Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3134362e302f32332d3234203d3e2030.roa
File:                     3130332e3133372e3134362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          xfAGwaOs3EKU2jbOFa4CRh0lqFrGyGCAVfxbzqS4J9I=
Subject key identifier:   7C:F7:48:41:74:2F:D4:05:28:AC:08:5E:9C:6A:CD:F4:08:62:34:01
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4120212C8A5316DA73C6BBFC25D9AEC27687A0AA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3134362e302f32332d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:52:30 +0000
ROA not before:           Mon 31 Jan 2022 03:47:30 +0000
ROA not after:            Tue 31 Jan 2023 03:52:30 +0000
asID:                     0
IP address blocks:        103.137.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:21:2c:8a:53:16:da:73:c6:bb:fc:25:d9:ae:c2:76:87:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:47:30 2022 GMT
            Not After : Jan 31 03:52:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:7e:ea:39:6d:2c:48:26:5f:09:ef:41:e3:
                    84:08:5b:6b:82:7c:16:27:a2:41:0d:92:4c:35:28:
                    2a:20:ec:be:25:77:13:15:53:c4:24:d6:18:6e:fa:
                    58:80:27:fe:f7:f8:ae:f4:33:68:06:1f:0e:eb:3d:
                    ae:78:3f:7f:8d:8e:37:fd:0c:4a:ef:a9:1c:e0:da:
                    9b:ca:20:cf:39:5c:e2:b4:1a:42:dd:0c:2e:c2:89:
                    7e:47:8e:88:7d:a7:a8:fe:e2:2a:f5:f1:4e:88:1c:
                    40:ea:a3:5c:0e:4d:bf:31:3d:8b:59:17:b8:d2:0f:
                    d7:71:0b:98:56:33:67:89:d5:a6:b5:1b:24:63:90:
                    7e:1d:b5:01:aa:52:b9:1b:af:87:75:ae:18:e1:0b:
                    30:7f:8e:31:40:45:1c:a6:13:84:c8:39:e8:39:47:
                    88:4e:c5:79:cc:c7:eb:76:4b:5b:22:2d:8a:48:25:
                    65:bd:9f:bd:cc:ee:62:07:8c:fe:4c:f6:ec:94:d2:
                    fa:39:73:c5:4c:93:bb:b8:e2:5f:88:0d:72:6a:c4:
                    21:65:01:9b:f6:c0:6e:6d:02:d7:fc:64:78:a8:ca:
                    37:e1:8d:16:3e:c7:40:24:56:84:da:1d:b0:4c:bb:
                    6e:f2:23:c4:e8:52:5b:9b:6f:17:a4:5b:f0:b5:03:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:48:41:74:2F:D4:05:28:AC:08:5E:9C:6A:CD:F4:08:62:34:01
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133372e3134362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:cc:89:8b:eb:75:0e:76:1c:46:f5:cf:a2:00:ef:92:ba:
         90:3d:8f:e3:d1:60:27:64:ae:b9:1f:30:f9:7c:13:1e:51:4b:
         ab:c1:eb:c9:86:3e:3f:9b:f6:8d:84:4e:95:ba:1a:49:a3:91:
         db:77:38:3b:a9:4b:80:4c:ce:58:1c:a2:07:90:ae:2f:49:97:
         08:a3:d2:bb:b2:7e:e4:01:28:96:b7:36:0d:e6:78:5c:fc:ed:
         0b:e1:b7:b3:35:bc:27:e9:ec:9a:c8:7e:59:18:22:27:fa:d0:
         b5:f5:20:b1:da:0b:e3:02:99:95:0c:98:79:05:b1:a0:9f:5b:
         39:d6:cc:17:0b:fa:eb:a0:13:a2:37:b1:22:2e:b5:cb:e6:20:
         1d:5e:39:d9:85:7a:82:8c:3e:26:ef:d2:a7:97:6b:90:49:27:
         53:58:d7:06:84:0b:ef:c3:0d:c8:a7:83:47:2c:ca:fa:fa:fa:
         a1:a1:2e:8c:79:dd:04:d7:7b:b9:d1:32:b3:02:80:4a:58:0f:
         43:7a:7c:3a:bf:0c:ad:30:c8:9d:87:d5:82:b5:06:b1:25:e6:
         2a:78:9e:6f:01:9a:67:c4:4a:dd:63:1e:86:fe:8b:54:8d:97:
         bc:87:0c:88:43:81:bb:7a:74:57:0a:f2:5d:0a:2b:43:c9:0d:
         73:87:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----