Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e36382e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          4vxobYGm3+izFJiLo4R05GCTQE7e77BK0pJEwBE7LoM=
Subject key identifier:   40:C4:7C:79:63:BD:62:DE:59:1D:66:91:BB:62:0C:A7:15:62:30:A5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E9FF8300496B88E0A655765993980B0D1C7B2DA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.123.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9f:f8:30:04:96:b8:8e:0a:65:57:65:99:39:80:b0:d1:c7:b2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:a4:8a:4f:9a:a3:29:37:c4:03:33:4a:c5:
                    2b:28:1c:88:34:b0:ca:e2:7b:c3:5f:06:d4:18:ef:
                    18:ba:41:9f:59:29:14:e1:74:64:43:80:d1:59:8d:
                    fc:f0:e3:b5:b5:5f:e5:a4:36:73:8f:91:ac:e5:3b:
                    6e:a7:48:7b:e6:b8:af:77:4a:e2:30:a3:09:ad:8a:
                    c3:8b:b1:c1:c2:d0:1e:a3:92:c6:c4:fe:81:84:5b:
                    89:7c:45:43:9d:64:8c:0e:51:59:8a:17:f1:cd:f2:
                    d6:6c:08:21:0d:3d:13:25:a5:70:c0:7a:09:e4:d6:
                    61:ca:9a:32:06:89:b7:bb:df:57:61:fc:0d:54:7c:
                    f3:c5:a4:30:bc:a1:3f:be:e0:f3:54:d2:4d:85:87:
                    e8:77:c8:43:76:ea:fb:03:a3:10:ab:ec:60:fe:a9:
                    ed:88:1c:27:34:72:4f:a8:b0:ad:20:15:95:1a:b7:
                    b7:5a:47:bb:8c:51:6c:35:0e:a5:f0:eb:e3:0c:41:
                    1e:34:59:8b:41:e2:0f:95:13:ec:b1:56:db:48:7b:
                    41:d8:b0:49:af:65:09:07:36:2c:30:82:80:98:56:
                    8c:0a:e9:f7:4f:43:cf:4c:ad:e1:9f:c8:cb:19:7f:
                    be:4d:b6:ef:e1:2d:84:a2:73:9a:2b:d4:46:63:e2:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:7C:79:63:BD:62:DE:59:1D:66:91:BB:62:0C:A7:15:62:30:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36382e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:19:60:82:6b:78:9d:23:4d:3e:69:42:52:75:0c:6b:0c:
         db:e1:9a:b9:96:64:19:ea:90:42:d8:12:b2:70:43:5e:27:38:
         6b:c4:2d:f9:62:f6:a1:ef:1b:b9:4f:a3:2c:54:44:99:3c:b0:
         12:b2:ea:7f:c4:50:32:b8:c5:a8:e9:0d:7f:64:23:ab:21:c0:
         cc:2d:eb:ac:43:27:45:ee:c4:f9:2a:f6:ea:da:8a:96:04:89:
         1e:5d:3b:4a:58:d5:f7:3a:a0:b0:bd:a9:61:cb:e2:87:d7:14:
         42:4f:17:1d:41:70:dd:b9:a9:db:80:00:39:11:84:07:6d:06:
         d0:06:7b:5e:fb:61:89:e8:79:cd:04:6c:a4:0f:bb:09:9a:92:
         c5:d0:ba:b4:94:be:53:02:8c:9d:ed:0f:2e:d5:29:13:12:9e:
         97:9e:cf:26:b9:d1:da:02:99:6a:1d:07:27:82:31:dd:ba:f3:
         06:bc:f7:8b:f6:eb:41:6e:f6:3d:4c:f5:12:10:17:f2:e3:ea:
         98:b4:6f:1a:b6:80:3a:32:c2:7f:8f:4e:0c:06:9d:4c:56:51:
         fc:43:30:06:6b:17:2c:de:0a:00:24:67:6f:a6:96:35:5b:a7:
         65:6e:98:6a:2d:14:0f:e8:ed:d2:d3:21:f5:b1:4e:1d:67:5f:
         5e:52:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----