Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e3235302e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          T08f6g4hZb+5KyKsknrk+XRAGehvIkIklFDXTYW79ww=
Subject key identifier:   36:0F:21:DF:B3:8D:C3:51:71:75:F6:14:47:C8:73:1C:D8:58:95:EA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       17FBBC6EA61F8FB0A9DE30D5360628A841BF5C25
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.123.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fb:bc:6e:a6:1f:8f:b0:a9:de:30:d5:36:06:28:a8:41:bf:5c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject: CN=3082010A0282010100EED9B349368579D1777212E279F5EF9298D9316C3A8CADBCDB8B29E5B44E134FBEABC3911F69D7017998A03631972FCA8B3160910D68A0EE124DA191EDCED64C70DCD57121A0543A3F31E525DE9939A07752F9984CE4739A1A5D688B38CC1F0FD7DD487C1B07B1CEEBFC2D621C79C66C28296077CF66C1E59985047381880226BC76431CC2F9FC1A75F69E34836118E83917223B70E2C0EB91BF57E89B52C1B3EBB88458529B3027CF514CDF1CCD0E44FB1D91044E8598401241E05F5B21A817DBB64D159631CCE7EA50AC740B124F5291EEF25A18E93D3170C22325B2D5E4B80BFA3205F6F859BEBE5E6B1C6865FB57AC6CFEA7B49A51A28F3C49F3D7B767170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d9:b3:49:36:85:79:d1:77:72:12:e2:79:f5:
                    ef:92:98:d9:31:6c:3a:8c:ad:bc:db:8b:29:e5:b4:
                    4e:13:4f:be:ab:c3:91:1f:69:d7:01:79:98:a0:36:
                    31:97:2f:ca:8b:31:60:91:0d:68:a0:ee:12:4d:a1:
                    91:ed:ce:d6:4c:70:dc:d5:71:21:a0:54:3a:3f:31:
                    e5:25:de:99:39:a0:77:52:f9:98:4c:e4:73:9a:1a:
                    5d:68:8b:38:cc:1f:0f:d7:dd:48:7c:1b:07:b1:ce:
                    eb:fc:2d:62:1c:79:c6:6c:28:29:60:77:cf:66:c1:
                    e5:99:85:04:73:81:88:02:26:bc:76:43:1c:c2:f9:
                    fc:1a:75:f6:9e:34:83:61:18:e8:39:17:22:3b:70:
                    e2:c0:eb:91:bf:57:e8:9b:52:c1:b3:eb:b8:84:58:
                    52:9b:30:27:cf:51:4c:df:1c:cd:0e:44:fb:1d:91:
                    04:4e:85:98:40:12:41:e0:5f:5b:21:a8:17:db:b6:
                    4d:15:96:31:cc:e7:ea:50:ac:74:0b:12:4f:52:91:
                    ee:f2:5a:18:e9:3d:31:70:c2:23:25:b2:d5:e4:b8:
                    0b:fa:32:05:f6:f8:59:be:be:5e:6b:1c:68:65:fb:
                    57:ac:6c:fe:a7:b4:9a:51:a2:8f:3c:49:f3:d7:b7:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:21:DF:B3:8D:C3:51:71:75:F6:14:47:C8:73:1C:D8:58:95:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235302e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4f:6c:4f:de:55:e3:2e:96:c0:6f:13:87:60:a9:f1:71:a4:
         16:50:a3:36:bf:91:f2:50:6e:e8:8f:ae:ff:14:c1:40:e2:51:
         85:57:1f:bc:d4:36:c3:a2:9f:03:b0:2a:1c:b5:ed:cb:7a:04:
         8d:71:e2:84:cc:05:42:1a:32:8b:1e:4f:a3:6c:7d:56:f8:6e:
         45:6e:9a:e0:4a:03:13:48:56:09:6e:51:ec:46:bd:53:80:a7:
         bf:a2:68:18:46:51:cc:2f:52:d0:47:bc:10:d1:3d:25:96:03:
         7c:9d:a1:71:33:16:5b:68:b9:d8:cb:8a:42:39:d7:d6:a0:08:
         c5:f1:e8:02:d1:00:1a:da:20:73:5f:af:e4:44:4d:39:20:cb:
         5a:c4:11:84:e3:a0:9a:9a:36:e1:71:0b:c2:15:49:63:33:ca:
         f8:d5:9e:5b:ef:e3:61:ea:b0:7a:20:81:84:77:06:f3:7b:41:
         4a:ee:2e:ad:d7:44:55:ea:6f:8f:41:92:b3:33:4f:41:ad:d6:
         b8:56:91:34:88:58:ea:20:55:2c:2e:27:27:c4:14:1b:a7:d9:
         59:59:8a:f8:ab:b9:72:43:ae:6b:26:7a:1f:11:ce:e7:0a:6f:
         3e:ee:c8:09:a0:e3:54:4b:f4:7b:81:52:19:0e:e2:31:53:e4:
         7f:35:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----