Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e36392e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          PbhUTCeVGFKUGDpc5m2X/uvNRZyScTo2bD9MiK+dRf8=
Subject key identifier:   3A:5A:33:BD:5A:EB:08:D3:59:83:3F:31:99:87:1E:28:B3:AE:FE:99
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7E0C29BAEA0D656B56728C98DA770FA44EE2C143
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.123.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:29:ba:ea:0d:65:6b:56:72:8c:98:da:77:0f:a4:4e:e2:c1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:56:a6:fc:d5:b2:70:ea:0d:16:fd:f0:1e:
                    ba:52:6e:33:a5:70:64:13:ca:6d:a7:b1:4f:9f:a1:
                    66:23:56:30:33:d3:3f:6b:bd:46:73:41:91:d0:87:
                    e9:98:39:54:3b:91:fd:89:fb:8a:2e:de:02:3a:3d:
                    01:dc:5e:cc:36:30:c0:b4:0b:4f:d1:cb:dc:5b:3a:
                    0a:28:74:7d:b6:ec:0d:35:73:bd:89:89:d9:43:4f:
                    43:2e:72:5a:ad:4d:fe:56:01:30:16:2e:38:a7:68:
                    97:f9:2d:81:19:99:c1:ba:f8:44:50:62:ee:37:df:
                    b7:3a:31:18:93:02:12:39:fa:dc:39:76:1c:9e:2a:
                    d8:ea:f7:9e:e4:38:fd:9b:14:30:3d:2e:42:6d:0c:
                    3d:3e:30:ca:92:f7:e9:54:0b:0c:3c:33:81:ac:05:
                    2d:68:a0:99:c7:c2:41:f7:96:7b:c4:c6:01:04:50:
                    c4:8e:23:db:af:be:bd:ec:98:6f:f2:41:c8:aa:47:
                    78:da:03:9d:50:5e:29:09:54:41:0c:a8:cb:ab:c8:
                    af:64:2d:ea:e8:dd:38:5e:28:49:92:c6:e1:ca:93:
                    79:8a:3b:55:2f:3c:76:8e:2b:25:83:a3:21:ef:2e:
                    c2:98:40:6e:fb:a3:27:89:88:36:c0:8d:fa:29:93:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:33:BD:5A:EB:08:D3:59:83:3F:31:99:87:1E:28:B3:AE:FE:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36392e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:44:cc:53:d0:43:db:78:cc:7b:d5:6e:94:a9:d3:9e:71:
         51:39:0f:11:29:a5:d4:9d:c9:6f:89:78:1c:59:0b:8f:a2:c4:
         29:a1:62:22:ff:64:5c:b4:b8:da:19:24:39:eb:5e:30:96:ce:
         ec:76:db:ff:4f:fa:a7:ce:33:af:82:12:ef:fd:50:4c:24:ae:
         1c:c7:97:bf:aa:6a:f5:6f:b4:46:88:81:28:f3:b1:79:d1:09:
         5b:11:18:9e:66:28:46:32:2c:e4:3d:ec:ff:02:20:32:c4:3e:
         7e:c3:98:3c:99:c9:03:52:22:62:20:60:02:7b:d8:1d:95:6a:
         7e:c0:00:d7:6f:ec:29:ea:35:2a:08:3d:fb:2c:0c:ad:13:66:
         c6:1e:61:70:ed:5e:97:43:4c:bf:fe:7d:01:fd:c1:f7:80:85:
         01:80:aa:08:a1:3a:83:33:bd:7b:ed:5d:cf:0e:40:1c:dd:ac:
         ba:b5:9a:7a:51:90:85:6b:76:83:77:26:11:2a:40:3d:af:9d:
         28:4e:35:68:4f:f2:2d:70:0e:a6:69:10:e1:8e:c8:79:e7:72:
         c6:0e:fc:3f:5e:cd:47:be:14:b0:0e:ad:1e:99:b2:cc:51:4b:
         cc:03:94:e9:bf:6d:03:cb:df:47:48:3a:28:0e:f3:05:e2:f4:
         00:d0:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----