Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e37312e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          xy6K88RAGIydJJhPVU3evC6iTF+Fwl00vS8FUUNugRg=
Subject key identifier:   90:96:99:D3:32:A9:E9:22:54:F1:F2:3B:57:37:59:C5:49:79:69:3D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       74C13824B0C8D75D91835D4AF1883CAA3BA472AA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:36 +0000
ROA not before:           Sat 12 Feb 2022 00:17:36 +0000
ROA not after:            Sun 12 Feb 2023 00:22:36 +0000
asID:                     131111
IP address blocks:        103.123.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:38:24:b0:c8:d7:5d:91:83:5d:4a:f1:88:3c:aa:3b:a4:72:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:36 2022 GMT
            Not After : Feb 12 00:22:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:28:c9:0a:20:84:09:23:42:f3:1a:5d:a0:
                    6e:6b:2c:5c:26:96:1c:e7:7a:5e:3c:83:d5:82:58:
                    e9:34:ea:d3:bd:8b:f2:f1:ca:93:8d:e1:c7:5f:f5:
                    55:23:3d:62:98:d8:f6:93:6b:b8:14:99:94:01:b6:
                    60:ad:9a:ad:39:a3:21:62:b3:fd:80:7b:d4:23:2b:
                    a2:0d:09:a5:00:ce:e3:02:fd:fb:49:db:0d:fe:95:
                    8c:25:29:91:ee:c2:0d:a5:a6:b8:90:83:8d:50:a6:
                    72:55:6b:db:ed:ee:ef:81:51:97:33:d0:a2:9d:4c:
                    e4:c3:12:c0:24:f0:ed:d6:2c:5d:9d:89:4e:05:91:
                    60:bc:a5:47:d1:dc:c6:f5:56:0a:59:a6:1b:8a:ab:
                    34:b7:88:b6:7a:21:1f:f5:48:a2:ca:0e:6e:74:4f:
                    76:22:b2:d1:d5:5a:ed:a8:89:c3:85:37:09:01:f1:
                    f4:37:73:e0:a4:14:a8:e7:7b:98:f4:6f:31:94:c0:
                    89:9c:39:cc:ba:7b:2a:57:96:03:69:9b:82:35:5d:
                    13:85:39:7e:80:96:74:f3:31:c4:9d:df:f6:c0:e5:
                    b8:02:92:56:a9:0e:5b:5f:82:00:81:a4:fd:8d:c7:
                    60:70:95:46:43:d6:6c:29:b5:da:8a:bd:99:d9:01:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:99:D3:32:A9:E9:22:54:F1:F2:3B:57:37:59:C5:49:79:69:3D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:01:71:9d:d1:72:a9:eb:6b:9f:16:07:8a:12:f5:a5:a8:
         22:d8:b6:ff:ec:f8:3f:05:f4:2e:eb:0e:41:0c:a1:b1:45:56:
         22:79:76:99:0b:39:a9:dc:ac:3d:c8:29:4e:b3:79:8c:ba:71:
         1b:79:d3:18:e0:71:9e:0c:01:18:84:60:bb:36:c8:0a:e9:7f:
         0a:ef:69:c5:d1:2c:55:8e:e5:59:94:cd:aa:27:6a:ee:0d:5b:
         06:a3:86:f1:67:9c:d1:55:47:41:80:e3:6f:3b:41:aa:08:b0:
         f7:31:70:ba:fe:be:ce:c0:90:eb:af:38:29:0a:3f:39:44:d1:
         82:cf:44:83:bc:8b:ab:d9:9e:63:02:69:fe:dc:a8:89:f5:cd:
         bb:b6:d7:fd:d8:78:5b:f8:75:7c:d0:9d:87:92:86:2c:95:1a:
         20:27:e7:07:11:1c:6d:1c:32:3e:bd:e5:7c:c6:93:49:33:9e:
         5f:27:dd:1a:bd:f8:77:df:cf:40:79:aa:84:16:37:1a:8c:4b:
         0f:8d:ba:91:d6:d9:a2:41:9e:57:69:48:be:46:57:d4:c5:d3:
         b7:21:57:fe:bc:51:2d:b9:78:6e:88:a5:81:41:00:15:3b:57:
         06:4d:c5:a6:3b:c1:a4:91:00:aa:43:51:ac:6d:c7:3b:19:4a:
         01:8c:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----