Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33332e302f3234203d3e20313331313131.roa
File:                     3130332e3132322e33332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          A7Emo2ah/dSmNaE8CCEphdSmjn3YVwkvmE6cBltqlH0=
Subject key identifier:   09:82:76:68:AF:1E:91:BA:AB:BB:F9:C2:7A:C5:DC:8B:3E:AC:50:1B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23DF0F4EF641D6E7EAD89F756670CBC245C56F71
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33332e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.122.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:df:0f:4e:f6:41:d6:e7:ea:d8:9f:75:66:70:cb:c2:45:c5:6f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:ee:8f:bc:e6:4a:a5:2d:32:96:77:7a:f2:
                    d5:94:7e:d4:8b:8b:f5:d4:f9:a0:7e:f7:ec:4e:b9:
                    e2:75:39:09:8b:78:56:a9:ad:8e:04:dc:e8:12:22:
                    c0:e9:c4:16:aa:38:a4:ad:3d:5d:e6:54:cb:b1:6c:
                    c7:d3:05:2e:90:83:40:da:27:e8:0f:4b:f5:9c:8d:
                    a4:1e:d3:cd:2b:24:29:6b:38:13:d4:0c:6b:ef:78:
                    91:49:c9:0e:b7:67:1d:eb:bb:f0:f7:3c:87:48:ec:
                    96:51:ad:10:e4:09:58:b3:96:18:f1:b6:6f:86:0e:
                    15:01:ef:4f:7a:07:76:40:17:f0:29:2d:24:a5:9e:
                    e5:7e:ae:fa:55:2d:f3:95:9c:4f:fd:2f:e4:63:44:
                    70:8e:fe:27:3f:2e:8f:9b:eb:45:3d:0b:47:33:bb:
                    66:fe:3b:d2:15:12:03:c6:80:1b:be:67:54:17:0d:
                    fe:94:a2:57:6c:55:35:49:a9:fb:29:21:d6:27:ce:
                    52:59:9f:ef:66:a6:cf:43:c3:d9:9a:b5:03:8b:03:
                    99:e6:e8:44:7e:a6:72:8c:d5:cf:75:bd:99:ba:98:
                    03:44:87:f0:cf:f8:95:5b:56:09:8a:64:a8:a8:3b:
                    0f:2d:03:8b:a2:16:fe:f3:42:21:4c:36:b6:04:a9:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:76:68:AF:1E:91:BA:AB:BB:F9:C2:7A:C5:DC:8B:3E:AC:50:1B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:f6:28:b3:12:23:47:6a:07:97:e1:b6:41:c7:91:6c:7a:
         4f:34:b2:d7:44:25:5d:8b:bc:0f:8a:43:29:52:60:7a:a1:00:
         a9:42:21:70:a4:00:07:c2:04:54:8a:84:bd:e1:52:94:b7:b1:
         98:0c:de:db:02:17:bb:09:12:6f:58:64:a3:be:c6:98:26:30:
         e9:1f:3e:92:43:17:66:8a:2b:8e:88:05:63:d3:07:95:2b:97:
         f2:38:13:c7:73:f5:a0:bd:67:5d:2d:9a:c2:8f:9d:81:3e:4c:
         1a:61:d5:55:cf:0b:88:8d:30:8a:6c:44:12:c8:f4:d7:42:b6:
         8f:f1:7e:a0:b4:85:35:ec:a5:2a:ed:0d:ac:19:bf:dc:e0:5f:
         cd:85:9d:f0:b9:f6:20:a0:bd:f9:10:6a:80:9b:ff:af:b3:0e:
         a0:b2:0e:c6:b8:b6:bb:9a:d1:ef:e0:16:26:34:b2:23:f9:9e:
         6b:7f:17:0f:79:f2:51:29:46:e9:fe:88:a7:4c:5a:b2:e7:93:
         f2:5b:56:4a:fe:b1:ab:b9:f1:39:57:71:f4:f5:38:ab:8d:84:
         b0:b8:f4:e5:08:c7:87:6b:f7:53:6e:22:21:91:21:a0:b7:44:
         63:dd:ac:93:f9:64:9e:ac:e5:21:f4:19:3c:32:f7:b8:ee:6f:
         b6:e9:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----