Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33342e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132322e33342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Yah5JcAQ4indzVhRIetp0B/xMkqYzkENDAXNa5HWV/0=
Subject key identifier:   EF:1F:8B:6E:ED:1C:8C:EE:C4:FF:1E:6B:30:FB:8D:C6:7B:86:70:EE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1BF6BBA985C9FBE14AF8EE6A543AEA6C0EFA270C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33342e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.122.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f6:bb:a9:85:c9:fb:e1:4a:f8:ee:6a:54:3a:ea:6c:0e:fa:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:f2:70:0c:c2:49:4c:d7:38:3e:1a:6f:43:
                    01:05:02:0c:1d:ca:d1:4d:6c:ff:9f:e7:93:4c:99:
                    c8:49:c8:67:2d:6f:c7:ec:17:a1:94:62:5d:62:6f:
                    4a:b3:fc:b2:1e:c3:89:2a:ab:20:12:5c:a8:74:88:
                    22:56:00:30:21:27:4b:ea:68:1b:e1:20:e2:6b:40:
                    9c:b4:24:e0:1e:0e:73:c0:f4:4f:0e:13:77:75:6d:
                    49:46:4f:17:cb:cd:4c:d6:5b:1b:57:06:af:06:06:
                    e4:47:1b:37:cc:8a:49:ef:fc:ac:16:ec:4a:3f:be:
                    99:2c:6c:e8:79:e5:60:24:49:62:07:02:35:e7:2f:
                    15:6e:f6:93:51:97:78:ea:9d:0b:58:a1:6e:32:e5:
                    56:17:e3:03:2c:0a:b5:31:05:6f:40:03:b3:c3:1d:
                    67:36:1b:f4:b2:25:84:8a:63:3c:53:e6:b4:ed:be:
                    9d:3e:db:e3:c8:e6:a0:c2:7d:0e:f4:01:07:b2:31:
                    ab:a5:3c:0d:32:b8:c5:63:31:b7:9b:c7:f6:78:07:
                    e7:87:d9:0a:f9:45:16:8c:ea:07:19:e7:d4:82:d2:
                    12:fe:41:f8:e6:78:4a:9a:8c:a2:1a:cd:c6:98:5d:
                    6b:a3:fd:9b:93:a1:fe:a2:dc:82:b9:80:4d:f6:02:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:8B:6E:ED:1C:8C:EE:C4:FF:1E:6B:30:FB:8D:C6:7B:86:70:EE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33342e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:58:41:20:65:e6:74:39:45:48:34:6c:fa:24:fd:42:d9:
         89:df:a6:3c:df:26:bc:f2:bb:69:03:2c:e8:9c:43:63:05:47:
         59:32:d3:2b:10:02:6f:b6:b6:a1:7e:ed:f5:0d:50:83:08:ef:
         3a:3c:a9:f0:b3:a0:26:b0:b2:ff:85:08:30:6d:1d:2c:2b:90:
         68:2e:17:b9:9d:22:25:6d:4e:09:61:38:42:9c:e4:63:78:ce:
         a8:a5:cf:51:10:35:29:ff:5c:96:62:a2:d9:e7:09:75:9a:da:
         34:02:f5:ab:ce:42:e8:36:89:0c:c5:08:30:5b:ff:85:bf:d5:
         2c:23:0a:73:9c:9b:36:f4:62:ad:98:bf:ff:7a:d9:88:2a:8c:
         c6:3b:35:5b:c4:5d:7a:67:70:1a:0e:85:0a:20:bf:6e:e2:83:
         16:48:ab:c0:d7:86:5f:50:62:9e:4c:34:3d:a5:65:ca:76:c7:
         ed:c4:bc:f7:46:15:73:4e:e8:6d:aa:e3:b3:81:68:1f:b1:7b:
         6c:c5:e1:25:bf:28:4e:01:16:b8:45:e0:70:cc:02:40:e9:81:
         8f:08:bf:ba:ee:13:dc:95:49:83:dd:7e:50:fc:60:61:f2:fd:
         e6:4b:bd:0b:8a:92:3a:51:96:39:40:e0:f4:da:22:04:97:73:
         39:fe:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----