Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e36342e302f32322d3234203d3e2030.roa
File:                     3130332e3132372e36342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          BAq4LdsYkQKJlAMECnRRqLxzzMpTNs5F3KEwZ62jZE4=
Subject key identifier:   AA:FA:9D:29:18:A6:21:C4:52:54:47:13:77:9D:8F:B0:5E:E6:9D:9E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       169B11926212C5C289D035ADC0658E60E06CC1CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e36342e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:44:01 +0000
ROA not before:           Mon 31 Jan 2022 03:39:01 +0000
ROA not after:            Tue 31 Jan 2023 03:44:01 +0000
asID:                     0
IP address blocks:        103.127.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:11:92:62:12:c5:c2:89:d0:35:ad:c0:65:8e:60:e0:6c:c1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:39:01 2022 GMT
            Not After : Jan 31 03:44:01 2023 GMT
        Subject: CN=3082010A0282010100AF9DA37A8C4F7C62DD454ED0A4ECF9802229E7EF034ED0AE37B97D0CB8096C6103090F6A1FDEB39A1A2E7AD06930191685C67BCBDD36E951DF538EC867EB8950EBD6F3EC3098F0B9C4B45FA623082D75872AB523C5E0FCD98DE8B3C54933C17C241FC11400F18BD5E084DFAB32B619FD6CC7D276147EADC666FFA177C012216738F67B9BCDD603B7FABB6E73A737F59706FE162315E5C775E97F4DB3C8173ED8E5FD85DF471C08880B59A2AC3EE8094A5ED1BC40C5462763AFD9F3B4B343D5E50E404EABA3B1A7960CD5CA0D3B98AD5F8AFA44F0B93E7E13917DAE34603248ACF7BD1EF2317D1E60E17321504973BB42E24A5ECF9B9C6C408CE09358F801DFD10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:a3:7a:8c:4f:7c:62:dd:45:4e:d0:a4:ec:
                    f9:80:22:29:e7:ef:03:4e:d0:ae:37:b9:7d:0c:b8:
                    09:6c:61:03:09:0f:6a:1f:de:b3:9a:1a:2e:7a:d0:
                    69:30:19:16:85:c6:7b:cb:dd:36:e9:51:df:53:8e:
                    c8:67:eb:89:50:eb:d6:f3:ec:30:98:f0:b9:c4:b4:
                    5f:a6:23:08:2d:75:87:2a:b5:23:c5:e0:fc:d9:8d:
                    e8:b3:c5:49:33:c1:7c:24:1f:c1:14:00:f1:8b:d5:
                    e0:84:df:ab:32:b6:19:fd:6c:c7:d2:76:14:7e:ad:
                    c6:66:ff:a1:77:c0:12:21:67:38:f6:7b:9b:cd:d6:
                    03:b7:fa:bb:6e:73:a7:37:f5:97:06:fe:16:23:15:
                    e5:c7:75:e9:7f:4d:b3:c8:17:3e:d8:e5:fd:85:df:
                    47:1c:08:88:0b:59:a2:ac:3e:e8:09:4a:5e:d1:bc:
                    40:c5:46:27:63:af:d9:f3:b4:b3:43:d5:e5:0e:40:
                    4e:ab:a3:b1:a7:96:0c:d5:ca:0d:3b:98:ad:5f:8a:
                    fa:44:f0:b9:3e:7e:13:91:7d:ae:34:60:32:48:ac:
                    f7:bd:1e:f2:31:7d:1e:60:e1:73:21:50:49:73:bb:
                    42:e2:4a:5e:cf:9b:9c:6c:40:8c:e0:93:58:f8:01:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:9D:29:18:A6:21:C4:52:54:47:13:77:9D:8F:B0:5E:E6:9D:9E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e36342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:6a:e0:d0:2a:c3:0d:43:e8:50:ef:dd:61:4f:15:56:af:
         be:2b:69:69:04:6f:4d:12:bb:d1:85:b9:98:52:7e:4d:b1:86:
         f6:a7:1b:a8:eb:99:b9:57:cf:ff:a6:e7:c9:db:6f:42:86:4a:
         d4:93:3c:39:65:35:82:72:04:21:b5:68:a7:07:0d:27:98:df:
         80:49:f7:82:d0:fa:d0:99:ed:a1:95:76:7b:a7:05:85:db:9f:
         3e:8a:63:d0:76:63:cb:4f:49:23:51:c0:4b:70:32:67:6f:62:
         1f:39:40:0d:85:a2:b5:4e:b9:54:58:60:99:86:7b:ee:3e:de:
         49:e2:ff:8e:cc:8c:6f:76:c8:84:e7:74:71:06:29:ca:fb:a7:
         32:6f:63:6b:0d:63:a8:74:30:e3:2c:81:44:5c:50:74:0f:df:
         ae:0f:d6:f5:af:4c:f1:6c:c1:07:e1:40:d9:59:04:c9:1a:d8:
         c9:be:c9:b7:d9:0d:f0:89:8f:89:4b:00:a1:d8:47:9b:41:43:
         d6:c7:54:32:83:d0:6a:7b:eb:0a:89:c4:3a:e1:a7:6f:e5:c5:
         49:e9:dc:d6:60:c1:ef:6d:69:da:73:5d:a0:46:9b:7a:a7:46:
         b4:33:d6:b0:46:e7:ac:f3:ee:b5:f9:3a:85:42:69:76:0f:73:
         b5:ad:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----