Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e3235312e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          zvId6VynB3T2/59HTHOkU8NM61RODKv7jweVHDccFLo=
Subject key identifier:   1E:29:B5:01:7C:88:79:A6:2A:8A:F8:89:D3:12:C4:7C:72:D1:07:DF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       69D25623B3D5012C2C5ED14D6FA0EFBA45BF6BD7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.123.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d2:56:23:b3:d5:01:2c:2c:5e:d1:4d:6f:a0:ef:ba:45:bf:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:df:a4:f5:21:eb:a1:16:59:17:d9:88:b5:
                    a6:d5:6e:7a:d2:5c:01:cf:27:ae:56:cb:4f:a9:24:
                    67:29:11:25:ae:15:39:f1:17:5a:1d:05:c9:21:94:
                    36:0c:11:af:49:35:8d:52:e3:8b:44:50:15:9c:08:
                    9e:e0:de:90:d4:d2:3a:f6:2e:6e:74:cb:1b:c1:d8:
                    a6:ce:5c:8c:4f:43:82:aa:eb:60:e5:61:65:c9:7b:
                    d1:cb:3a:fb:e3:50:10:0a:de:54:9a:88:02:6c:cd:
                    50:ed:95:44:5a:2c:94:6e:d4:7c:d4:c9:e9:31:d7:
                    25:3b:58:38:af:38:7c:c8:48:17:29:8e:17:66:e2:
                    f5:93:da:4a:d7:97:3c:5f:0b:3c:b4:97:4d:0f:57:
                    c1:5a:e3:90:2a:5c:0c:8c:86:37:f4:d1:2e:96:c4:
                    5d:05:30:d2:5d:65:8e:5d:62:6e:1b:b6:e5:7b:b5:
                    67:3d:d3:48:ac:59:b8:c8:f1:be:31:c9:3e:3b:8d:
                    10:4d:42:0f:17:4e:ca:44:3e:6b:6e:4b:2d:f9:da:
                    5e:38:73:8c:0a:2e:e0:0e:a8:a7:06:a8:7c:0e:e8:
                    c9:f1:70:77:ac:39:4e:a1:f7:1e:b3:7f:f1:e8:ed:
                    f4:61:fa:e5:36:1a:6b:43:c6:6c:47:ca:4d:0f:7c:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:29:B5:01:7C:88:79:A6:2A:8A:F8:89:D3:12:C4:7C:72:D1:07:DF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3235312e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:3e:29:32:47:a2:69:57:46:76:7c:da:9b:e6:d1:8b:a2:
         4b:a3:0f:6e:1b:da:2b:e5:e0:df:f4:d1:7a:84:f3:78:c3:17:
         4f:98:cc:b0:1e:2b:05:4b:74:7f:16:09:54:ea:c7:95:93:b6:
         ae:9a:38:cb:33:b1:85:23:a2:79:aa:04:ef:78:0a:20:f8:bd:
         d4:d5:d3:39:ef:84:32:6a:eb:96:9b:79:d1:3f:38:33:cc:08:
         19:73:e8:81:9d:3b:c2:72:c2:25:46:d5:df:7b:74:1c:d0:30:
         41:1f:f2:4b:bb:70:64:ed:64:32:6f:0e:a6:fe:70:3f:fb:eb:
         96:54:f5:f5:49:a0:46:d6:ca:38:2c:13:cd:05:de:f0:a0:ed:
         0b:a7:c4:74:79:d0:f3:f5:b1:46:0f:92:03:4b:00:f2:66:04:
         98:90:bf:99:32:77:81:0e:a5:17:3d:0b:3e:ea:be:85:b5:5b:
         fb:06:47:27:87:9f:57:52:e1:aa:66:d0:f6:2a:1a:c5:3e:d6:
         40:b3:75:76:f5:dc:45:28:c7:b9:5f:a4:28:47:70:f4:b6:50:
         83:7c:97:0f:fa:0c:f1:4e:3e:fa:1c:92:ef:66:e1:a1:69:9b:
         df:65:2b:63:5b:9e:47:72:82:d9:9e:ae:ed:6d:75:a6:a3:06:
         e2:1f:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----