Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e36342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Qc711h6PBynjVdpedMkludHnx1A3wiOmSjg7lF/TySs=
Subject key identifier:   64:C3:1A:07:10:01:47:A5:F1:62:0A:9E:BF:E4:B0:FE:AA:58:D7:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       71360FD43ADC688E02247D8702AC878DB6D6E361
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.123.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:0f:d4:3a:dc:68:8e:02:24:7d:87:02:ac:87:8d:b6:d6:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:94:00:bd:b8:49:89:f2:1e:49:2b:33:f8:
                    12:53:b8:48:c2:84:28:4f:9d:39:79:71:39:bc:a5:
                    df:a1:b6:43:e0:28:28:74:be:80:aa:8a:40:f3:3e:
                    e6:36:4c:6b:51:7b:62:4f:71:fb:73:e3:7c:aa:30:
                    bb:73:bf:0e:16:e0:a8:76:a4:dc:f7:dd:51:50:74:
                    19:9a:bd:13:e5:7d:04:a6:45:e7:9a:4d:42:ed:0a:
                    17:35:0e:18:3c:d4:f2:56:4e:d1:50:2a:eb:d6:56:
                    88:99:de:52:84:f1:f3:c0:bd:bd:38:4b:07:59:1c:
                    ab:4a:c9:2f:3a:a8:1a:d5:85:28:0f:23:eb:71:f9:
                    09:af:f6:27:46:c0:97:15:06:03:fd:00:dc:2b:3c:
                    a7:50:5c:1c:10:12:7a:de:ae:3a:5d:c2:13:c2:33:
                    da:9e:50:51:28:b9:15:d1:fd:15:8a:62:b7:46:d4:
                    54:0a:d0:02:f7:a0:95:9c:be:0f:ba:24:d4:c9:7b:
                    1d:94:c2:5f:a1:93:05:fe:96:92:66:d2:41:95:67:
                    0b:11:70:4a:c9:dc:4f:89:c9:c7:ee:86:66:08:99:
                    62:a5:c9:64:f2:f1:9a:97:02:da:7d:1d:5b:7a:89:
                    0f:8a:d5:9f:9a:7a:bc:b0:91:d3:a5:5d:ed:05:fe:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:1A:07:10:01:47:A5:F1:62:0A:9E:BF:E4:B0:FE:AA:58:D7:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36342e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:9a:9c:dd:ff:3a:15:4c:14:6a:b4:45:62:5d:47:7b:eb:
         73:78:bc:e4:97:7e:2a:6a:f6:53:41:ff:64:c9:f2:36:2c:94:
         99:26:7f:88:f4:2a:c4:b5:0b:7d:e4:f7:7e:02:a6:43:7a:f6:
         e2:de:0d:e6:fd:42:64:ea:68:61:82:02:e8:e1:f1:96:57:10:
         ad:40:c0:df:db:c1:4c:83:c3:ba:17:35:15:0f:a9:2a:5a:23:
         ac:61:88:64:6d:7f:ac:27:d5:ae:78:be:94:44:11:43:51:14:
         ec:c3:a5:47:a1:ac:47:cb:dd:a8:dc:b9:e1:98:d0:0f:f6:cf:
         da:a1:94:8f:0e:9b:12:c7:11:4e:7f:1e:9f:b6:24:e4:43:8f:
         b6:23:fc:42:f6:d7:03:25:cc:a7:00:e4:d2:97:e1:54:ae:dc:
         18:68:67:d9:5e:60:27:b5:0c:94:2a:79:0b:b9:09:b3:a4:4a:
         14:aa:72:de:31:af:dd:f3:15:ba:3a:e2:b0:5f:02:35:ec:e1:
         6a:f7:84:9d:65:db:20:b8:14:5b:80:ad:de:c2:92:14:da:1f:
         7c:b0:1f:c1:6e:66:02:79:09:96:43:17:0a:c9:65:7c:dd:2f:
         6c:00:13:3e:0a:96:e5:ed:d3:36:77:e2:c0:13:4c:a8:e4:12:
         39:40:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----