Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3139302e302f32332d3234203d3e20313339343330.roa
File:                     3130332e3134342e3139302e302f32332d3234203d3e20313339343330.roa (raw, json)
Hash identifier:          5710Ryre4gLYhNrbeASuV4D9gdM3ssgNnXw3LdZv3hQ=
Subject key identifier:   54:00:C5:E7:86:A3:F6:E3:5B:31:E9:0F:25:D2:97:4B:34:4E:4C:24
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3BCC9E877AF855706684C9DE458D906452033A5F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3139302e302f32332d3234203d3e20313339343330.roa
Signing time:             Fri 15 Oct 2021 04:00:01 +0000
ROA not before:           Fri 15 Oct 2021 03:55:01 +0000
ROA not after:            Sat 15 Oct 2022 04:00:01 +0000
asID:                     139430
IP address blocks:        103.144.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cc:9e:87:7a:f8:55:70:66:84:c9:de:45:8d:90:64:52:03:3a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 15 03:55:01 2021 GMT
            Not After : Oct 15 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7e:54:f7:75:68:15:67:8a:e2:7f:82:b7:f8:
                    34:67:91:14:28:4a:37:d6:ad:85:61:a6:1e:5b:8d:
                    0d:ad:2b:0f:ba:e0:8e:90:d7:c8:9b:45:32:19:a4:
                    c2:9a:7a:4e:33:09:e5:77:93:aa:93:cc:5c:a7:8c:
                    a6:c4:b9:3c:24:c1:ed:dc:7d:45:58:ef:35:1b:72:
                    3e:d2:b7:f1:49:f8:3b:c2:2e:74:b6:1c:bf:36:43:
                    c1:41:4f:14:40:26:cd:6d:43:24:b5:5a:28:98:b7:
                    ff:dc:cf:f7:cd:99:18:ed:1b:78:61:46:14:fd:03:
                    cd:5e:29:b8:90:79:90:0a:c6:f2:57:f5:3a:73:21:
                    93:74:73:8f:46:0b:9e:be:b0:43:87:36:61:fd:f9:
                    d4:de:87:fa:3d:bf:c3:93:b7:d8:1e:4e:a6:e5:88:
                    8c:25:61:47:bf:be:96:12:ba:dc:0e:2d:13:94:7e:
                    2c:58:b0:be:8d:4a:cc:4a:97:10:9b:d6:9a:07:c0:
                    8c:7f:39:a8:48:8e:1e:30:02:ab:80:54:fc:cf:3f:
                    b3:0d:64:8a:2f:cc:14:ef:54:cf:77:14:b0:01:a5:
                    8f:75:fb:4b:dc:63:75:a3:dd:e0:70:4e:33:50:66:
                    7c:e7:0c:36:27:42:ef:06:76:44:fe:b4:b8:5d:e3:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:00:C5:E7:86:A3:F6:E3:5B:31:E9:0F:25:D2:97:4B:34:4E:4C:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3139302e302f32332d3234203d3e20313339343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:3c:df:28:16:99:64:b1:46:0f:76:18:7e:33:3f:a0:f5:
         d3:ad:b7:71:d9:1a:b3:8c:cc:1a:b0:c1:37:f7:29:cd:bd:01:
         e5:c3:10:12:bc:88:f3:57:e2:ea:54:3b:fc:47:14:df:70:16:
         41:dc:5c:a1:bd:3a:bb:95:c0:cc:6b:ca:ee:86:f7:ec:22:c6:
         40:42:40:8b:8c:6d:44:1d:97:af:fc:e1:46:3a:50:b6:6c:aa:
         26:51:06:79:8a:91:a6:8c:ee:2a:95:60:94:89:ae:2e:bc:a4:
         68:fa:58:46:9d:eb:5b:b9:e5:bb:30:f3:31:b5:46:98:2b:c0:
         47:0f:ef:01:23:fe:e0:da:8a:89:f0:23:fe:8a:7e:c9:6a:92:
         04:77:dd:2b:c4:be:3a:0b:16:6c:da:b2:e9:f8:de:a5:7c:de:
         ec:5a:98:5b:44:ee:92:06:67:fb:97:65:a6:d2:7a:fe:30:47:
         75:cb:73:9b:18:08:c6:c6:c2:fa:98:86:97:c7:be:70:6f:b1:
         3c:12:c1:ed:9c:7b:70:77:8e:02:5c:94:1b:bd:a3:ae:6f:0f:
         ae:92:25:22:72:e3:1c:7f:e4:30:a3:49:9a:69:a7:05:68:58:
         3e:6a:61:72:44:94:6b:ed:b3:e2:a2:0f:b4:91:ae:0d:57:c3:
         4a:36:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----