Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132342e3131352e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          EHbf/p2y6usAnwhJ9UMl1lImuHMBWaMOOKgUhCtW+FM=
Subject key identifier:   44:9B:BA:83:17:E3:0E:B0:3A:A3:4A:B5:C7:77:41:E5:E3:59:6F:8A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       419AE70ADB0C35633A40D902741BDCF50DAFC0D3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:38 +0000
ROA not before:           Sat 12 Feb 2022 00:17:38 +0000
ROA not after:            Sun 12 Feb 2023 00:22:38 +0000
asID:                     131111
IP address blocks:        103.124.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9a:e7:0a:db:0c:35:63:3a:40:d9:02:74:1b:dc:f5:0d:af:c0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:38 2022 GMT
            Not After : Feb 12 00:22:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:11:50:68:4c:ba:41:a5:09:ba:21:88:78:
                    b6:ae:73:32:80:90:b2:c1:23:a8:fd:17:59:9e:64:
                    65:13:96:aa:04:d6:11:65:4e:eb:27:f2:71:21:84:
                    39:32:47:ec:71:70:6c:80:00:b4:a8:c3:9f:ac:6b:
                    4f:48:c1:8b:73:ae:41:de:97:e8:54:59:40:e1:7b:
                    c1:69:4d:4b:1a:58:0e:1f:59:41:ad:5a:60:84:a9:
                    01:fd:93:ba:35:58:21:99:e6:be:fb:04:7c:b2:39:
                    d4:ca:3e:97:82:f6:56:06:a7:65:1e:a7:27:60:86:
                    c6:26:82:cb:34:93:a6:82:9e:52:51:38:6d:ba:fb:
                    36:8b:2a:a8:8f:91:23:df:e1:2f:f8:d0:7a:ae:b8:
                    7c:75:f3:3f:d5:e4:d1:95:a2:63:a8:9e:85:61:ce:
                    78:d9:22:43:97:0e:1f:cc:ee:b4:50:23:c4:01:f6:
                    66:07:f4:19:3d:61:cf:4c:3e:16:22:de:67:9d:99:
                    89:a6:51:8c:ed:47:2d:d9:3d:dc:e2:61:a0:b7:31:
                    32:b2:a5:a8:3b:b6:5e:a1:bb:72:21:73:b3:e9:86:
                    00:1b:c7:09:84:92:93:06:3d:f5:33:79:ca:2d:a7:
                    ff:18:4f:83:32:0b:45:8e:6b:13:18:04:33:eb:64:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9B:BA:83:17:E3:0E:B0:3A:A3:4A:B5:C7:77:41:E5:E3:59:6F:8A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:e3:e0:d7:06:4d:ec:78:d0:8c:2d:5f:5a:c8:a1:cb:77:
         10:9c:ad:85:35:ce:39:a4:e0:9b:c0:dc:69:69:23:7c:35:b2:
         59:a3:8f:fe:dd:f2:c3:34:70:7c:71:29:d6:09:6c:2c:9b:cb:
         65:ee:8f:3d:4b:95:1d:20:77:dd:fe:aa:6e:da:94:24:29:35:
         fd:92:9e:ad:dd:84:22:f2:a3:63:54:1a:16:76:59:ef:80:b7:
         74:28:2a:32:e5:b2:40:2c:68:f4:a3:b0:69:17:2f:6a:4a:58:
         3f:54:56:43:bd:ba:ab:20:55:c1:9a:c4:51:fa:11:7e:da:03:
         54:38:36:55:ad:3d:67:50:08:78:98:12:13:58:f0:86:ec:dd:
         68:10:75:23:65:78:59:50:f8:b7:85:c8:9b:c9:6b:c2:40:54:
         2b:f3:2f:6f:0e:92:13:02:02:ef:9d:fb:6a:38:21:49:5f:b8:
         8a:b7:73:6a:02:0e:e4:9e:59:16:06:c5:b7:f7:eb:d6:76:52:
         74:d8:d3:68:fc:c2:ce:a0:80:a1:0b:fc:7c:43:12:05:a6:5c:
         c2:e5:e2:f0:21:9a:08:f4:1e:bc:b8:2c:87:b8:83:d6:5a:cf:
         1d:d0:eb:89:6b:8c:28:3a:ee:6e:c8:a7:c2:9c:84:6f:a8:72:
         e3:19:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----