Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e35362e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132352e35362e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          rjuCvdzNItEB0R8FRFmGUEtowkZVpwfdbW4+j8BTAfU=
Subject key identifier:   A5:FD:F4:D4:4B:CC:ED:86:90:2C:87:BE:ED:8D:5E:15:F2:E6:9C:B5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       296315F159F8CEC066532155871530F1DE21118A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e35362e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:03 +0000
ROA not before:           Wed 10 Nov 2021 07:55:03 +0000
ROA not after:            Thu 10 Nov 2022 08:00:03 +0000
asID:                     63859
IP address blocks:        103.125.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:63:15:f1:59:f8:ce:c0:66:53:21:55:87:15:30:f1:de:21:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:03 2021 GMT
            Not After : Nov 10 08:00:03 2022 GMT
        Subject: CN=3082010A0282010100B6EAB1AEF424EC687E2176C2517BDD53FC26FF29D11F71AD86CB391564131D1B98987E7386D1B65259FE339A636F3F4245865EA6CD779D787A8EF507F8B9F395F70B37E04DEE13B26DB8D97696E6AB413DA0403C17073259FE5C75ADBFA0B3039EC2975D2AF6B2DF03DA7EBD09F89BD6D403C542A4D0C4988BE32F4CAD2228D884234F8CF21FFDAF3DD2B2A1DB58EF707C5C97B62958BC343D2F79A7CA62A645566F2EE5EE54EF1F59A56AE8B0589A22758C59525B81BB28F3B18D0FEFEF2BA82B9B2656580C6A6D9BF6690E668ED0FCA7BFF83D8AD6A47F04F47E7A68BA1238F7A374E61023317224A600876955CB8200EA34B89B237BAFE2BAA69AA88BC9830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:b1:ae:f4:24:ec:68:7e:21:76:c2:51:7b:
                    dd:53:fc:26:ff:29:d1:1f:71:ad:86:cb:39:15:64:
                    13:1d:1b:98:98:7e:73:86:d1:b6:52:59:fe:33:9a:
                    63:6f:3f:42:45:86:5e:a6:cd:77:9d:78:7a:8e:f5:
                    07:f8:b9:f3:95:f7:0b:37:e0:4d:ee:13:b2:6d:b8:
                    d9:76:96:e6:ab:41:3d:a0:40:3c:17:07:32:59:fe:
                    5c:75:ad:bf:a0:b3:03:9e:c2:97:5d:2a:f6:b2:df:
                    03:da:7e:bd:09:f8:9b:d6:d4:03:c5:42:a4:d0:c4:
                    98:8b:e3:2f:4c:ad:22:28:d8:84:23:4f:8c:f2:1f:
                    fd:af:3d:d2:b2:a1:db:58:ef:70:7c:5c:97:b6:29:
                    58:bc:34:3d:2f:79:a7:ca:62:a6:45:56:6f:2e:e5:
                    ee:54:ef:1f:59:a5:6a:e8:b0:58:9a:22:75:8c:59:
                    52:5b:81:bb:28:f3:b1:8d:0f:ef:ef:2b:a8:2b:9b:
                    26:56:58:0c:6a:6d:9b:f6:69:0e:66:8e:d0:fc:a7:
                    bf:f8:3d:8a:d6:a4:7f:04:f4:7e:7a:68:ba:12:38:
                    f7:a3:74:e6:10:23:31:72:24:a6:00:87:69:55:cb:
                    82:00:ea:34:b8:9b:23:7b:af:e2:ba:a6:9a:a8:8b:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:F4:D4:4B:CC:ED:86:90:2C:87:BE:ED:8D:5E:15:F2:E6:9C:B5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e35362e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:ef:b4:67:f2:d5:4e:6e:9a:df:30:e9:e7:68:ef:f2:b1:
         2f:d4:72:94:f5:e7:62:11:0d:4d:28:dc:cc:69:7c:df:a1:a3:
         36:94:74:0b:85:7f:f4:0d:79:9f:d8:54:fc:24:7e:f8:e6:3d:
         ba:2f:fd:3a:16:b4:f4:40:94:88:9e:e9:10:eb:0c:8d:9d:fc:
         22:d0:1c:63:05:e2:72:13:8f:fb:2e:98:c4:a9:e7:9f:e1:6f:
         3e:aa:76:f1:f3:cb:d8:75:57:b5:b2:31:2c:62:54:36:84:b6:
         8f:4e:95:d2:35:85:e6:7f:88:d9:aa:ec:7a:1a:81:00:57:87:
         ef:57:53:f5:6c:e2:9c:17:46:56:43:ce:9d:1b:5a:2e:e6:be:
         35:24:85:d1:e3:6f:ed:d0:42:c8:4d:d0:6e:4f:88:8d:e2:83:
         d4:42:8e:69:4d:22:2f:aa:fe:32:91:c1:f0:4f:90:ec:3b:da:
         bb:36:65:12:c8:95:80:66:73:a6:ab:86:ce:3f:14:43:4d:b0:
         2a:de:c8:20:fa:c0:ee:90:6d:f9:5b:43:f6:6c:cb:7b:ef:8a:
         0b:82:df:70:78:e1:2b:5e:6d:ea:53:60:55:5f:12:06:88:47:
         bb:26:bf:f6:c4:91:ff:db:11:18:d1:63:61:6a:b7:e2:30:13:
         98:9e:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----