Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33322e302f32332d3234203d3e203535363939.roa
File:                     3130332e3133392e33322e302f32332d3234203d3e203535363939.roa (raw, json)
Hash identifier:          paw9wZvaEbxSLEZ/bkdbfU9DiMWydLRue8a0+QmMXNk=
Subject key identifier:   41:7E:6B:77:A6:6F:6D:D1:E7:3A:28:9E:1E:A3:3B:AE:AE:D4:26:CA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12EF975C0E64E2A5887564FC3217D3E49DC1A12C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33322e302f32332d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:01 +0000
ROA not before:           Wed 27 Oct 2021 08:55:01 +0000
ROA not after:            Thu 27 Oct 2022 09:00:01 +0000
asID:                     55699
IP address blocks:        103.139.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:97:5c:0e:64:e2:a5:88:75:64:fc:32:17:d3:e4:9d:c1:a1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:01 2021 GMT
            Not After : Oct 27 09:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:a4:c9:26:8a:c7:1e:2d:6c:72:44:02:24:
                    fc:df:eb:99:3a:61:4c:67:e6:47:35:59:30:a2:58:
                    e0:bf:2a:bb:4c:11:de:f0:4e:6c:f3:62:2c:dc:bf:
                    d5:d4:b4:cb:15:67:5f:63:f8:1d:b1:17:4b:3c:2d:
                    c8:13:b4:99:6f:59:92:a7:d6:a6:87:c1:3c:18:e7:
                    ec:b9:72:18:7a:73:f0:cc:1f:8b:dd:54:f8:5e:87:
                    0b:4c:13:76:92:b5:5b:c5:7c:7f:4e:11:54:7b:f4:
                    fb:53:a9:cb:7e:a4:f0:b4:cd:94:10:03:49:d8:ec:
                    30:7a:81:52:4f:01:00:85:90:0f:49:5b:96:cf:10:
                    9d:2d:e2:38:34:5e:b3:59:01:66:3a:d1:65:f1:54:
                    07:5c:25:14:93:50:b0:36:fe:d8:d8:41:19:a8:a9:
                    35:d2:31:84:c7:2c:cd:a4:32:68:0a:be:a8:07:cd:
                    28:22:ec:00:f7:1f:e8:40:97:af:3c:2b:6a:f0:8b:
                    fb:c7:8f:46:d7:d2:6d:7e:a0:6b:96:a5:aa:14:1a:
                    62:08:a3:c6:ad:ea:e2:24:85:ad:1a:ef:3c:cc:17:
                    ac:6c:85:bf:e9:b3:c2:75:9d:e4:50:e2:58:ff:fb:
                    e4:b3:3d:e6:74:30:fe:91:77:0f:7a:28:85:06:0f:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:6B:77:A6:6F:6D:D1:E7:3A:28:9E:1E:A3:3B:AE:AE:D4:26:CA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33322e302f32332d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:49:04:c4:53:26:15:23:43:92:d3:a0:fb:b8:38:bf:4a:23:
         1c:86:b1:97:9b:5d:de:81:c3:6e:03:d5:05:a0:cb:5b:d4:6e:
         39:28:ba:be:10:3b:f7:4f:b6:4d:ba:74:5e:75:ea:5c:b9:2b:
         86:a5:ae:eb:55:e8:48:ec:0a:36:c8:93:20:0f:08:cd:7d:b8:
         51:17:c7:7d:dd:aa:4b:d8:4d:88:27:96:47:44:c7:28:37:a3:
         13:ca:bd:a4:cd:c4:24:29:98:16:e2:5f:84:ff:dd:87:00:52:
         38:2e:aa:4e:ee:19:af:de:bf:b6:01:06:a5:73:48:09:2a:24:
         c2:33:73:03:6f:4f:a7:7c:38:f7:6f:43:a0:85:90:88:dc:d2:
         5b:f4:7d:65:76:b6:fc:3d:f6:82:7e:8c:cd:8d:cf:07:69:24:
         e9:88:e2:56:22:89:2f:ff:84:6b:24:a3:a2:4d:da:32:82:cd:
         5e:74:92:d8:94:1a:86:66:9b:6f:e7:b2:96:cc:d0:eb:bc:14:
         9a:1f:dc:ec:81:c0:bf:47:d2:48:06:7a:81:f8:d6:9e:4f:02:
         84:2a:2e:46:89:3b:09:b3:43:72:3f:45:fc:70:c4:7a:a6:01:
         6c:2f:e0:6e:db:5f:2b:d0:a8:d3:8a:aa:9a:7f:3a:ab:98:a9:
         ec:1e:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----