Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132342e3131332e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          ehqnqo7MOZQiRbDhbqIoYT+c/cmOnRkmisw5k2TNdNg=
Subject key identifier:   28:29:80:A5:D7:DF:22:DE:A2:E1:86:F9:76:2C:14:D7:74:D1:A8:52
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       504E6E72AEAE904D2D74CF382AC6FC520CB35CBF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:38 +0000
ROA not before:           Sat 12 Feb 2022 00:17:38 +0000
ROA not after:            Sun 12 Feb 2023 00:22:38 +0000
asID:                     131111
IP address blocks:        103.124.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4e:6e:72:ae:ae:90:4d:2d:74:cf:38:2a:c6:fc:52:0c:b3:5c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:38 2022 GMT
            Not After : Feb 12 00:22:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:b4:76:b2:00:93:8c:26:a1:94:f4:fb:00:
                    0a:3e:b9:7a:54:75:40:d3:aa:47:4b:d0:a9:2c:ac:
                    97:37:15:5c:74:04:db:80:00:b2:6e:b9:ca:c2:49:
                    ea:1b:36:0e:2b:6c:1a:55:e1:b9:81:0d:45:c4:c3:
                    15:a5:25:eb:20:e1:3e:e9:ec:53:d3:15:49:0e:c9:
                    94:97:46:7a:d0:2f:76:3c:93:55:74:8b:c7:43:43:
                    1f:03:fb:06:95:24:5e:c4:cd:23:42:cd:a4:e3:41:
                    cb:7c:14:e2:fb:b6:27:1d:b6:34:9a:6b:f7:12:5b:
                    4c:17:10:89:cf:39:89:65:4b:4c:ed:19:c8:04:77:
                    fc:fa:cc:4d:80:f5:c8:2d:c0:72:26:f4:23:59:61:
                    66:c4:f0:3e:40:c3:d0:05:c9:83:50:49:d5:0e:5f:
                    1b:c5:1c:c4:72:ca:b9:de:c3:fa:16:d0:4c:9a:0e:
                    26:92:6b:3c:5d:b1:8c:d6:e9:6a:35:95:c3:c2:b8:
                    02:a7:1e:fe:e7:f4:a8:1d:4d:5c:8a:96:ff:25:fe:
                    7f:24:ae:4c:2a:a8:23:6d:4d:09:be:19:42:bd:f4:
                    6d:44:9b:eb:42:6d:fe:c4:1a:91:b1:ab:52:bd:9a:
                    3c:bf:d1:cf:44:38:df:0d:65:19:3c:a0:ce:06:40:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:80:A5:D7:DF:22:DE:A2:E1:86:F9:76:2C:14:D7:74:D1:A8:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131332e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:6b:38:10:13:31:3d:8f:72:2d:24:b9:ba:41:60:1b:78:
         c8:1a:82:55:f2:d6:d1:d3:76:18:fa:07:fc:fd:eb:28:70:2a:
         73:ce:a4:84:84:06:73:cb:72:c2:7c:9d:ad:ae:ac:49:a6:a8:
         75:cd:e0:95:ba:e8:33:81:36:cf:e1:17:8d:d8:82:0b:7a:f3:
         3a:0d:8a:e7:d1:b1:85:d0:5b:8f:55:64:c1:d1:50:8c:23:ce:
         19:45:fb:7f:bd:91:3c:e4:e4:7d:17:e0:2f:f8:98:fe:38:48:
         62:90:80:8c:3c:ad:8d:64:49:27:49:cf:41:11:f7:ad:b1:e7:
         6a:40:b5:db:5b:a8:24:12:01:ff:55:bc:5e:32:4d:b0:13:08:
         54:a6:cf:df:12:37:74:40:8b:61:a5:2f:2d:35:0e:c6:0c:1e:
         55:80:b0:1e:32:33:67:dc:22:67:53:41:23:d9:d6:02:e1:25:
         4b:a9:c6:77:6a:5f:43:d6:ee:68:97:ab:c8:7f:46:50:4c:cc:
         b8:58:ee:e0:97:25:22:39:c0:98:c2:b8:cd:ef:4f:14:53:39:
         ca:0e:ed:7e:01:95:c4:e6:29:52:e9:9e:e1:84:9a:b5:36:3c:
         e3:1b:ea:96:45:67:a4:76:31:f9:22:1c:6d:22:bc:70:c9:b0:
         db:fd:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----