Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e3235302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          T6HrPMLGrCwRs+BYe1zjvktbn5kJtknTBqGUlYT+ZLg=
Subject key identifier:   A8:E7:E9:BE:BA:04:5E:0F:AC:34:6D:B8:51:C0:FA:B7:34:62:3E:99
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3B0D84E0344C86B7144198377C2126B07A41A831
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.123.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:84:e0:34:4c:86:b7:14:41:98:37:7c:21:26:b0:7a:41:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:95:3b:e8:a9:d4:1e:53:b1:bd:1f:22:1f:
                    75:83:54:7c:5c:0e:9e:74:84:fd:40:24:62:0b:e7:
                    98:cb:b9:ad:af:bd:23:af:fc:6c:ab:be:47:55:ee:
                    a5:fa:59:90:9e:f4:bd:5d:61:78:2a:be:4b:9e:4b:
                    f4:47:dd:9b:b5:2f:7e:8b:e2:fb:83:db:70:69:81:
                    11:08:e3:01:99:33:4e:60:5e:a3:16:30:a7:a3:da:
                    e0:fb:be:fb:5e:2e:05:72:8d:b0:68:e2:b6:44:84:
                    a2:e1:5f:8a:3f:58:56:45:7c:51:70:f6:04:83:17:
                    2d:55:a9:b7:ce:51:af:67:c9:35:99:c9:31:bc:2d:
                    bb:ca:fa:a1:6e:78:9c:53:0c:33:f9:da:13:19:9c:
                    04:8f:03:b9:ce:68:65:70:c3:3c:f3:8a:1b:f8:f2:
                    08:ac:d0:bb:c0:63:bd:68:da:b9:9b:24:7b:85:da:
                    b6:aa:f5:7f:0d:f1:b3:13:71:00:a5:be:f2:6d:b9:
                    10:bb:a7:cd:91:49:eb:26:62:b0:52:ab:14:bb:c2:
                    35:3a:ce:b8:6a:65:8e:1d:a2:0b:ef:2b:bc:85:c0:
                    f0:7b:4e:ab:b9:d2:4b:a5:df:b9:44:df:54:5d:5e:
                    fb:2a:9a:ad:4b:e0:a5:f0:56:bb:98:35:6f:8f:59:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E7:E9:BE:BA:04:5E:0F:AC:34:6D:B8:51:C0:FA:B7:34:62:3E:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:3a:b3:92:9d:6a:12:8d:d6:09:4d:fa:ad:2e:63:10:42:
         32:2b:be:27:ba:b6:78:de:3e:71:5c:6d:17:53:1e:09:bd:66:
         52:6b:45:80:cb:13:46:b1:22:23:a1:3b:d0:bc:e1:d2:21:04:
         d3:00:d1:b5:dc:37:88:a6:28:f6:44:ae:77:13:5c:00:ef:53:
         f1:2d:1a:d7:f0:4b:cd:dd:52:ac:89:db:ab:1f:45:92:fd:7c:
         ea:ce:f3:85:b3:66:12:2f:0d:87:e3:4d:0b:21:36:07:4f:e0:
         0c:84:b6:99:a5:c4:d9:44:3a:77:61:74:53:3a:4d:dc:2b:71:
         be:ea:e1:8d:90:07:3d:58:5d:3e:20:8e:9c:8c:85:b4:d6:63:
         d6:4a:99:44:9d:30:81:fa:3b:f8:bc:95:92:4d:7c:7c:c0:f4:
         e5:57:1b:aa:65:64:d5:ec:c3:b4:16:9e:38:0b:33:21:aa:d8:
         42:e4:45:a1:48:79:2f:a2:88:49:7b:69:33:7e:33:af:6e:ad:
         f7:08:12:e5:9b:06:e8:b0:34:e0:de:cc:40:26:35:97:ba:cf:
         d4:c3:0a:0a:b6:9d:0e:e9:a2:00:b3:14:b6:77:c6:a7:20:01:
         62:43:8a:51:8b:6d:c3:3a:b3:f6:ec:c0:39:94:d5:23:29:a4:
         e7:e6:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----