Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3231322e302f32332d3234203d3e203538333639.roa
File:                     3130332e3134342e3231322e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          rxYRuNFJCqeb9dbpdwRZ6II0XDeQGB3mXXJIbNhYWhM=
Subject key identifier:   BD:7D:C5:7C:0B:9D:F4:89:61:22:7C:0D:07:B5:52:2C:27:EF:EE:4A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       707CF2FFB55B702FEEE4759C222E962E565BDC84
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3231322e302f32332d3234203d3e203538333639.roa
Signing time:             Wed 13 Oct 2021 04:00:01 +0000
ROA not before:           Wed 13 Oct 2021 03:55:01 +0000
ROA not after:            Thu 13 Oct 2022 04:00:01 +0000
asID:                     58369
IP address blocks:        103.144.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:f2:ff:b5:5b:70:2f:ee:e4:75:9c:22:2e:96:2e:56:5b:dc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 13 03:55:01 2021 GMT
            Not After : Oct 13 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:6b:48:b4:cf:bc:22:cc:e5:9d:cc:92:57:
                    ba:83:20:3c:d9:3f:15:3d:70:59:88:de:c0:43:9c:
                    74:de:34:29:6a:48:ed:6f:e0:69:ca:ef:d2:1f:7a:
                    88:91:f9:8c:17:b9:4a:93:5a:11:61:49:19:f7:22:
                    a1:9b:e0:f2:0d:3a:c5:ce:2b:87:8f:79:c2:de:87:
                    90:9f:0c:c0:a3:cb:36:b3:41:1b:9b:aa:ce:e1:d2:
                    38:48:52:0f:e3:25:eb:8e:a9:58:b4:75:c8:72:37:
                    45:20:7b:11:60:a0:10:9b:b1:4e:53:eb:fb:4d:6d:
                    a2:64:b1:96:a8:be:2f:be:40:13:10:9f:22:a0:39:
                    7c:9c:d0:8a:be:7d:af:79:e2:e8:a8:76:ab:6a:5a:
                    d3:a3:13:a0:d0:3b:fe:42:e0:98:df:d5:ed:0b:0f:
                    69:95:b8:b6:a6:70:0d:1e:a0:5a:53:7e:12:0e:30:
                    de:08:31:f7:7a:e8:a5:a3:5b:c6:34:c9:8d:ec:fe:
                    c5:a7:cb:cb:73:25:38:3e:8e:0a:0a:03:fe:7d:7c:
                    6c:62:4f:50:25:e1:32:c3:fd:f9:0d:d9:d8:c2:77:
                    ee:4d:b1:7d:82:66:1f:5d:40:25:bd:a2:21:ac:20:
                    ff:af:97:5e:b5:c1:5a:0b:79:88:42:72:7b:ac:44:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:C5:7C:0B:9D:F4:89:61:22:7C:0D:07:B5:52:2C:27:EF:EE:4A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3231322e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:4e:40:91:d3:32:4e:96:b0:46:43:0c:70:30:84:a3:28:
         0d:ed:57:f3:e7:95:f5:9c:d0:ab:75:ca:d4:81:e7:6e:d7:9f:
         0c:a0:b7:6d:17:68:1d:4f:2a:9c:3d:69:48:26:b6:b8:36:73:
         a5:e3:80:7b:43:f6:e8:78:51:5b:8b:d8:3f:7f:1f:84:b0:8e:
         fd:46:71:e2:23:4e:6b:46:a9:2c:0b:33:1c:ec:24:bf:c9:ff:
         3f:4e:5c:eb:0e:54:e0:2b:df:a8:5c:f7:e0:9a:59:49:f9:4a:
         2d:86:8f:1c:31:ef:f8:68:f7:e0:16:35:b7:bc:9b:bd:0f:b1:
         1c:07:1f:f8:56:15:95:dc:79:f9:e6:fc:88:89:f3:27:ca:c0:
         ba:c3:dd:5d:90:85:85:fa:a2:13:00:02:cf:da:9b:54:35:b3:
         54:9b:05:54:70:97:3c:21:c3:5f:07:20:dd:7a:9d:97:77:9a:
         71:ad:36:3f:20:f5:0e:98:94:c2:b2:a8:f3:f4:46:4a:45:37:
         ef:3c:d0:0d:ef:ba:8d:18:85:c0:1f:71:91:78:16:8f:42:86:
         33:9a:af:41:fd:7b:50:13:d8:5e:c6:86:d2:e1:8b:87:96:1d:
         f9:8d:3b:b4:96:3f:0a:7c:80:16:40:35:2f:b3:44:34:0f:fa:
         3d:b2:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----