d:c6:4f:0e:1c:e8:
                    c2:3a:55:a2:25:57:87:31:9d:2b:f5:93:98:f8:22:
                    fd:60:51:05:a5:29:49:d7:e1:87:0c:c4:71:77:74:
                    f5:44:64:1c:ad:f6:b1:4c:60:81:e2:29:eb:29:e7:
                    50:a5:30:f7:00:72:cb:f3:ca:67:67:12:31:82:47:
                    9b:48:3f:a3:b1:b0:db:59:a9:20:8f:47:38:33:03:
                    60:cf:71:95:28:8a:5c:fe:17:cb:a3:d1:23:90:af:
                    d7:3b:f7:30:dc:38:5c:87:93:76:30:fb:bc:99:ea:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E2:2B:EA:A5:F1:C4:49:A9:CF:AF:87:B7:16:A5:3E:0C:40:E9:AC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:69:9b:d1:eb:51:e6:7a:e1:49:69:db:0b:15:a0:4d:e0:3c:
         82:b1:3b:46:aa:cb:59:9e:71:20:69:db:e7:88:8e:db:12:3d:
         33:1a:64:52:7d:8e:39:16:58:04:a5:50:ae:f7:ee:31:f1:e2:
         70:79:b1:55:c0:ec:08:91:fc:6c:dd:9e:db:47:56:65:58:b0:
         03:21:fc:3e:4c:4d:38:41:ee:ac:71:67:b0:fc:13:f5:2c:cb:
         f9:82:bd:08:1c:45:a2:be:63:52:a6:d8:31:bc:c4:f6:13:3d:
         d1:33:c2:47:31:d0:e4:64:47:3a:0a:f4:ab:a5:41:42:37:c3:
         68:81:3a:cd:b8:e3:e5:8d:ac:b2:e1:33:5d:bc:a1:9e:1a:61:
         fd:79:16:69:2d:e4:e1:99:13:97:b6:b7:8a:98:d5:db:ca:98:
         f9:a9:b1:a6:59:7a:71:26:bf:66:8c:a7:62:ad:22:44:d1:76:
         e9:d8:75:6d:4f:eb:13:ea:ef:eb:59:71:da:8b:80:aa:3e:14:
         71:61:9b:dd:9c:da:eb:3e:ea:c4:94:56:da:9a:50:2d:b1:6b:
         d9:23:d1:c7:70:c7:2a:10:89:76:fa:87:89:3d:f3:3b:4f:90:
         21:e6:1c:8f:38:5f:c8:e0:ff:26:92:cb:84:f3:a7:6e:8f:f6:
         c1:95:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----