Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f3234203d3e20313331313131.roa
File:                     3130332e3132342e3131332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          kzkYOTkbdEjpHHaDeBrMM1eD4o0mdUrEo03Y24lTbU0=
Subject key identifier:   AB:2C:F0:36:B0:3F:33:24:C3:D6:EA:7A:BC:C1:B2:0F:A3:C0:21:C5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       077CFD1A9770209AEBF3C0FBECED847938EED39F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.124.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7c:fd:1a:97:70:20:9a:eb:f3:c0:fb:ec:ed:84:79:38:ee:d3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:18:65:5f:60:f6:5e:0b:23:6c:86:94:8b:
                    18:06:69:b4:ff:05:68:f9:30:0a:c9:fe:c9:eb:84:
                    4e:8b:46:93:7d:de:4a:4c:95:36:d7:7c:49:a2:f0:
                    02:b4:97:3b:6f:27:9d:ea:da:c1:b2:c4:f0:a7:33:
                    63:86:d1:c0:8a:01:1b:e7:1a:d9:a0:34:d7:31:96:
                    73:46:ed:0e:b1:ac:2b:a9:b4:6c:1e:bb:e1:6f:8b:
                    4d:19:00:8f:23:31:60:64:a0:d7:06:0d:17:63:a0:
                    f5:8f:13:52:7f:77:0b:f2:d8:99:e3:1a:38:b5:65:
                    a4:8f:1c:c8:38:74:e1:17:58:0a:5e:25:48:f5:f5:
                    49:11:ad:0b:a0:27:02:88:ac:dd:81:81:65:f7:8f:
                    0e:cb:fc:d8:02:99:b9:d7:fb:fd:2a:a2:76:32:9d:
                    d2:b4:23:c3:17:77:aa:6a:f2:52:cb:aa:d9:05:b7:
                    8b:e3:df:be:d8:fb:5a:ca:41:1c:88:d6:ea:47:26:
                    a7:c4:86:95:12:63:f5:84:6c:47:64:70:f1:21:06:
                    59:41:b1:3f:fb:10:29:00:7e:a4:9c:bb:a2:ab:97:
                    b5:b8:fd:3d:32:54:20:f5:93:81:c7:83:87:c9:c1:
                    64:69:c4:fe:19:db:59:f2:d9:24:9d:09:09:b3:12:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:F0:36:B0:3F:33:24:C3:D6:EA:7A:BC:C1:B2:0F:A3:C0:21:C5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:0a:99:1a:fd:81:21:54:f0:78:80:f4:6a:e6:b0:3c:79:
         f4:4a:0c:b7:ce:1a:dd:30:9e:52:a1:6d:cf:c6:e5:ba:21:d8:
         f2:4a:3f:63:ac:2e:9b:5a:e2:8c:16:2d:f6:51:b7:c2:78:af:
         e0:5d:fc:69:14:db:00:aa:90:62:84:9b:f4:e9:2d:9b:c0:b1:
         36:04:f2:1a:80:87:c0:c8:19:90:4d:55:4c:2f:4c:15:aa:f2:
         99:78:48:fe:e9:af:aa:a1:23:1c:51:2f:7a:99:f9:5a:3a:9c:
         ac:7c:32:7b:69:95:c6:c4:06:1d:9e:4b:c7:61:0a:7a:8f:b9:
         ec:b8:7f:d5:87:01:a0:57:f8:ee:e1:7a:2e:a9:32:93:fa:c9:
         15:43:80:e3:11:e2:59:28:53:ba:69:49:b1:8a:c6:65:74:da:
         e2:22:65:9a:7c:cb:34:7e:0a:7d:cc:a0:05:bd:85:ce:cc:1d:
         16:23:45:b7:ba:05:ba:e6:af:9a:c2:1e:9e:cc:c4:40:b7:79:
         21:ea:f3:2a:25:0a:3d:c5:69:ff:68:3b:aa:de:a6:cc:4d:8a:
         92:8a:61:0a:e1:0a:b5:c9:3c:7c:6d:7e:c7:53:7c:f3:bf:95:
         b3:5f:eb:02:a4:7b:24:96:52:2d:80:38:9b:e5:0b:d2:6e:69:
         1e:a2:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----