Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e36372e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          F0v/neunhgCRvJlKdXWs0cg758vezVZ+XxzUeKc9C3k=
Subject key identifier:   75:7E:2D:7E:93:A1:B4:A4:2E:A6:FB:C9:85:CA:74:A7:25:60:75:B9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3FEBA1D965467145399CFC2F615B53E3DECB69C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.123.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:a1:d9:65:46:71:45:39:9c:fc:2f:61:5b:53:e3:de:cb:69:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:55:fe:32:18:06:28:77:96:d6:60:c4:82:a1:
                    35:33:77:2c:b9:d6:a0:73:1d:fa:a3:98:7d:b5:01:
                    bc:76:28:f1:bf:70:7f:03:d8:33:89:29:4c:93:d9:
                    57:84:77:25:1b:0a:ee:a5:3e:2f:83:55:0f:6d:e4:
                    0f:b1:3e:b6:a2:99:0b:ed:a8:27:c9:ed:5a:40:fc:
                    36:f5:a6:81:be:a5:8e:8f:61:f0:27:13:a7:3a:de:
                    a2:9b:31:77:d4:a4:06:4d:a9:58:06:73:f2:7e:49:
                    90:65:d5:20:b0:72:19:99:35:e8:ce:96:07:36:63:
                    5c:ed:92:61:12:6a:b2:ad:4e:a0:2a:cd:b7:7d:63:
                    6f:86:01:98:f2:e7:56:e3:2b:7f:f0:7e:ee:cb:68:
                    3b:72:d3:19:9e:7b:06:1d:72:5b:02:d0:53:f5:69:
                    51:14:a9:c6:a5:3d:ed:38:5e:cd:69:0b:b4:70:48:
                    6a:bf:e3:75:38:68:11:b5:dc:35:d8:41:d7:cd:38:
                    49:e9:46:be:e0:86:fa:f0:4a:c9:7f:0d:6e:dc:f8:
                    b5:3e:d2:79:f5:53:8a:83:8a:8c:6a:6f:08:9b:29:
                    4a:d7:4f:8b:76:94:fd:4b:e8:93:99:55:99:f9:d6:
                    a8:81:d6:a3:41:92:8c:7a:80:a8:39:bc:1f:28:51:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:2D:7E:93:A1:B4:A4:2E:A6:FB:C9:85:CA:74:A7:25:60:75:B9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36372e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:21:14:82:2c:f8:45:4a:32:8d:d9:de:3d:46:cb:db:69:
         5a:0e:79:00:b7:fe:e2:4f:68:02:3d:8f:75:16:36:60:1d:5b:
         c4:85:71:0a:b6:24:ed:84:9e:01:83:38:65:16:2b:6a:82:39:
         94:aa:e6:43:b1:55:c1:0e:7b:c8:23:52:03:c5:2a:c9:a6:ea:
         32:f5:90:10:78:80:86:96:cc:41:1b:4f:36:33:59:5b:eb:58:
         91:a8:74:70:c9:10:dc:cf:46:3c:8c:b8:27:a9:15:4e:31:1e:
         16:94:69:6c:4d:32:95:08:43:62:25:95:a4:94:99:d9:9c:67:
         38:12:16:d1:9d:bc:e7:cb:d6:6d:b9:d1:c9:fc:12:79:d8:b5:
         c8:2c:01:22:01:68:a2:45:7d:c9:45:df:92:5f:45:76:a8:cf:
         7e:fd:c4:ea:b2:f3:d5:ae:d4:cb:64:01:67:3d:88:09:36:cc:
         d5:b5:d4:60:15:45:80:bc:5c:3d:66:01:8e:1e:92:20:5c:3c:
         0e:5d:3f:7c:e1:15:91:18:79:35:d1:89:dc:3c:9e:f8:15:10:
         d9:e8:db:89:5d:4d:62:f6:31:da:b7:d6:cb:da:71:c5:8b:c5:
         cf:da:44:ae:a6:c5:26:0e:21:39:d9:e8:75:d3:54:c7:a2:1c:
         47:bc:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----