Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e39362e302f32322d3234203d3e2030.roa
File:                     3130332e3132322e39362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          J+2Qh1eyu2wHNPAq73iHKPSoNc5EL4XdZN2o6zjjXBs=
Subject key identifier:   20:93:A2:3E:AB:23:65:5E:96:7B:F2:D0:11:B8:A3:0F:69:97:8E:AD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30CDB331B134449DC770EA2F53998355D46E5281
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e39362e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:21:12 +0000
ROA not before:           Wed 02 Feb 2022 06:16:12 +0000
ROA not after:            Thu 02 Feb 2023 06:21:12 +0000
asID:                     0
IP address blocks:        103.122.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cd:b3:31:b1:34:44:9d:c7:70:ea:2f:53:99:83:55:d4:6e:52:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:16:12 2022 GMT
            Not After : Feb  2 06:21:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:8c:4e:70:d7:43:2b:e9:e9:6b:73:28:c7:
                    4e:c2:b5:f0:ba:6d:5a:2e:dc:d3:c7:62:a5:65:c3:
                    eb:95:30:3e:99:86:ad:55:f6:b7:5e:56:5c:0b:74:
                    f7:32:ea:d2:64:5f:74:00:2e:a9:05:ea:c6:57:9a:
                    8a:e6:bc:00:e6:7f:25:9c:d0:aa:f3:84:18:35:7b:
                    2e:e1:6e:3b:a6:4f:75:97:ba:bb:55:eb:1b:48:93:
                    cb:31:34:e1:cb:98:5b:73:a6:c6:e0:11:8c:54:24:
                    71:fc:bd:0e:b7:cd:cc:45:60:0b:74:1a:ef:04:af:
                    3f:cc:97:a3:45:92:b4:ef:74:30:c5:07:b1:d1:ac:
                    d0:20:2f:35:f0:2c:9e:df:06:47:79:f2:15:d9:99:
                    21:07:f6:dc:e9:15:16:d1:8d:92:cb:56:60:4a:c2:
                    0e:a0:19:74:e8:5a:1e:17:f0:67:24:96:bc:df:73:
                    18:cc:30:2f:c3:42:d2:31:8c:fd:c0:7c:c7:cc:2f:
                    63:c6:93:22:60:cd:2d:ac:59:3a:b5:97:02:8e:d5:
                    1b:3f:21:22:44:66:93:07:e1:c7:09:64:d9:6c:4b:
                    2f:82:5b:1b:7e:e2:87:b2:47:54:50:d6:e7:7e:25:
                    c3:2e:36:6d:92:5f:e3:6e:83:2e:17:98:57:6d:7e:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:A2:3E:AB:23:65:5E:96:7B:F2:D0:11:B8:A3:0F:69:97:8E:AD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e39362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:59:ce:2e:a1:33:f7:44:2a:35:91:9d:11:69:cd:c1:d6:95:
         93:5b:03:40:4a:7b:26:74:72:b9:4b:dd:19:f6:6e:bd:fe:0e:
         6e:49:30:b1:67:2f:44:4b:a6:9a:d5:8f:bc:95:f3:6a:a7:0b:
         5b:28:ff:c5:e5:96:09:b7:32:c7:28:c2:6e:97:62:0f:a5:93:
         0f:76:43:96:73:ca:51:64:bb:f9:ea:4a:e2:57:99:55:61:12:
         a9:3d:83:ce:78:f7:d2:64:cf:b6:71:8a:dc:7f:40:14:e9:8e:
         ec:8e:45:3e:82:bb:a7:80:0c:b8:55:e2:1f:4a:d2:67:22:87:
         8f:bc:d1:05:16:0b:b0:b5:5b:16:4d:76:1a:3b:81:68:08:98:
         25:9e:8d:07:23:14:3e:29:63:e1:13:22:60:46:ed:48:75:f9:
         74:84:76:ab:49:5c:03:04:43:00:5d:81:20:f5:e7:3e:b0:3f:
         98:15:a7:0c:69:1b:d6:36:91:29:96:9a:f0:45:de:92:ab:7a:
         1a:a6:b5:ed:90:86:39:01:50:7c:3a:5b:40:cc:4b:d6:fd:c4:
         4d:a1:f4:69:af:fb:df:3d:22:6f:24:68:3a:9c:52:d8:34:f1:
         83:09:c5:a9:7f:8d:20:7c:9c:2f:aa:40:2d:05:4d:2e:a2:3b:
         0d:60:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----