Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e36372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Q1Wq07gxgjbfdEuZ5f26daDtmZd80IrFBA/d8jN9e4o=
Subject key identifier:   E0:11:68:04:AE:F3:6D:B0:62:BB:F6:65:0E:50:15:25:E8:8A:E3:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C8CAE3DD923B9CD72A983E25602B0BEA52BD0EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:01 +0000
ROA not before:           Sat 12 Feb 2022 00:55:01 +0000
ROA not after:            Sun 12 Feb 2023 01:00:01 +0000
asID:                     131111
IP address blocks:        103.123.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8c:ae:3d:d9:23:b9:cd:72:a9:83:e2:56:02:b0:be:a5:2b:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:01 2022 GMT
            Not After : Feb 12 01:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:e0:da:c6:d6:08:56:1f:57:81:0f:50:75:
                    61:57:3d:e6:eb:55:f9:b4:cc:fa:49:31:e0:f2:f9:
                    8f:dc:ab:cf:c9:e5:a4:87:58:d5:53:9a:82:99:10:
                    e1:cd:a0:e1:96:fc:d9:e1:8c:79:53:93:bf:03:9f:
                    33:2c:5d:39:e7:3a:f3:f7:cd:e0:ad:31:e6:0a:ce:
                    01:01:7e:8e:56:cb:07:6b:87:3a:52:b9:77:d1:4e:
                    f2:3e:62:02:b4:5b:4c:41:85:0a:de:04:32:81:26:
                    b2:71:a1:d8:f4:23:09:0d:e9:7f:ec:d7:e1:d4:73:
                    5f:c7:ff:87:a5:6e:e7:14:b1:08:84:78:ba:49:39:
                    c6:ca:5f:42:1e:d3:2f:03:85:5a:31:9b:17:da:88:
                    e7:8f:e4:7c:aa:f7:6a:97:83:39:71:6f:27:80:1b:
                    a3:bd:9e:50:44:91:63:1d:93:fa:96:ff:61:d3:9b:
                    a9:49:54:81:08:4f:9a:18:88:d2:4e:75:bc:c5:d1:
                    7b:cc:7a:9d:7b:8c:e9:d4:04:c8:8f:3f:f0:09:8c:
                    a5:8b:bb:bc:9c:b4:3d:f5:70:02:e0:2e:bd:28:f1:
                    84:a3:6d:4e:3c:4b:da:d6:dc:43:7e:a6:05:6f:aa:
                    25:c7:5a:4d:77:d4:1d:c4:8e:81:f2:e0:f5:1b:3f:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:68:04:AE:F3:6D:B0:62:BB:F6:65:0E:50:15:25:E8:8A:E3:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:4a:d2:a1:42:b3:a6:6d:3a:a9:b2:75:71:16:2d:01:f2:
         da:09:4e:8c:85:57:e7:fa:31:70:1d:d8:d9:69:5f:4e:60:12:
         c0:70:7a:51:3e:81:f3:dd:9c:bf:46:7b:89:3b:c8:b5:c8:0d:
         85:4f:b7:1f:9c:fa:72:51:b5:af:9a:e0:8a:8d:bc:39:8f:55:
         d7:76:c2:49:62:11:9c:cd:fe:cf:97:0f:ee:f9:b8:86:e4:7a:
         2f:cd:76:de:e7:73:c2:6c:cd:9e:d1:b7:8c:7a:f2:82:0a:6e:
         8f:97:c0:39:f2:01:16:dd:6b:39:d7:df:cf:e7:89:b6:0b:70:
         4c:5a:68:7e:d0:cd:03:d0:68:a0:bf:df:4d:68:81:55:2e:4c:
         6c:75:58:30:0e:71:fa:be:df:05:f6:fa:a2:1f:33:fd:4f:2f:
         e7:8a:ef:8b:ba:f9:06:56:2c:58:bc:83:8b:4d:21:dd:63:01:
         2d:bb:f1:15:24:4c:a9:40:5c:f0:c5:70:2f:95:36:17:98:3f:
         7a:22:20:bb:4e:b7:4e:b9:a4:cf:8e:3c:84:34:fa:f5:d3:fe:
         15:b9:f6:ce:89:5d:5a:fe:ab:f0:90:40:45:6e:87:21:fc:7f:
         2d:24:d0:f4:f6:4b:e9:86:2d:31:d6:0c:79:62:6e:b1:e3:90:
         ac:bc:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----