Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31362e302f32332d3234203d3e20313334363435.roa
File:                     3130332e3132372e31362e302f32332d3234203d3e20313334363435.roa (raw, json)
Hash identifier:          5ed0sqVgdRE5Hq3PX7jHPrE6KkrM63b+6AwO5szVk94=
Subject key identifier:   1D:EF:3F:9F:64:CD:79:9F:5B:60:87:7E:72:79:35:7D:0E:E1:99:31
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4C9D871BFB045B799BB675B538F16C05710A7370
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31362e302f32332d3234203d3e20313334363435.roa
Signing time:             Fri 19 Nov 2021 06:09:41 +0000
ROA not before:           Fri 19 Nov 2021 06:04:41 +0000
ROA not after:            Sat 19 Nov 2022 06:09:41 +0000
asID:                     134645
IP address blocks:        103.127.16.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9d:87:1b:fb:04:5b:79:9b:b6:75:b5:38:f1:6c:05:71:0a:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 06:04:41 2021 GMT
            Not After : Nov 19 06:09:41 2022 GMT
        Subject: CN=3082010A0282010100F0DCB92B12F05A85ECA952C431F4E2407783FD17BD62DF8502F376763506910397E6705DA6ECDAA5A63D141E9CC9D2E336F57E40BEC1A6441E37CB0F259F1C6F040765BB72DB8EA635630F25D2F053798D05754B079002D47E2F7B23937363D3CF8578DAF1A01181E8D9819B884B7D94CB7B22353237E48C23D9DAAB6A29869CD9B8C36E2616D4500CA287D62A8B5602592180F5ED699A8E69379BC493EFDB05F1EFAA499E890F7553C69315D8E52879AF33C0D3E141240824776F0AAEA1A144CE5181C7D64E8DFB8CBF21291B804090AB014C53CAAE0F47A3903FD771FCD99216AA02324FAF12242DC743105C31D7EF0657FBD7B5161211368187635C88E4F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dc:b9:2b:12:f0:5a:85:ec:a9:52:c4:31:f4:
                    e2:40:77:83:fd:17:bd:62:df:85:02:f3:76:76:35:
                    06:91:03:97:e6:70:5d:a6:ec:da:a5:a6:3d:14:1e:
                    9c:c9:d2:e3:36:f5:7e:40:be:c1:a6:44:1e:37:cb:
                    0f:25:9f:1c:6f:04:07:65:bb:72:db:8e:a6:35:63:
                    0f:25:d2:f0:53:79:8d:05:75:4b:07:90:02:d4:7e:
                    2f:7b:23:93:73:63:d3:cf:85:78:da:f1:a0:11:81:
                    e8:d9:81:9b:88:4b:7d:94:cb:7b:22:35:32:37:e4:
                    8c:23:d9:da:ab:6a:29:86:9c:d9:b8:c3:6e:26:16:
                    d4:50:0c:a2:87:d6:2a:8b:56:02:59:21:80:f5:ed:
                    69:9a:8e:69:37:9b:c4:93:ef:db:05:f1:ef:aa:49:
                    9e:89:0f:75:53:c6:93:15:d8:e5:28:79:af:33:c0:
                    d3:e1:41:24:08:24:77:6f:0a:ae:a1:a1:44:ce:51:
                    81:c7:d6:4e:8d:fb:8c:bf:21:29:1b:80:40:90:ab:
                    01:4c:53:ca:ae:0f:47:a3:90:3f:d7:71:fc:d9:92:
                    16:aa:02:32:4f:af:12:24:2d:c7:43:10:5c:31:d7:
                    ef:06:57:fb:d7:b5:16:12:11:36:81:87:63:5c:88:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:3F:9F:64:CD:79:9F:5B:60:87:7E:72:79:35:7D:0E:E1:99:31
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e31362e302f32332d3234203d3e20313334363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:28:1f:79:3f:d7:8f:7e:59:87:bf:4c:33:ad:82:70:93:
         56:95:fb:27:10:e4:c4:d3:39:f8:68:56:c7:21:69:21:f2:4c:
         3a:f7:9e:85:b4:a0:47:2d:ba:cd:af:db:12:33:11:c4:19:bc:
         fa:89:d0:1c:fd:ad:aa:c0:70:7a:38:1d:a8:d9:3b:83:09:d8:
         09:c0:01:fa:bb:2a:ae:97:a3:cf:1e:49:9d:74:d9:5d:08:d6:
         64:41:88:c4:ed:b6:f5:41:31:33:a8:48:81:45:58:b5:41:c6:
         55:00:bf:64:2e:7a:1f:1d:56:65:6f:68:84:e8:a4:1f:9f:2e:
         37:14:64:22:2a:21:1d:89:a5:86:4f:37:cb:fd:d8:74:36:98:
         25:8b:64:d1:3d:fc:7d:64:fd:e4:c3:0a:2d:14:7b:b0:b9:f8:
         c1:ca:77:c4:c5:e6:f5:dc:50:01:0b:c4:c0:9e:b0:f6:2f:cd:
         bb:87:61:c0:fb:78:85:22:f2:78:ce:89:f1:a0:87:98:a5:67:
         ef:77:2e:9b:b0:e9:cc:0e:8e:41:19:31:d9:89:3c:8a:61:af:
         93:49:25:75:11:57:e4:3c:a7:bb:e1:1f:5c:87:59:cc:55:ac:
         8d:bb:75:9e:28:2d:a3:8b:bd:f9:cf:b4:4e:8c:3a:65:d3:28:
         8c:e6:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----