Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34382e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132352e34382e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          vHhWsaOsqpuYHpbtq65M3sTnS2eXaHfuPp4prlELdeg=
Subject key identifier:   FB:53:3C:BA:14:1D:0E:47:CB:86:20:B1:6D:B9:DB:EF:00:88:D2:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79FBEF4F13E2061EDA2F61DB4CACC4FB11EA881E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34382e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:03 +0000
ROA not before:           Wed 10 Nov 2021 07:55:03 +0000
ROA not after:            Thu 10 Nov 2022 08:00:03 +0000
asID:                     63859
IP address blocks:        103.125.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:ef:4f:13:e2:06:1e:da:2f:61:db:4c:ac:c4:fb:11:ea:88:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:03 2021 GMT
            Not After : Nov 10 08:00:03 2022 GMT
        Subject: CN=3082010A0282010100D134E143AD6B725F90D3C867D0E6D90189E85CBAF92E25A62E56B4AA804CBD852CF1D92D83EA0C5C51C49D4312DE5B777B67AA088F73214120D6CBC75E867E04CF71D02B983C37C01414C6CA16B8F646B571E54E16217F2AC0DD045C63FEDB51BE2A285D3683D373850FDF72CEB7B11C8340A1294291F2ABEEACEE175B688FEB68274C731564A87B8D0A61565E0C71FF2A77CECB7F354D909902DF25747DD41B6C724160A969745CB58FE55F1526998BC5947278254C3F7A82557E55CBB9F1C96393AD302D62E39426EA8A2830C65BA80404DE469FC85660230848480672F05BF71E85B62EB592D0274F58347A90DEA7E7C91C700E2C19D6A0163AB86DB45C2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:e1:43:ad:6b:72:5f:90:d3:c8:67:d0:e6:
                    d9:01:89:e8:5c:ba:f9:2e:25:a6:2e:56:b4:aa:80:
                    4c:bd:85:2c:f1:d9:2d:83:ea:0c:5c:51:c4:9d:43:
                    12:de:5b:77:7b:67:aa:08:8f:73:21:41:20:d6:cb:
                    c7:5e:86:7e:04:cf:71:d0:2b:98:3c:37:c0:14:14:
                    c6:ca:16:b8:f6:46:b5:71:e5:4e:16:21:7f:2a:c0:
                    dd:04:5c:63:fe:db:51:be:2a:28:5d:36:83:d3:73:
                    85:0f:df:72:ce:b7:b1:1c:83:40:a1:29:42:91:f2:
                    ab:ee:ac:ee:17:5b:68:8f:eb:68:27:4c:73:15:64:
                    a8:7b:8d:0a:61:56:5e:0c:71:ff:2a:77:ce:cb:7f:
                    35:4d:90:99:02:df:25:74:7d:d4:1b:6c:72:41:60:
                    a9:69:74:5c:b5:8f:e5:5f:15:26:99:8b:c5:94:72:
                    78:25:4c:3f:7a:82:55:7e:55:cb:b9:f1:c9:63:93:
                    ad:30:2d:62:e3:94:26:ea:8a:28:30:c6:5b:a8:04:
                    04:de:46:9f:c8:56:60:23:08:48:48:06:72:f0:5b:
                    f7:1e:85:b6:2e:b5:92:d0:27:4f:58:34:7a:90:de:
                    a7:e7:c9:1c:70:0e:2c:19:d6:a0:16:3a:b8:6d:b4:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:3C:BA:14:1D:0E:47:CB:86:20:B1:6D:B9:DB:EF:00:88:D2:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34382e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:86:19:bb:08:7b:4a:ca:fb:01:b2:ac:98:94:6b:38:f2:ca:
         d8:3e:49:60:63:20:89:3d:02:ac:f2:d2:f7:32:e1:cc:f6:37:
         9e:09:c5:97:af:31:72:98:a5:a7:58:b6:f1:ef:61:98:a7:43:
         07:b0:c2:1c:57:20:e4:32:2d:03:f3:8f:39:07:ee:8a:58:8d:
         29:67:70:2c:48:c0:84:60:89:19:83:a0:7b:b5:bc:2b:26:19:
         d3:ae:9e:14:15:95:a2:e7:d4:9d:cf:5e:c3:c9:b8:48:02:23:
         16:41:ce:0b:c3:18:8f:71:1d:14:6a:d0:5a:ba:96:df:d2:f1:
         dc:84:ac:8f:c0:db:e3:ee:c4:e0:65:f9:4f:4d:51:ef:e5:21:
         dd:a8:5b:03:cf:74:e2:a6:be:16:22:1b:4b:aa:ca:47:1a:b0:
         ed:45:81:54:f8:1a:9a:e2:61:5f:9c:b1:96:e5:74:f8:57:43:
         3c:2b:fa:16:7f:c9:a4:dd:b6:d6:96:32:f2:62:62:8e:ab:32:
         47:c0:d7:e8:ac:58:9d:9a:e7:10:dc:25:eb:23:5d:db:f5:54:
         fa:74:77:0d:33:ba:bd:dc:c7:d5:47:f7:56:f6:9f:be:df:69:
         0e:ea:20:d5:b8:2f:c8:33:af:e9:ee:6c:f3:6d:28:5e:47:9e:
         5f:2b:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----