Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e2030.roa
File:                     3130332e3132352e382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          1tQS5l9Q1UCL7kD41+NWZF2FlcxCOYB7oCboMVOVvME=
Subject key identifier:   77:78:1A:E4:8D:D8:26:B8:7C:96:B7:10:F7:27:9B:CB:48:B8:2D:22
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       05149FF74883E73EFD1A442D463816F76EF0ACDD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:44:27 +0000
ROA not before:           Mon 31 Jan 2022 03:39:27 +0000
ROA not after:            Tue 31 Jan 2023 03:44:27 +0000
asID:                     0
IP address blocks:        103.125.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:14:9f:f7:48:83:e7:3e:fd:1a:44:2d:46:38:16:f7:6e:f0:ac:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:39:27 2022 GMT
            Not After : Jan 31 03:44:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:b5:bb:d0:e0:3d:84:63:48:02:6f:b1:ec:
                    49:6e:62:de:2c:e4:0b:db:c7:1d:e0:28:cd:26:6a:
                    d1:87:c4:4b:91:73:da:c5:31:ae:27:2a:62:d1:9c:
                    86:bc:d7:5b:29:f7:55:99:c1:5d:b6:d3:34:9e:a3:
                    d6:43:fc:fa:d1:a1:db:54:f8:96:ca:d1:9f:48:60:
                    ff:bc:a1:50:87:7c:97:7d:f5:3f:5c:b9:51:7c:42:
                    79:4b:a1:51:10:86:e4:e4:05:b0:80:59:89:e4:24:
                    04:da:a1:dc:98:80:bb:10:68:fd:1a:4f:ba:d0:27:
                    d9:4e:46:2e:0c:23:d4:2b:90:dc:e9:fa:7e:b7:12:
                    d4:8d:c1:e8:fa:0f:e8:64:c1:5a:08:c0:24:2b:6c:
                    bd:ce:6d:71:f4:69:e0:be:ff:13:35:07:e0:da:8d:
                    f2:f6:6a:ad:e3:20:40:63:b3:29:e0:74:c2:c2:93:
                    7b:79:b2:e2:97:e3:6a:e5:de:38:d4:9b:51:9c:38:
                    5e:69:be:b7:bb:5c:91:c1:04:b0:d8:21:83:a2:be:
                    49:53:c0:2a:63:c9:9c:5d:92:17:30:86:72:b1:dd:
                    d9:99:2a:41:19:66:91:8a:91:ed:d1:eb:3b:f9:f1:
                    16:aa:2b:ef:c5:a2:d0:cb:6c:d9:06:41:b1:2c:e3:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:1A:E4:8D:D8:26:B8:7C:96:B7:10:F7:27:9B:CB:48:B8:2D:22
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:7f:0c:a4:f7:04:3a:50:56:b5:f2:da:b4:6e:e3:67:61:
         e6:7d:21:6c:4b:4c:77:f1:38:81:d7:d0:2d:5b:84:30:f9:0c:
         91:e1:be:37:8a:96:74:a6:aa:0f:22:46:35:24:7b:2f:f2:3c:
         48:fa:84:39:cb:f0:51:1b:fe:d1:df:90:cc:aa:07:e5:57:2a:
         de:d7:be:52:03:17:c4:d4:ee:9e:52:dd:a3:f8:29:1e:45:fc:
         66:c8:c7:4c:4a:ea:53:ec:3b:f5:34:2d:13:84:a8:3e:b9:60:
         ca:df:b2:6f:b6:59:30:5e:b9:cb:6a:2e:e1:c2:ee:71:cf:94:
         02:be:af:af:48:49:ec:00:73:a9:22:48:d0:ae:cd:84:47:d3:
         46:8f:2b:4c:0b:43:46:85:f9:13:fd:3d:a1:46:e8:cd:e1:75:
         5b:02:a8:e5:d7:1d:1a:4a:8f:fa:8c:4a:eb:cf:fb:21:1f:33:
         26:c1:18:ed:c1:29:a8:0b:6a:42:67:76:31:5a:89:01:ce:0b:
         88:9f:45:66:3d:e1:a3:26:f9:08:16:65:63:6f:3f:07:54:77:
         b9:4a:40:f6:49:d9:22:2f:84:e2:44:3e:f7:61:86:d6:e0:3d:
         b7:f9:c2:b4:98:72:62:51:bb:60:86:d5:a0:34:e5:03:8c:eb:
         28:c7:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----