Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e39322e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132392e39322e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          5o4MoBvY70Z+tpVygy78hWSnW0GYs4fwF2PapKdLNgc=
Subject key identifier:   6B:59:9C:B6:5D:BB:12:DE:5C:AB:74:5A:CE:30:A1:22:10:5A:D8:8C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       42F02C028AD50B27C7E6F417D24B82A5E4E809EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e39322e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:02 +0000
ROA not before:           Wed 10 Nov 2021 07:55:02 +0000
ROA not after:            Thu 10 Nov 2022 08:00:02 +0000
asID:                     63859
IP address blocks:        103.129.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f0:2c:02:8a:d5:0b:27:c7:e6:f4:17:d2:4b:82:a5:e4:e8:09:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:02 2021 GMT
            Not After : Nov 10 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:99:43:8d:9f:3b:f2:9c:34:e9:39:d0:21:
                    47:52:5e:1c:da:e3:0e:8f:ac:a2:bd:94:f0:38:7d:
                    fe:98:b7:bd:72:02:b6:c3:7c:a5:1c:78:d5:5a:aa:
                    2a:59:9d:a1:fc:55:ee:d6:b6:26:00:54:0b:36:11:
                    50:44:23:0d:9c:b9:68:8d:e0:57:4b:7b:c8:0e:c6:
                    f7:9a:e4:71:cb:8e:b3:7e:69:3c:5f:2d:17:8e:fa:
                    45:3d:5e:bf:9e:2a:97:47:a7:f9:cc:55:6e:12:16:
                    5a:43:e0:d8:ab:32:a2:0e:6b:b7:cc:42:3d:93:e1:
                    05:3d:31:cd:a9:5c:ee:c7:60:d9:c4:2c:e7:3c:b3:
                    bc:fb:44:cb:aa:90:3a:c3:93:b2:32:4b:70:eb:6a:
                    3f:2a:2e:8d:63:d3:67:ec:59:48:b5:72:86:fd:17:
                    14:c4:c0:71:8f:34:1f:04:4d:77:d4:58:de:3a:0f:
                    e8:ad:4e:07:ae:bd:a0:64:73:fe:42:c9:be:fb:1e:
                    49:eb:91:eb:b7:ba:b3:71:2d:94:f4:09:4b:ac:a8:
                    78:31:e3:c9:8a:60:b6:17:e9:60:13:c0:b1:cb:46:
                    56:40:a7:4c:b5:c5:40:8f:2c:ba:3a:e0:34:3b:34:
                    a4:c5:c4:54:96:c4:12:5f:84:72:33:91:5e:09:d9:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:9C:B6:5D:BB:12:DE:5C:AB:74:5A:CE:30:A1:22:10:5A:D8:8C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132392e39322e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:58:b4:a1:e4:8d:32:ca:df:77:e4:63:a0:c9:4e:ce:78:f1:
         fb:15:bf:eb:42:20:b6:cc:57:38:fb:bc:5a:86:dc:b7:85:ea:
         05:b7:18:d3:6f:94:59:da:8b:8e:a9:a8:44:12:c6:56:c2:be:
         11:c4:af:a3:6a:35:b1:0b:97:c4:b3:92:06:15:a6:7e:88:b5:
         f5:6d:7b:c0:5b:9a:59:a3:6f:34:f2:bb:3e:68:a4:f9:21:cd:
         ea:5a:7d:8c:f6:84:a3:07:37:4e:09:16:24:80:ad:8d:3c:7b:
         70:87:8e:10:cd:18:b3:af:0b:7d:ad:22:39:59:bd:9d:9f:37:
         5d:74:e1:89:38:f4:b2:f0:c4:e8:ed:3c:4e:55:31:9e:d8:dc:
         80:0b:9e:db:eb:e4:77:d3:35:49:b4:9b:ec:cb:1e:5f:8c:10:
         51:fc:6b:c2:73:58:ad:19:49:23:6f:3d:e6:06:0b:2e:fa:4f:
         b6:2e:4a:28:15:f7:9e:7d:df:da:3c:3b:27:9d:d7:60:31:3a:
         3a:3c:42:4f:d2:c9:0b:a3:3f:b3:cd:fc:24:23:68:b7:d5:12:
         bf:aa:a7:89:97:b4:9d:79:d2:5e:bb:76:39:12:84:93:9f:9a:
         7d:83:fa:54:ee:d1:33:53:02:4d:ee:2a:0c:1e:cb:26:8d:db:
         68:8a:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----