Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3130382e302f32322d3234203d3e2030.roa
File:                     3130332e3133312e3130382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          4hVJ8Xz9w7jsYHuJA+xUJd/7tT5BqoHl8/AhnOEF3/0=
Subject key identifier:   CC:E5:D0:A3:84:0C:03:01:D1:5B:F7:47:6F:C0:54:5C:3F:2B:05:D7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18997198E0712AE0E9F92E3D241A7D8566DE6420
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3130382e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:23:14 +0000
ROA not before:           Wed 02 Feb 2022 06:18:14 +0000
ROA not after:            Thu 02 Feb 2023 06:23:14 +0000
asID:                     0
IP address blocks:        103.131.108.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:99:71:98:e0:71:2a:e0:e9:f9:2e:3d:24:1a:7d:85:66:de:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:18:14 2022 GMT
            Not After : Feb  2 06:23:14 2023 GMT
        Subject: CN=3082010A0282010100EBBAA6D8349AF0CE121FAD365EEFF7ECA77E8AFB04DA5E46DA07683936EFA3573E0C777677E1665B82DD780E0F5DCF09ADED20AD481ED15336408960E38F910732B816D2461B96D74480FCD4242E453F46AEE96957CED876FAF4FB11AB031B8796AB68856099654F575DED2EBCAF67412F214B75870BDE06757B19C0A4BCAE167A83DD989EFDCE95F6BADEE366464D21D7BD15BA67D4E810A906F6D04B864F53A484FBB543B3F13CDCAD8C10122D7BB13976B977AF2FED55FFC3205AC7AF6353D4AEFBEC68F864C20F7FD05418567D9762A7717A611C7ABFE4F491DE319BD76BBC253816063E25A8953D5F9C3D11FE549A99C9257AE3B0455D30BFF117160B190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:a6:d8:34:9a:f0:ce:12:1f:ad:36:5e:ef:
                    f7:ec:a7:7e:8a:fb:04:da:5e:46:da:07:68:39:36:
                    ef:a3:57:3e:0c:77:76:77:e1:66:5b:82:dd:78:0e:
                    0f:5d:cf:09:ad:ed:20:ad:48:1e:d1:53:36:40:89:
                    60:e3:8f:91:07:32:b8:16:d2:46:1b:96:d7:44:80:
                    fc:d4:24:2e:45:3f:46:ae:e9:69:57:ce:d8:76:fa:
                    f4:fb:11:ab:03:1b:87:96:ab:68:85:60:99:65:4f:
                    57:5d:ed:2e:bc:af:67:41:2f:21:4b:75:87:0b:de:
                    06:75:7b:19:c0:a4:bc:ae:16:7a:83:dd:98:9e:fd:
                    ce:95:f6:ba:de:e3:66:46:4d:21:d7:bd:15:ba:67:
                    d4:e8:10:a9:06:f6:d0:4b:86:4f:53:a4:84:fb:b5:
                    43:b3:f1:3c:dc:ad:8c:10:12:2d:7b:b1:39:76:b9:
                    77:af:2f:ed:55:ff:c3:20:5a:c7:af:63:53:d4:ae:
                    fb:ec:68:f8:64:c2:0f:7f:d0:54:18:56:7d:97:62:
                    a7:71:7a:61:1c:7a:bf:e4:f4:91:de:31:9b:d7:6b:
                    bc:25:38:16:06:3e:25:a8:95:3d:5f:9c:3d:11:fe:
                    54:9a:99:c9:25:7a:e3:b0:45:5d:30:bf:f1:17:16:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E5:D0:A3:84:0C:03:01:D1:5B:F7:47:6F:C0:54:5C:3F:2B:05:D7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133312e3130382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:a2:44:c8:41:2c:02:4a:09:93:04:e2:1d:8c:fa:d2:fc:
         a4:01:2c:42:25:b5:15:f0:24:b1:8a:4d:96:62:f3:23:ad:c3:
         a5:4b:fd:e6:e5:16:31:d8:f4:d3:9f:2b:f8:6e:32:ad:d9:39:
         c4:47:5e:7f:f6:27:d7:68:41:0f:37:ee:7a:cc:07:eb:7b:0d:
         63:29:9b:82:c5:cb:33:2d:f9:79:b4:8c:28:77:2d:34:79:35:
         f2:3f:62:0b:d5:93:77:bb:c0:5a:2a:00:c0:81:30:dc:0b:cc:
         a5:ec:28:73:f2:3d:5a:05:39:11:d6:fb:69:9a:10:33:ea:e3:
         a2:a7:63:bc:24:2f:2d:05:ee:8c:5c:a0:75:ff:19:32:1a:1b:
         d0:04:03:44:9a:27:e5:48:0d:7a:9f:da:2b:b6:75:1e:89:ad:
         dc:63:e5:ef:9c:48:db:2d:3e:71:d2:30:0e:67:7f:0c:2a:6c:
         a7:80:5b:45:75:cf:5b:97:10:35:d0:66:c1:e5:c0:9e:69:7c:
         c2:9d:0b:46:31:36:52:78:55:bf:b1:f3:42:fe:37:87:8c:d3:
         b4:c0:f9:c5:5d:09:28:76:0e:05:2d:26:3d:2b:a3:4d:db:cd:
         8f:a0:5b:ff:61:5b:df:47:55:30:dc:dc:72:c1:00:81:d2:89:
         74:0e:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----