Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e31362e302f32322d3234203d3e203538383230.roa
File:                     3130332e3133362e31362e302f32322d3234203d3e203538383230.roa (raw, json)
Hash identifier:          rgfNfBK2+MZi69x6hfoHgIxlilvydAZHi2XlVPtGaLw=
Subject key identifier:   9F:D2:45:EB:10:1A:81:ED:B3:95:89:7E:6E:BE:83:37:57:0F:C9:93
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       100189AD0192203603E4A5CD1D84888B0140F44B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e31362e302f32322d3234203d3e203538383230.roa
Signing time:             Fri 12 Nov 2021 09:51:49 +0000
ROA not before:           Fri 12 Nov 2021 09:46:49 +0000
ROA not after:            Sat 12 Nov 2022 09:51:49 +0000
asID:                     58820
IP address blocks:        103.136.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:89:ad:01:92:20:36:03:e4:a5:cd:1d:84:88:8b:01:40:f4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 09:46:49 2021 GMT
            Not After : Nov 12 09:51:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:d5:fa:38:fe:94:ee:70:02:30:f0:9e:62:
                    75:3e:81:3f:df:95:f2:67:b2:6d:fe:9c:35:f3:03:
                    b5:7b:8d:5b:f4:13:48:47:e4:89:83:e1:c6:6e:af:
                    1f:5b:58:30:77:2c:06:bc:88:ac:a4:7d:d3:ee:9c:
                    7a:d8:32:a9:f6:02:61:6f:af:d2:e0:a5:72:2f:2d:
                    2f:58:cb:03:87:3b:3f:23:6d:44:d9:b1:6e:83:84:
                    ee:4a:9e:43:5b:9b:5a:eb:82:b1:fb:1f:2b:5a:1e:
                    39:94:e8:e0:d9:ab:93:05:06:86:c9:ff:78:51:64:
                    d2:50:35:8e:92:8e:f1:82:71:d6:00:51:38:6f:26:
                    c8:fc:1a:09:0a:05:02:fe:55:25:c2:68:78:cb:f3:
                    bf:01:bf:15:03:55:07:6d:85:33:76:ca:ed:0f:6c:
                    b7:85:63:ad:91:b9:95:86:98:81:6d:a9:e0:d4:7a:
                    60:c0:23:e7:43:08:6f:8e:a4:2b:db:29:bc:d6:84:
                    58:8c:64:04:9c:b0:82:14:8f:ef:ca:03:27:94:06:
                    45:a5:ad:22:29:69:80:e0:de:a6:4d:92:9e:1e:74:
                    51:ee:a1:15:db:e1:25:88:e4:3e:fe:bb:6c:84:b3:
                    31:85:99:3a:28:57:76:ac:4c:93:d1:2b:cc:e2:68:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:45:EB:10:1A:81:ED:B3:95:89:7E:6E:BE:83:37:57:0F:C9:93
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e31362e302f32322d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:29:e0:f1:b9:71:5a:4c:ff:be:29:f0:05:d4:6a:e3:2e:00:
         b2:0b:ad:46:97:47:c1:7d:3c:6c:d5:99:74:19:4b:d6:6b:62:
         d7:e8:6c:5d:b5:76:62:96:ed:71:4c:56:af:e2:85:bc:cb:28:
         3d:c7:aa:a7:54:3b:3b:b5:60:68:0c:1c:1b:4d:79:61:14:ee:
         a4:73:57:14:05:f9:4d:6e:d7:9b:54:c1:25:0a:40:38:be:83:
         07:2e:42:bf:a2:ab:7a:55:7b:87:7d:03:c7:b6:aa:6a:d0:93:
         ee:2c:b5:a2:57:92:4c:36:6d:6f:9d:b4:f5:62:2d:d3:c1:97:
         ca:7b:28:1b:3f:04:7a:df:ea:ac:c3:29:b7:f0:b3:c2:c7:00:
         8d:9d:37:65:d3:65:6c:c2:55:cf:ae:ab:1b:ff:c2:9a:4b:53:
         27:b8:cf:9d:13:be:5a:e9:e4:af:e5:bc:e5:12:25:1b:ba:43:
         71:bb:3c:fa:0a:1d:6a:04:b2:d4:a1:d2:ae:36:32:e4:19:48:
         48:ff:92:72:c5:6e:33:08:79:dc:33:2d:c5:a4:86:f5:50:b4:
         36:ca:8c:d5:23:b6:23:94:25:31:ac:f2:c3:49:3d:ec:4f:27:
         3c:e4:ec:82:13:45:5d:ad:63:7e:f6:db:c3:41:ac:02:50:8a:
         3b:af:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----