Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e3234392e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          zXJMVOMvflsIkHoAnmviyiV2y35CJFZuNambOB7AOXE=
Subject key identifier:   42:EA:C4:F7:D6:4C:EF:87:E1:94:11:D4:BB:ED:2B:AC:1C:B8:90:11
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       221EA7B633EFCE764B740166C8FE15EA81DFA66D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.123.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:a7:b6:33:ef:ce:76:4b:74:01:66:c8:fe:15:ea:81:df:a6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject: CN=3082010A0282010100D0D9196942A46018B76D08BD1AEC7D41F4179A2C6410EA34D5FCB98083A57E5F698BA8E6B0134D5ACD0464FB8D1A6199B4646AE9CC06173DFB4E8E9DFF795DA57666BE376CB1A1142DB8A951B9C7038BB4C3AF67A92F08480C265E8F68C847FCC73D7D3B663EDC6DEAE072A8FDEDA0B57C83F9C87C1D6BA2CC6AFE54D3859277883F46514841C36D876F28233C41DB2B3C14A90D94E2BFC55CC24D09E9568BCBA242FCF7A5DA26B4564A0024390B78CEB03DDFD49D50CEC4885C74E9F99A9D8B6D53FF2B17346CE1F5777929B4C001EC8E59843EF8AD3467856596C14761E8512268EB1C49B6202B44085667838B14C2688B74227AFA058518F30FCDD382121B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:19:69:42:a4:60:18:b7:6d:08:bd:1a:ec:
                    7d:41:f4:17:9a:2c:64:10:ea:34:d5:fc:b9:80:83:
                    a5:7e:5f:69:8b:a8:e6:b0:13:4d:5a:cd:04:64:fb:
                    8d:1a:61:99:b4:64:6a:e9:cc:06:17:3d:fb:4e:8e:
                    9d:ff:79:5d:a5:76:66:be:37:6c:b1:a1:14:2d:b8:
                    a9:51:b9:c7:03:8b:b4:c3:af:67:a9:2f:08:48:0c:
                    26:5e:8f:68:c8:47:fc:c7:3d:7d:3b:66:3e:dc:6d:
                    ea:e0:72:a8:fd:ed:a0:b5:7c:83:f9:c8:7c:1d:6b:
                    a2:cc:6a:fe:54:d3:85:92:77:88:3f:46:51:48:41:
                    c3:6d:87:6f:28:23:3c:41:db:2b:3c:14:a9:0d:94:
                    e2:bf:c5:5c:c2:4d:09:e9:56:8b:cb:a2:42:fc:f7:
                    a5:da:26:b4:56:4a:00:24:39:0b:78:ce:b0:3d:df:
                    d4:9d:50:ce:c4:88:5c:74:e9:f9:9a:9d:8b:6d:53:
                    ff:2b:17:34:6c:e1:f5:77:79:29:b4:c0:01:ec:8e:
                    59:84:3e:f8:ad:34:67:85:65:96:c1:47:61:e8:51:
                    22:68:eb:1c:49:b6:20:2b:44:08:56:67:83:8b:14:
                    c2:68:8b:74:22:7a:fa:05:85:18:f3:0f:cd:d3:82:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:C4:F7:D6:4C:EF:87:E1:94:11:D4:BB:ED:2B:AC:1C:B8:90:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:55:02:f9:91:22:0f:b1:2e:6f:6b:76:dd:2b:bc:a5:c0:5f:
         69:df:16:9c:00:e2:ab:a7:5a:96:ac:a9:b7:a3:b5:35:96:e0:
         f0:55:ba:01:d8:ce:5d:e8:56:a7:ec:c7:1a:5c:51:b7:a0:44:
         17:07:b5:4d:81:e0:00:7b:70:43:8f:11:8c:8e:0e:8b:75:0e:
         07:bd:c3:54:ef:9a:97:4e:e4:c7:c0:ac:1c:ad:63:3e:c0:ac:
         2e:a7:32:7c:b9:f9:bd:db:47:38:ed:6c:61:b3:4e:81:71:89:
         7e:75:f8:45:f8:af:6f:91:d8:fe:e5:af:f0:cd:b5:35:10:62:
         d1:be:19:c0:f6:22:60:ea:31:36:01:17:91:2c:b3:82:c2:73:
         73:4c:a9:11:f5:2a:de:09:01:70:66:96:5d:48:43:20:9e:30:
         26:85:3e:09:19:77:ab:dd:0a:ab:ff:d6:bd:d1:9f:13:cc:2c:
         83:be:3a:7a:38:71:1a:9f:51:8c:14:71:ce:c9:77:70:dc:f1:
         5b:4b:50:49:06:17:17:71:73:0e:44:c7:ad:d4:d1:95:58:8d:
         79:96:08:1b:93:22:e2:04:20:cc:c7:6f:98:69:dc:f6:0b:95:
         57:98:3f:d8:73:31:9c:8d:4e:85:db:97:25:84:04:15:3a:ba:
         06:9d:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----