Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e34342e302f32322d3234203d3e2030.roa
File:                     3130332e3132342e34342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          fhChPb4euZnR3VYGrawmOht7132jjqDg7XA5B/CzBbk=
Subject key identifier:   C5:3F:7D:E9:51:76:E7:FC:FB:F1:5F:E3:FC:7B:7D:6A:0C:35:9A:AE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54533EE1B1679E3E058C92EE330D04F57BC77D55
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e34342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:26:13 +0000
ROA not before:           Wed 02 Feb 2022 06:21:13 +0000
ROA not after:            Thu 02 Feb 2023 06:26:13 +0000
asID:                     0
IP address blocks:        103.124.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:53:3e:e1:b1:67:9e:3e:05:8c:92:ee:33:0d:04:f5:7b:c7:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:21:13 2022 GMT
            Not After : Feb  2 06:26:13 2023 GMT
        Subject: CN=3082010A0282010100BDDD5F1F9EEF390ECA45E5A3D0EFC6A456C5566E15D7C527AC3305128ED64AABC627D581523BD36A953340B35EB5738361997D78E03D6914EF228DD8E29034A29338D35225A19CD3338E93283D73F2E1608C7BCD32F68F2D86354D44616CF2C280AC6CE945DC871B480D0710A211887585616B651C8CD79D3C13FC21A28D903A499DF055F90ECD7B7D76EF976A56B144ED36BB3F1307C54DF238E44985BA41C7AC15D91987EDF0DC44A36426095BB0FDA4D58CDF07AA84C46AA318D110E401165D8E981072B9A55F6A70FF637FDA02A7B9989BC4C5819AB0B3C5DB6BBC233A6FE9464275673E71FF073C3E019FD7495B8F31634494F8AE2DB8FE12AA22EA5B0B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:5f:1f:9e:ef:39:0e:ca:45:e5:a3:d0:ef:
                    c6:a4:56:c5:56:6e:15:d7:c5:27:ac:33:05:12:8e:
                    d6:4a:ab:c6:27:d5:81:52:3b:d3:6a:95:33:40:b3:
                    5e:b5:73:83:61:99:7d:78:e0:3d:69:14:ef:22:8d:
                    d8:e2:90:34:a2:93:38:d3:52:25:a1:9c:d3:33:8e:
                    93:28:3d:73:f2:e1:60:8c:7b:cd:32:f6:8f:2d:86:
                    35:4d:44:61:6c:f2:c2:80:ac:6c:e9:45:dc:87:1b:
                    48:0d:07:10:a2:11:88:75:85:61:6b:65:1c:8c:d7:
                    9d:3c:13:fc:21:a2:8d:90:3a:49:9d:f0:55:f9:0e:
                    cd:7b:7d:76:ef:97:6a:56:b1:44:ed:36:bb:3f:13:
                    07:c5:4d:f2:38:e4:49:85:ba:41:c7:ac:15:d9:19:
                    87:ed:f0:dc:44:a3:64:26:09:5b:b0:fd:a4:d5:8c:
                    df:07:aa:84:c4:6a:a3:18:d1:10:e4:01:16:5d:8e:
                    98:10:72:b9:a5:5f:6a:70:ff:63:7f:da:02:a7:b9:
                    98:9b:c4:c5:81:9a:b0:b3:c5:db:6b:bc:23:3a:6f:
                    e9:46:42:75:67:3e:71:ff:07:3c:3e:01:9f:d7:49:
                    5b:8f:31:63:44:94:f8:ae:2d:b8:fe:12:aa:22:ea:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:7D:E9:51:76:E7:FC:FB:F1:5F:E3:FC:7B:7D:6A:0C:35:9A:AE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e34342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:03:4b:e9:18:39:85:d7:6c:96:4b:12:b7:d2:b4:bf:83:
         e3:70:c0:c6:6a:5b:37:86:25:4e:b9:c9:14:9b:ab:2f:53:20:
         76:ea:0b:ca:83:21:a1:3c:79:d4:ce:f4:96:41:21:5f:6f:26:
         45:45:45:f0:26:76:74:83:43:e9:16:41:22:fd:9c:26:fe:a6:
         bf:58:e3:cc:5f:c7:f9:6f:43:4f:e0:6f:33:f8:f3:fc:9d:cc:
         68:1c:ad:c8:5e:d0:70:10:ff:82:de:67:44:82:ba:d0:f2:e5:
         18:e4:a6:8a:86:da:f8:26:47:4f:67:b1:8a:01:d5:4d:e9:f2:
         4f:16:6d:88:5d:04:09:4e:a3:e7:a0:e0:fd:00:f7:18:5e:9c:
         46:df:91:4e:34:61:f2:ba:ec:6c:a0:9f:cd:c8:ed:70:6f:c7:
         f0:28:e4:80:af:79:8f:90:88:a7:52:24:60:de:67:bd:dd:d9:
         ec:11:b0:5f:1a:52:fb:1b:cd:c3:94:b5:a1:2e:e3:c7:a7:6a:
         ba:b6:da:bd:22:c8:f5:7b:31:35:32:dc:99:74:99:a6:59:bb:
         20:a2:ca:b7:d2:d8:59:55:9d:1d:8f:e8:99:eb:0e:de:8d:0d:
         5b:5e:70:4c:89:52:b6:84:8e:18:7a:4c:1f:d6:f3:c6:56:b3:
         a2:7f:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----