Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e33362e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132352e33362e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          i4HDd8sr2LvR/yt9ntFlIPOn8uVxEnHZm1tW5SjYBxI=
Subject key identifier:   C1:8A:F8:77:33:1B:47:88:BE:C6:18:D5:CA:F8:20:F6:39:BA:F5:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1CA875CF3268B9C60D1CDE3908DE2D336A0A108D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e33362e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:01 +0000
ROA not before:           Wed 10 Nov 2021 06:55:01 +0000
ROA not after:            Thu 10 Nov 2022 07:00:01 +0000
asID:                     63859
IP address blocks:        103.125.36.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a8:75:cf:32:68:b9:c6:0d:1c:de:39:08:de:2d:33:6a:0a:10:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:01 2021 GMT
            Not After : Nov 10 07:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:cd:e5:22:ce:b7:c0:1e:08:93:55:92:e3:
                    ab:fe:c8:80:2f:db:ff:e4:ea:e1:de:5a:9e:49:ab:
                    c0:d8:dd:51:c4:1e:8f:60:0d:c4:70:dd:b7:5a:96:
                    7e:57:01:63:55:9e:f6:93:c8:f2:56:cd:67:77:91:
                    f8:6c:f4:8e:b0:80:0b:78:70:53:fa:0a:32:91:be:
                    2b:43:d0:38:2e:43:64:9e:1c:1e:e1:7d:2d:6f:61:
                    37:db:fa:e8:8d:85:88:a5:85:71:2e:cb:49:50:61:
                    11:d9:e1:3e:0e:cb:63:62:61:30:45:6d:c3:0e:a2:
                    0a:c9:e8:40:44:85:b1:8f:63:0a:98:f4:95:5c:6b:
                    1b:ee:cf:9d:7d:4b:90:15:d8:c6:8e:a5:f5:b1:42:
                    99:fb:b4:28:43:8a:82:b5:54:96:5b:0d:a1:6e:10:
                    79:dd:85:65:70:36:64:22:ce:fd:3a:e3:d8:86:40:
                    3f:f8:18:71:ff:01:c9:62:87:0b:74:5b:2a:85:33:
                    99:2f:3c:7c:c8:e4:16:91:32:9f:58:8c:46:0c:a6:
                    f3:e7:03:d7:fc:95:d9:07:9c:e6:42:42:3d:bd:dd:
                    9d:ce:66:fa:7f:4d:f1:1a:f4:21:64:85:9c:ca:53:
                    ad:fc:3c:34:7e:61:28:5c:4f:0e:f2:00:f7:21:62:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:F8:77:33:1B:47:88:BE:C6:18:D5:CA:F8:20:F6:39:BA:F5:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e33362e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:f1:8b:5b:a7:5e:bb:de:ca:c6:95:0f:4b:70:10:31:42:
         4a:44:ce:62:77:19:de:57:c6:8b:67:68:b4:c9:4f:1d:cf:ec:
         7c:2d:db:44:fc:f3:ec:22:ab:86:92:34:94:eb:d2:f6:2a:07:
         0b:9e:0a:7a:06:18:0f:5a:2d:fc:0b:71:4d:94:50:bc:19:c2:
         a1:11:b8:ec:38:6c:e4:eb:b7:bc:9c:e2:a0:66:11:7f:77:51:
         f6:53:1d:c9:ea:a9:ba:cc:6e:a2:e0:95:21:ab:d6:37:6b:24:
         88:80:32:08:0c:d6:53:45:32:9c:e9:f9:b6:40:4e:76:59:80:
         40:d5:3c:34:cc:86:67:76:fe:e5:7a:0e:d2:7d:d8:a6:c4:02:
         4b:a2:47:5d:4e:59:ef:bc:85:31:03:85:3a:11:7e:26:61:33:
         db:df:81:f1:f4:03:d3:51:4c:f1:18:f9:e0:c2:1f:c3:18:4d:
         8d:78:59:0e:ac:cd:66:81:41:8f:5c:f2:66:9d:48:cd:6f:53:
         2c:5f:3e:6f:38:40:d4:ab:f8:42:33:a8:bd:73:31:5d:36:04:
         a6:00:b4:c0:81:d7:4d:4c:a1:68:e0:5b:70:05:8e:a6:a3:1e:
         3d:cc:29:e9:f3:c8:bd:0d:2c:b4:88:f8:75:21:0b:6b:69:8b:
         a4:c6:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----