Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e36392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          V9lged2QhhvnEuix6KvUl2mQ9utz5qHrLkquiqvm8Kk=
Subject key identifier:   DA:83:0C:9C:FE:40:90:A1:14:42:58:19:CC:DD:33:2F:63:40:AB:84
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1989004BE3CD1DCA0802FAF951201BE15AF84ACA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:03 +0000
ROA not before:           Sat 12 Feb 2022 00:55:03 +0000
ROA not after:            Sun 12 Feb 2023 01:00:03 +0000
asID:                     131111
IP address blocks:        103.123.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:00:4b:e3:cd:1d:ca:08:02:fa:f9:51:20:1b:e1:5a:f8:4a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:03 2022 GMT
            Not After : Feb 12 01:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:f6:a8:a6:53:40:c5:d6:84:b5:f1:49:e9:
                    45:e2:cd:f7:5a:27:55:60:bb:c3:c0:58:50:c2:8a:
                    23:12:c0:71:df:cc:81:ba:c4:58:2e:97:5b:d2:0f:
                    64:4d:70:59:ae:ea:98:07:ac:05:08:5d:92:62:fd:
                    62:46:74:b1:68:32:75:84:ab:72:15:cc:27:47:2c:
                    8d:6a:63:4e:c9:cb:2d:a2:d6:10:31:f2:17:88:2f:
                    bf:00:b6:d7:50:4a:c4:6c:4c:83:38:61:6c:c7:8b:
                    5f:92:61:90:95:05:85:e5:37:d1:80:eb:90:59:3a:
                    25:a4:2a:bc:d7:b9:1b:c1:da:53:1c:78:c0:a5:40:
                    11:ac:1e:f6:04:1c:c0:24:80:c2:6c:c0:7e:a4:1d:
                    f7:6e:11:21:c8:bd:72:ff:29:2f:04:6c:3d:e3:9c:
                    bc:ac:2a:18:93:6f:b2:1b:2d:21:88:13:e1:52:45:
                    e1:80:28:78:34:25:a8:79:f4:38:df:db:30:83:e1:
                    04:90:90:46:6d:ec:60:89:fe:b3:7b:0c:25:57:35:
                    21:df:26:90:a8:bf:1b:89:dd:1d:8a:f3:a2:d1:46:
                    9d:56:be:f4:42:37:eb:79:35:7e:35:04:d4:44:7b:
                    d7:10:38:36:9e:7d:d0:b0:5e:77:ef:f5:8a:2a:1c:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:0C:9C:FE:40:90:A1:14:42:58:19:CC:DD:33:2F:63:40:AB:84
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5a:5f:8e:cb:66:ed:98:69:e8:15:4c:c4:9b:cd:0b:e4:ff:
         34:b6:bc:9f:23:92:74:7e:b2:f1:1d:93:0a:76:aa:57:c6:84:
         97:78:ea:f8:3d:5e:80:4a:9c:63:4a:ce:2e:ae:e7:d2:ca:1b:
         e4:a4:5f:2b:48:61:45:d1:79:45:31:18:1c:a0:91:b0:08:45:
         6d:1e:4c:f2:8f:78:be:6d:69:c7:bb:31:fa:3c:d2:e0:9a:07:
         dd:c0:66:65:ae:06:42:3e:03:bd:93:0e:2f:ff:7f:cb:fd:ed:
         c7:af:96:69:70:d3:ed:8c:1c:90:9c:1f:5d:ce:be:4c:0f:dd:
         28:b0:ce:df:8d:21:03:08:da:90:df:6b:2d:4d:a0:11:cf:57:
         a9:ca:3d:ac:80:84:6c:c8:6f:36:7b:4d:a9:09:12:83:01:4f:
         59:29:85:c0:5c:18:82:13:49:ae:78:2c:6c:db:c8:1c:a5:2d:
         b2:fe:c1:cc:c8:2c:81:b0:19:9b:2f:3a:44:b8:4a:fe:ad:52:
         45:5c:6e:fe:3d:6f:8c:ef:56:e0:4e:ac:4c:b7:8d:1e:45:b7:
         20:4a:8e:cc:1f:2c:55:09:e3:db:e8:91:d3:bd:48:3e:11:70:
         25:56:74:f9:5a:82:0e:cc:ec:1b:e3:6a:cf:31:00:01:9b:3c:
         e6:10:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----