Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          dKEUmfgtSpsGuAHTMBVp1lLBdXoaCXfUx/EtiIANDPE=
Subject key identifier:   D4:6C:F1:1D:51:4B:9A:81:EB:83:42:71:BB:5B:8D:66:8A:FC:26:A3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2ECCB056FD52E6ED163C82D2AAB928CCB4BB207B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:34 +0000
ROA not before:           Sat 12 Feb 2022 00:17:34 +0000
ROA not after:            Sun 12 Feb 2023 00:22:34 +0000
asID:                     131111
IP address blocks:        103.124.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:b0:56:fd:52:e6:ed:16:3c:82:d2:aa:b9:28:cc:b4:bb:20:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:34 2022 GMT
            Not After : Feb 12 00:22:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:fd:1e:fc:41:b2:a6:cc:a3:df:11:08:9f:
                    07:1f:a8:30:4b:ca:c6:a2:03:17:ef:7e:55:94:f6:
                    ba:69:d5:61:b0:6d:ed:0f:a7:cb:42:38:85:66:55:
                    8d:31:4c:cc:80:35:80:03:ee:47:90:0e:4f:10:e0:
                    e6:6e:13:4a:42:03:84:5c:4b:28:9d:bc:12:d8:97:
                    74:59:cd:f2:a1:e0:0f:a1:57:a7:5f:5d:87:ac:ca:
                    2c:fe:18:02:1e:ef:da:76:67:28:be:ab:31:4f:b7:
                    fe:db:1a:51:af:8a:9e:98:7d:b2:28:0c:7b:4e:3e:
                    ee:25:08:52:2d:6f:34:7c:7d:2d:0f:fc:67:a6:3d:
                    3c:c6:d2:7b:54:16:db:1a:14:da:2e:4f:bf:02:33:
                    ed:c7:45:3a:28:26:e3:46:da:a2:48:60:59:9c:7c:
                    af:cd:ae:99:dc:dd:96:ae:d4:e2:6b:d0:25:f6:42:
                    2a:16:28:e1:78:89:32:ab:df:9b:33:5b:58:c8:72:
                    a0:39:ef:e6:f3:4c:5b:45:16:f4:ed:fb:7e:91:20:
                    f8:6a:38:4f:de:ea:06:98:4a:df:90:b1:78:b9:07:
                    a2:67:5e:c2:53:b3:ee:51:b9:c8:27:74:a5:da:fc:
                    c8:a1:32:63:05:a2:2d:6c:05:97:cd:c0:f1:1f:a0:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6C:F1:1D:51:4B:9A:81:EB:83:42:71:BB:5B:8D:66:8A:FC:26:A3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:dd:86:5a:7a:4c:87:d3:e0:26:18:4f:32:9d:8b:5c:58:
         e5:8f:b8:b6:68:05:0e:65:ee:68:56:66:47:7e:34:73:46:38:
         8f:3c:b1:a7:97:f2:a1:77:24:97:9a:53:6c:5b:74:90:62:2c:
         c0:46:14:4b:b0:51:b3:82:32:b2:ce:83:a3:9e:6c:63:96:3c:
         36:b6:db:63:07:1b:e7:42:4d:15:99:e4:05:c1:21:00:35:e8:
         4f:24:84:4a:34:07:f7:f4:57:b6:a8:ab:0d:39:d9:02:bf:70:
         4e:ca:38:65:a7:89:38:22:da:4d:c0:e5:13:3f:db:d0:3d:e7:
         4f:a6:36:95:d7:90:d4:e9:66:be:e7:a0:7c:e7:a0:23:be:98:
         20:47:f3:47:e1:b3:92:0f:2a:a8:e0:5b:3c:68:01:45:5c:cb:
         3b:60:53:5d:1a:2a:68:19:4f:7c:d1:3b:f2:c3:e3:a4:f9:13:
         15:9f:19:18:48:dd:27:57:76:25:6f:72:77:39:05:01:7f:81:
         ba:c9:5c:0e:39:3d:83:b6:48:1c:5a:04:69:c5:08:41:88:50:
         b1:a9:19:10:5d:8f:e3:61:c6:4b:47:60:3a:7f:f9:1d:54:01:
         ef:e1:01:0a:21:d2:41:9c:84:41:9c:ba:73:e1:8e:74:2a:87:
         e0:f4:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----