Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e3235312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          g90m17v69Dm7yjl0rpmgJv3+XC0TOU1CEKzVhFFpsPU=
Subject key identifier:   84:75:88:D8:84:EE:6C:81:95:7F:77:D3:C5:3A:8B:70:B9:DB:D4:79
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5510E806DAEB261C31FA322EE0DBE3661DC65980
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:00 +0000
ROA not before:           Sat 12 Feb 2022 00:55:00 +0000
ROA not after:            Sun 12 Feb 2023 01:00:00 +0000
asID:                     131111
IP address blocks:        103.123.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:e8:06:da:eb:26:1c:31:fa:32:2e:e0:db:e3:66:1d:c6:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:00 2022 GMT
            Not After : Feb 12 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:46:91:40:89:9c:84:5e:f0:e2:e5:a5:d0:
                    ba:63:5c:b9:20:ee:35:6c:ca:b3:de:9e:99:0f:2a:
                    80:ef:d8:2b:84:83:39:4a:9e:7e:3d:5f:84:86:1f:
                    eb:81:df:71:91:fc:fd:a4:16:f4:9e:4d:7a:ee:9b:
                    62:c4:f1:09:81:76:61:a9:ee:19:fb:77:28:6c:31:
                    40:21:b8:de:90:7e:1e:97:01:a4:58:a6:50:15:33:
                    b5:45:97:49:0a:39:27:a0:da:c0:d5:40:c7:f9:ae:
                    5d:91:7d:6a:dd:cb:63:a5:49:0d:c1:7d:5f:ec:1c:
                    24:7a:b3:1e:24:7b:e1:c8:93:96:d0:00:99:8c:42:
                    f4:97:cb:56:a5:ec:78:a3:74:46:13:16:31:ab:4b:
                    4c:9e:9d:a5:8c:eb:0a:ac:0a:98:c1:f4:50:b3:06:
                    70:3e:0f:83:b7:c9:d9:05:c4:e5:68:cf:ca:ff:28:
                    3c:14:38:34:dc:4c:fd:61:6f:61:5d:9b:e5:31:72:
                    98:29:e5:32:bb:0f:28:ed:9c:f9:1a:c3:0a:78:87:
                    92:bd:df:29:26:8b:50:b3:8f:54:9d:4f:7b:6a:ae:
                    de:7e:ee:b5:5b:9f:e1:81:df:15:7b:c0:40:d8:96:
                    71:2a:0f:41:18:6d:f1:18:9e:3a:b9:a0:2d:ca:c0:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:88:D8:84:EE:6C:81:95:7F:77:D3:C5:3A:8B:70:B9:DB:D4:79
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:32:6f:c6:dc:70:f0:10:94:a2:0a:0c:c8:8e:62:78:fc:84:
         4f:a5:6f:b6:aa:c2:2b:0f:60:04:88:af:c9:5a:ef:71:73:fb:
         ea:a7:19:a1:61:e6:79:21:24:ea:9c:ca:aa:20:7c:52:53:82:
         bc:79:c4:ea:d6:5f:d1:00:c5:71:3f:55:50:d8:40:f3:10:f0:
         08:42:a7:32:94:94:eb:84:34:61:a1:f5:fc:c2:9f:82:a4:73:
         23:64:40:71:9c:ea:d9:0f:1f:ec:24:9e:1b:64:f0:64:c0:55:
         94:b0:88:66:26:77:c4:ef:6c:8f:9b:7e:65:a0:43:23:f5:9c:
         b5:99:f1:3e:20:78:76:3b:8f:40:11:cb:b3:5d:53:78:c7:91:
         58:0c:0f:45:51:ce:1d:fe:20:aa:fe:f9:4b:db:6f:f3:e7:58:
         73:db:99:69:9b:b9:1f:1c:11:67:21:7c:2c:64:b0:10:73:06:
         9a:69:96:15:ca:26:82:03:6c:48:67:52:45:77:41:2f:21:d3:
         ea:44:71:ef:db:d0:55:cb:96:ca:7d:ed:b2:c7:d1:10:33:4b:
         46:25:e4:3e:64:64:89:48:ab:fe:1d:10:26:db:2a:48:86:a7:
         7f:6f:59:49:ce:cd:4b:2b:41:29:fc:b5:11:e0:3b:4f:f0:e3:
         8f:50:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----