Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e3234382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          MSRADYsX7o9e/Hxb0ofUPYrOabnitx/4VK+6YD/adEo=
Subject key identifier:   6B:B0:0F:D8:BF:52:A9:82:17:4B:A7:74:3B:D9:B6:0C:17:C8:5D:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       17611E86D7336E3996293C00689472C59DA3E63A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.123.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:1e:86:d7:33:6e:39:96:29:3c:00:68:94:72:c5:9d:a3:e6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject: CN=3082010A0282010100AE074AC8A338C1BB6E91252027F4FAA63C8A9E71A7912C7B572A6CA0F8A4686A33991C71AFECAE72AF89BE9F6D9C8633C2880190EF060B09E87C75592CB2BBED3654D9024F4E40707E566A85D3175A60A0771C2FE6B8E46A916FE6EEB696AA5FC2356928A9A44285D622C527CD7EDDD2B2EC8F16E5609EB2BC4116CEAFFDFFFF67EF13C5AC2EA7E0157BAAF1173F6845A7FDEADCD59B8DEDDA19C07B9AED56273057454EB946D4530FCA72CB4E6A19775EE99760D03EE7A9DD73AB5BE868AAEB1570291A20E45D7FB74413B9F77CF5E448A7E4505060F027243670F6E4806F1FD69E472D066F912F9D118005D38AA38E8B83373B1629CC9903B522BC58B4AF150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:4a:c8:a3:38:c1:bb:6e:91:25:20:27:f4:
                    fa:a6:3c:8a:9e:71:a7:91:2c:7b:57:2a:6c:a0:f8:
                    a4:68:6a:33:99:1c:71:af:ec:ae:72:af:89:be:9f:
                    6d:9c:86:33:c2:88:01:90:ef:06:0b:09:e8:7c:75:
                    59:2c:b2:bb:ed:36:54:d9:02:4f:4e:40:70:7e:56:
                    6a:85:d3:17:5a:60:a0:77:1c:2f:e6:b8:e4:6a:91:
                    6f:e6:ee:b6:96:aa:5f:c2:35:69:28:a9:a4:42:85:
                    d6:22:c5:27:cd:7e:dd:d2:b2:ec:8f:16:e5:60:9e:
                    b2:bc:41:16:ce:af:fd:ff:ff:67:ef:13:c5:ac:2e:
                    a7:e0:15:7b:aa:f1:17:3f:68:45:a7:fd:ea:dc:d5:
                    9b:8d:ed:da:19:c0:7b:9a:ed:56:27:30:57:45:4e:
                    b9:46:d4:53:0f:ca:72:cb:4e:6a:19:77:5e:e9:97:
                    60:d0:3e:e7:a9:dd:73:ab:5b:e8:68:aa:eb:15:70:
                    29:1a:20:e4:5d:7f:b7:44:13:b9:f7:7c:f5:e4:48:
                    a7:e4:50:50:60:f0:27:24:36:70:f6:e4:80:6f:1f:
                    d6:9e:47:2d:06:6f:91:2f:9d:11:80:05:d3:8a:a3:
                    8e:8b:83:37:3b:16:29:cc:99:03:b5:22:bc:58:b4:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B0:0F:D8:BF:52:A9:82:17:4B:A7:74:3B:D9:B6:0C:17:C8:5D:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:24:c4:e8:59:82:bf:a7:18:10:ac:39:0d:1e:63:1c:0c:
         93:7b:94:ab:da:39:63:93:e2:64:88:b3:47:a2:ea:91:a0:01:
         c6:94:f3:1c:43:16:be:44:4f:a0:61:62:73:22:19:59:34:cd:
         93:4b:63:8f:78:e3:71:00:74:1b:25:9f:e2:88:b7:12:bf:cc:
         2c:e6:84:d0:28:4f:3b:1b:63:a6:ca:95:18:80:48:1d:84:0b:
         e5:63:45:b5:55:70:80:12:a8:2e:29:7a:5c:ce:17:85:0f:9c:
         40:df:a3:5e:ad:ba:d6:6b:9e:ca:96:6d:0b:c1:0a:a8:cc:cc:
         79:9a:d0:6b:08:96:f9:b9:57:02:67:92:4c:1a:c2:38:f2:06:
         4f:8c:79:3e:08:8f:5a:c1:69:44:d0:4a:f0:15:6c:8d:d2:c9:
         28:a8:70:e5:4c:62:5b:14:93:4a:b3:7e:21:c3:31:d1:64:31:
         e0:e0:ff:82:b7:bc:b4:5b:85:57:4c:9c:50:10:d1:73:bd:a0:
         6b:9c:1d:48:90:64:0a:42:81:b7:f9:a8:5b:78:97:e3:e6:bc:
         46:ef:ae:14:bf:f5:ed:4f:ae:b6:00:88:be:71:5b:88:bc:ac:
         ef:e6:90:f1:8d:48:9d:07:75:46:90:58:4c:c6:54:35:07:c3:
         27:00:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----