Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34382e302f32332d3234203d3e20313336313139.roa
File:                     3130332e3133382e34382e302f32332d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          tzsy2kT3Dw4LRQnb/+m3CdPBHARt+GImLzsdu4phF5U=
Subject key identifier:   8C:88:BA:9B:C4:A7:53:E8:61:9A:1F:F3:97:95:01:18:01:04:86:B0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       144118FEF912E8F81E5BF9C164FA047379C3B0C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34382e302f32332d3234203d3e20313336313139.roa
Signing time:             Sat 13 Nov 2021 07:00:00 +0000
ROA not before:           Sat 13 Nov 2021 06:55:00 +0000
ROA not after:            Sun 13 Nov 2022 07:00:00 +0000
asID:                     136119
IP address blocks:        103.138.48.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:18:fe:f9:12:e8:f8:1e:5b:f9:c1:64:fa:04:73:79:c3:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 13 06:55:00 2021 GMT
            Not After : Nov 13 07:00:00 2022 GMT
        Subject: CN=3082010A0282010100ABD84BCE76EA24E47355DC93B3CA88FBF94296315F43BEB47A6AE67C6B37469B2AE2C500CD8CCCD014E87164D1400B05DE9C407443FE3CA9872788A058982F430D797FC6A314240572D58928AC678199953B012264EECE0EE74298667B6CD1669423027C27BE114C39825677B2AE15613AB211D3DA63D1D52BC95C5840EBF59301DE38B2E24DC1521C491DC38C2372B099D7CCBD59C6AA4BA773FCE4F026EA086A36DD0407B0D73654FBCB5E880A4DC169C09F2D53C176612F31376573D7FC8CE138106A600902755F4EF5D2A2A4F5D146899410506494A257ED171FF00343F032152C25314869001C2DD204DE83CFB69C3C0E970BDD4D0B755F107281254D070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:4b:ce:76:ea:24:e4:73:55:dc:93:b3:ca:
                    88:fb:f9:42:96:31:5f:43:be:b4:7a:6a:e6:7c:6b:
                    37:46:9b:2a:e2:c5:00:cd:8c:cc:d0:14:e8:71:64:
                    d1:40:0b:05:de:9c:40:74:43:fe:3c:a9:87:27:88:
                    a0:58:98:2f:43:0d:79:7f:c6:a3:14:24:05:72:d5:
                    89:28:ac:67:81:99:95:3b:01:22:64:ee:ce:0e:e7:
                    42:98:66:7b:6c:d1:66:94:23:02:7c:27:be:11:4c:
                    39:82:56:77:b2:ae:15:61:3a:b2:11:d3:da:63:d1:
                    d5:2b:c9:5c:58:40:eb:f5:93:01:de:38:b2:e2:4d:
                    c1:52:1c:49:1d:c3:8c:23:72:b0:99:d7:cc:bd:59:
                    c6:aa:4b:a7:73:fc:e4:f0:26:ea:08:6a:36:dd:04:
                    07:b0:d7:36:54:fb:cb:5e:88:0a:4d:c1:69:c0:9f:
                    2d:53:c1:76:61:2f:31:37:65:73:d7:fc:8c:e1:38:
                    10:6a:60:09:02:75:5f:4e:f5:d2:a2:a4:f5:d1:46:
                    89:94:10:50:64:94:a2:57:ed:17:1f:f0:03:43:f0:
                    32:15:2c:25:31:48:69:00:1c:2d:d2:04:de:83:cf:
                    b6:9c:3c:0e:97:0b:dd:4d:0b:75:5f:10:72:81:25:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:88:BA:9B:C4:A7:53:E8:61:9A:1F:F3:97:95:01:18:01:04:86:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34382e302f32332d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:cf:28:be:35:57:31:8a:f2:b8:5b:e6:59:db:71:cc:81:ee:
         d9:70:10:7d:0a:09:d0:c1:e5:74:96:9f:a8:e6:63:6f:5c:70:
         dc:64:08:ec:a2:18:6a:9b:48:fd:7c:a3:ee:61:c8:f0:2d:bd:
         1f:ce:06:9b:2e:49:89:0d:85:24:64:03:dd:cd:be:89:94:cb:
         63:c6:cf:9c:e2:93:be:82:cb:aa:91:1f:c2:1a:64:c2:35:87:
         71:ed:78:fd:43:cd:ad:8d:21:35:3f:a2:81:02:4d:7f:52:5c:
         7d:2b:c8:4d:e4:3b:a9:6d:64:78:7a:cf:3f:12:6d:3c:d5:6f:
         13:f1:50:08:a4:63:e7:eb:97:bb:10:ac:19:6b:6c:33:5b:46:
         f3:4d:b3:87:93:40:9b:d2:5e:68:9e:e3:f5:c2:e8:d0:56:12:
         08:9f:66:07:85:cc:40:b4:6f:50:71:0d:30:59:14:fe:42:e8:
         c3:4b:ba:64:34:c0:54:73:13:41:5b:04:b9:9e:1c:44:62:ea:
         f0:5b:c9:15:44:ce:86:84:06:ce:85:6a:ba:56:b9:67:ba:b8:
         56:af:90:81:d1:32:4e:aa:2c:a6:e2:e1:fb:2a:b7:61:07:8e:
         39:7d:0b:12:64:d6:2f:35:0e:1c:4e:69:95:01:d1:13:f3:97:
         45:0b:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----