Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e36382e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          TIwmQbSD8zfk2ZuWtdsXC/pZyqhr5o6FouTvEOEgzCE=
Subject key identifier:   7C:4B:BE:87:CE:C6:AD:9D:A3:1B:94:94:9E:2D:0F:77:BC:21:79:49
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       656C5A906BC276C75CD1B122C8F34DBE25CB5938
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:03 +0000
ROA not before:           Sat 12 Feb 2022 00:55:03 +0000
ROA not after:            Sun 12 Feb 2023 01:00:03 +0000
asID:                     131111
IP address blocks:        103.123.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:5a:90:6b:c2:76:c7:5c:d1:b1:22:c8:f3:4d:be:25:cb:59:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:03 2022 GMT
            Not After : Feb 12 01:00:03 2023 GMT
        Subject: CN=3082010A0282010100BCACBBF433E35E27C01E39F2B58BE8E4FE7E24BC6AC75CE49ED07C0AF4ED09FBEA39619CC1884D22682A5BC25C91CEDFDA2FCADD8E99ED77683E120E9CEF7EEA11E320928DB5A40D288479413828AE48272FB37D1C1F27B40154E16BC404AF944B83715851726226380E57CC183E376642F4D62C4E52BB090023F19B7695CAE54D0014679ABFB1A9924C5679E951B17402489BA2A06D94C3C4EEAD455CA88B1E95AAF8FE789C7834621F4599075B4284977C5A1A08CB542FE7FBF08F46CD858FF24750D0A5391FB26397F04C1A8F6FE8450707C52C98B702A8CC05FF44610E17CDAC70099D4AA670FC103C0DE8FC8D84E868B6FF29B802F38662F224861DE12D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:bb:f4:33:e3:5e:27:c0:1e:39:f2:b5:8b:
                    e8:e4:fe:7e:24:bc:6a:c7:5c:e4:9e:d0:7c:0a:f4:
                    ed:09:fb:ea:39:61:9c:c1:88:4d:22:68:2a:5b:c2:
                    5c:91:ce:df:da:2f:ca:dd:8e:99:ed:77:68:3e:12:
                    0e:9c:ef:7e:ea:11:e3:20:92:8d:b5:a4:0d:28:84:
                    79:41:38:28:ae:48:27:2f:b3:7d:1c:1f:27:b4:01:
                    54:e1:6b:c4:04:af:94:4b:83:71:58:51:72:62:26:
                    38:0e:57:cc:18:3e:37:66:42:f4:d6:2c:4e:52:bb:
                    09:00:23:f1:9b:76:95:ca:e5:4d:00:14:67:9a:bf:
                    b1:a9:92:4c:56:79:e9:51:b1:74:02:48:9b:a2:a0:
                    6d:94:c3:c4:ee:ad:45:5c:a8:8b:1e:95:aa:f8:fe:
                    78:9c:78:34:62:1f:45:99:07:5b:42:84:97:7c:5a:
                    1a:08:cb:54:2f:e7:fb:f0:8f:46:cd:85:8f:f2:47:
                    50:d0:a5:39:1f:b2:63:97:f0:4c:1a:8f:6f:e8:45:
                    07:07:c5:2c:98:b7:02:a8:cc:05:ff:44:61:0e:17:
                    cd:ac:70:09:9d:4a:a6:70:fc:10:3c:0d:e8:fc:8d:
                    84:e8:68:b6:ff:29:b8:02:f3:86:62:f2:24:86:1d:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:BE:87:CE:C6:AD:9D:A3:1B:94:94:9E:2D:0F:77:BC:21:79:49
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:78:36:e9:bc:1a:d2:4f:79:cc:21:16:08:c7:0b:d0:24:8f:
         75:37:96:b7:7d:d6:2a:ff:ff:a3:58:d4:e5:9b:a7:27:2a:a4:
         99:f7:e0:bd:16:b1:3f:05:3b:04:59:c9:cd:76:02:8f:d1:55:
         ae:14:7a:a7:a4:b6:16:ec:6c:af:73:7f:f4:95:69:a1:8a:ef:
         b0:7f:b8:f3:82:08:e6:03:f8:7c:27:12:03:89:2a:bb:9b:14:
         4f:d6:ab:8c:09:58:63:f7:bc:31:5a:c3:d4:ba:35:ca:32:a6:
         02:a2:38:9d:0a:da:41:12:22:32:61:3f:f0:0f:4c:2b:46:5c:
         ad:60:f6:00:1a:e2:85:8b:77:ac:31:30:d0:1d:5f:f3:d8:86:
         40:dc:d8:f1:bd:8a:94:9e:48:54:af:7b:5f:17:ba:1d:b6:3c:
         90:b5:46:3a:bb:14:d1:c4:cd:69:25:95:82:99:46:89:30:bd:
         ea:44:34:fc:ab:1c:bf:04:9f:71:f6:40:48:b2:b3:e6:93:e4:
         23:0a:49:38:54:58:9c:48:ac:a8:73:c3:6a:57:56:98:62:7e:
         c1:74:5e:ca:5b:fb:a3:33:40:8f:ac:c0:93:de:2d:b4:5a:1e:
         37:01:5a:da:df:5a:b8:82:ae:19:fd:74:47:ce:b6:1a:6b:bd:
         41:93:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----