Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f3234203d3e20313331313131.roa
File:                     3130332e3132342e3131322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          v5ll6WWZMv2iJHmznNw50UQudPIaQRR4LudKKAJkpfc=
Subject key identifier:   CE:28:58:3C:F1:88:2B:7A:51:B4:3E:60:82:33:E4:FB:F6:D1:D6:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3E894978FCFB252F3756C61FD47EBC1AC9D4E941
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:01 +0000
ROA not before:           Sat 12 Feb 2022 00:55:01 +0000
ROA not after:            Sun 12 Feb 2023 01:00:01 +0000
asID:                     131111
IP address blocks:        103.124.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:49:78:fc:fb:25:2f:37:56:c6:1f:d4:7e:bc:1a:c9:d4:e9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:01 2022 GMT
            Not After : Feb 12 01:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:0c:a1:18:8d:b3:49:07:38:9f:fc:a4:45:
                    10:4e:f6:1c:42:fb:ad:28:ac:7d:78:9e:64:6e:ee:
                    5f:7a:ea:61:e7:27:cd:36:93:59:8d:c2:c2:f3:51:
                    0f:b9:3d:61:a7:64:88:62:54:b3:d7:36:1e:56:1c:
                    a2:fa:49:ed:83:93:57:04:98:32:84:c8:65:d9:68:
                    1e:15:b7:76:19:2b:20:b2:39:f1:51:2f:ee:ab:78:
                    4c:09:9a:e3:eb:ce:4c:1a:3e:4e:85:5c:52:e3:f0:
                    d0:03:70:4a:2d:19:27:53:89:3b:eb:99:c6:57:15:
                    0e:c2:e1:a7:2d:bc:32:79:c4:90:f8:b1:ae:b0:e1:
                    4a:30:9c:81:81:8c:63:80:c3:7e:10:84:3e:d0:70:
                    d1:ce:18:64:f7:25:d2:70:ac:45:21:83:13:a3:00:
                    cc:9a:da:25:17:89:ef:4f:9b:ca:d9:c9:8b:f8:4f:
                    72:a1:45:8d:96:99:12:46:4e:28:3b:07:53:bd:10:
                    32:bc:24:bb:d6:d0:52:71:3c:b7:34:3a:ba:19:3d:
                    78:15:fe:68:33:19:ec:ce:34:7f:3d:27:47:40:85:
                    61:eb:3e:63:a3:2b:a3:a6:67:b6:02:11:12:82:87:
                    3b:ce:f5:91:1c:b3:58:a6:63:23:de:74:a2:8e:ef:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:28:58:3C:F1:88:2B:7A:51:B4:3E:60:82:33:E4:FB:F6:D1:D6:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:63:c8:38:ad:04:e7:67:7d:4c:81:65:3e:e6:fb:47:d2:
         17:7d:cd:d6:34:e6:4b:88:2c:f8:b7:e5:25:66:bf:87:0d:cc:
         2a:b2:8f:36:8f:9e:23:a7:eb:f3:45:bd:e3:cd:50:4b:e7:1d:
         f3:2d:7a:88:21:13:5d:6d:03:83:d3:83:03:3f:5b:84:1c:58:
         9e:6e:0b:a7:a6:6f:a3:8d:bb:7f:3a:fa:2d:38:a8:dc:04:41:
         99:4f:c1:ac:4a:b4:e0:34:47:4f:ff:66:25:6a:be:35:ab:72:
         ac:54:ac:0e:98:1c:13:63:76:1c:5e:4b:e4:9c:41:de:2a:52:
         f0:d0:c8:8f:88:8c:2b:0d:57:b9:c4:e8:aa:a5:2b:70:13:96:
         8a:50:20:6d:29:a2:c8:bd:f6:7e:c3:e7:7e:32:be:67:d0:c9:
         1d:98:5e:e4:55:f7:74:38:42:97:04:47:18:6e:13:6f:a9:a5:
         35:78:39:9c:67:5d:8a:25:c9:de:5e:88:62:1e:61:e5:53:16:
         15:49:a9:19:40:d7:ad:99:54:c6:e4:24:6b:93:41:d9:c0:10:
         3b:1b:27:4b:82:27:85:36:e7:e9:7a:06:b5:b2:fd:93:b7:2a:
         32:4a:e4:ae:cf:25:bb:62:19:e4:b1:32:01:b1:96:63:77:31:
         6e:97:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----