Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131342e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132342e3131342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          rygMvw651ldGX1wNlxzEk8HOjBq6Mr7uQCUNqme7W8w=
Subject key identifier:   30:1F:B3:AC:38:7A:30:48:B1:2C:B3:97:2F:4A:B3:2D:11:FB:98:0A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E0F26658B7DF54AD7A4FC51F86287A6A47EDDE7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131342e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:36 +0000
ROA not before:           Sat 12 Feb 2022 00:17:36 +0000
ROA not after:            Sun 12 Feb 2023 00:22:36 +0000
asID:                     131111
IP address blocks:        103.124.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:26:65:8b:7d:f5:4a:d7:a4:fc:51:f8:62:87:a6:a4:7e:dd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:36 2022 GMT
            Not After : Feb 12 00:22:36 2023 GMT
        Subject: CN=3082010A0282010100C7698D109B56BCE1F78D7965297987CF653B9690C4761A37FDEFBF57BA6FA4AA7F77B0AF9E46B7B6583D201CB4BBBC2737B1DD2D4BA899FB3ED9D138A24B3D3433D79C0316C98341F69743F8598520B01DC7A4E51207EA083EA6A6182BEC27E8A943D5F87773CDB2D7A9E1A6534810989B31F347DD4FE2CD570D0C3160A62D317524E2A78115202640A223ADAD9CCFB83D476AB5950C59041108ACAB381B9B1D5462FBABE36A0E26888AD0209023C299D4F7F7A8F019D8397963EBB282BF01DF01CDF211F24A7C8065CF7FF863CB2C2F9C37E99E264D9B489C130FE542F68D989FEEE5300350F7D9DFF845FCD1D31DAE14E927C016CBE6203BAECDF7CF4AC5970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:8d:10:9b:56:bc:e1:f7:8d:79:65:29:79:
                    87:cf:65:3b:96:90:c4:76:1a:37:fd:ef:bf:57:ba:
                    6f:a4:aa:7f:77:b0:af:9e:46:b7:b6:58:3d:20:1c:
                    b4:bb:bc:27:37:b1:dd:2d:4b:a8:99:fb:3e:d9:d1:
                    38:a2:4b:3d:34:33:d7:9c:03:16:c9:83:41:f6:97:
                    43:f8:59:85:20:b0:1d:c7:a4:e5:12:07:ea:08:3e:
                    a6:a6:18:2b:ec:27:e8:a9:43:d5:f8:77:73:cd:b2:
                    d7:a9:e1:a6:53:48:10:98:9b:31:f3:47:dd:4f:e2:
                    cd:57:0d:0c:31:60:a6:2d:31:75:24:e2:a7:81:15:
                    20:26:40:a2:23:ad:ad:9c:cf:b8:3d:47:6a:b5:95:
                    0c:59:04:11:08:ac:ab:38:1b:9b:1d:54:62:fb:ab:
                    e3:6a:0e:26:88:8a:d0:20:90:23:c2:99:d4:f7:f7:
                    a8:f0:19:d8:39:79:63:eb:b2:82:bf:01:df:01:cd:
                    f2:11:f2:4a:7c:80:65:cf:7f:f8:63:cb:2c:2f:9c:
                    37:e9:9e:26:4d:9b:48:9c:13:0f:e5:42:f6:8d:98:
                    9f:ee:e5:30:03:50:f7:d9:df:f8:45:fc:d1:d3:1d:
                    ae:14:e9:27:c0:16:cb:e6:20:3b:ae:cd:f7:cf:4a:
                    c5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:B3:AC:38:7A:30:48:B1:2C:B3:97:2F:4A:B3:2D:11:FB:98:0A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131342e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:22:92:40:a0:05:88:46:b6:e3:7b:dc:e5:07:ee:81:5a:
         f3:f1:db:62:5e:13:af:78:4f:b3:66:2a:47:b9:30:e8:82:18:
         af:e7:bf:97:62:82:4a:87:69:d5:8a:d1:28:cd:05:50:3f:09:
         32:31:cc:06:60:78:b9:b6:fa:ec:83:95:bb:46:6f:f0:46:82:
         b2:a4:07:0f:79:51:62:55:97:ce:98:b9:f2:de:84:a7:8e:b4:
         7a:18:4e:83:c0:04:97:7e:2b:89:1e:c1:ff:07:fa:cd:73:9a:
         30:30:34:32:e2:a1:b8:01:4a:14:68:a1:7a:3f:0e:5b:f7:71:
         77:bf:54:2e:06:68:3b:df:7c:05:1f:1b:05:1c:aa:b0:de:0e:
         57:a4:dd:da:f6:0a:2e:ce:6a:30:fd:d2:5f:e2:3a:74:e8:46:
         68:86:f8:3a:22:a0:96:53:9d:32:e6:d1:40:41:b0:4c:8e:b7:
         64:14:64:05:42:66:69:94:ed:33:2c:ed:bb:4a:a0:16:81:7b:
         94:07:78:9b:7b:b4:3b:18:5d:c8:6c:68:dc:48:fa:6b:66:61:
         d2:c9:1f:69:a4:6e:cb:4e:ef:86:2b:0c:f5:b6:af:b6:95:ca:
         fd:01:9a:33:35:75:d0:09:df:4b:10:58:20:36:8a:e7:ce:e8:
         ca:37:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----