Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3139392e302f32342d3234203d3e20313339393432.roa
File:                     3130332e3134362e3139392e302f32342d3234203d3e20313339393432.roa (raw, json)
Hash identifier:          vqmQNIMGUg+7mvKe/r9FmM+3GV6KamwUxRbcm4K6ijc=
Subject key identifier:   13:79:A2:DE:CB:FF:49:38:0E:DE:DB:BA:DD:2E:AB:90:BA:FE:8C:6C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3A6EF0CCD263D0FED59433D1CD1FF5E54DE93853
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3139392e302f32342d3234203d3e20313339393432.roa
Signing time:             Wed 24 Nov 2021 04:35:33 +0000
ROA not before:           Wed 24 Nov 2021 04:30:33 +0000
ROA not after:            Thu 24 Nov 2022 04:35:33 +0000
asID:                     139942
IP address blocks:        103.146.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6e:f0:cc:d2:63:d0:fe:d5:94:33:d1:cd:1f:f5:e5:4d:e9:38:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 24 04:30:33 2021 GMT
            Not After : Nov 24 04:35:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:11:d2:ec:f4:d3:05:a3:9f:b5:a8:29:ab:
                    82:c4:cf:8d:55:72:26:1b:98:04:40:4e:27:cb:98:
                    73:b7:3e:a5:8f:ee:e5:64:7b:4f:86:9e:42:7f:93:
                    d5:cc:65:d2:a0:2c:19:f8:2d:d7:31:d0:7f:64:e8:
                    e3:86:98:47:a4:c7:7d:66:9c:96:a9:1f:09:0d:4c:
                    3f:32:0f:20:b6:fa:1d:cf:59:8c:44:1b:f9:60:00:
                    46:29:48:ea:16:bb:32:98:c0:3a:4c:48:e1:03:1d:
                    dc:4e:76:0a:76:0d:1c:6e:d4:35:0b:0a:f3:bd:2e:
                    b4:1b:14:d1:11:e3:10:63:9d:57:8c:dc:7f:21:0c:
                    6d:de:f5:a5:48:ac:09:24:fe:82:c6:0e:50:ab:69:
                    05:60:48:83:40:71:65:da:17:4c:38:37:d3:bb:06:
                    38:e9:76:2b:b1:c8:3e:1f:36:02:02:e3:d0:a1:f5:
                    c5:82:f9:b4:46:67:3e:61:e2:f8:8a:64:05:2f:8e:
                    2d:0e:33:c7:69:3e:ae:72:59:02:2a:83:b2:5c:f1:
                    63:64:c7:75:d9:7f:42:f5:d6:37:6f:db:85:a6:ca:
                    69:90:15:31:4a:5c:5c:7c:05:72:8f:e6:ed:27:95:
                    62:7c:f0:4d:95:1f:49:01:d3:3e:bd:a1:e8:1e:a3:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:A2:DE:CB:FF:49:38:0E:DE:DB:BA:DD:2E:AB:90:BA:FE:8C:6C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3139392e302f32342d3234203d3e20313339393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:ab:a1:6b:1d:87:bd:27:f7:75:b8:f1:39:4d:31:d3:e0:
         38:ff:93:7e:ff:50:2d:ba:d3:a3:04:4d:21:f9:d3:04:de:87:
         b4:2e:b5:80:16:09:79:b8:dc:37:a3:26:e6:34:40:d8:c2:b6:
         8f:6e:c6:4a:5b:4f:6a:55:7f:86:0a:b2:cd:a1:a6:0a:78:b9:
         3d:f1:5b:ef:c1:93:13:3a:92:56:37:ab:0c:d5:82:85:49:d5:
         4b:e2:39:e4:13:a4:f2:18:28:51:5f:b7:7c:83:70:02:e7:b8:
         b7:c9:87:cd:0e:0f:39:77:c6:da:81:2c:ca:fe:bf:a0:af:e5:
         fc:d5:2f:e0:03:7f:73:ac:15:95:c1:c7:81:f4:14:55:f4:b7:
         ca:89:f9:ee:6e:c3:d3:63:05:35:d5:39:26:c0:12:44:26:9d:
         8d:84:b3:b0:53:2f:77:c2:37:1b:07:81:aa:8b:ee:ec:29:36:
         f1:78:af:5f:5b:69:2d:f3:eb:4c:f9:30:0b:8f:7b:c9:15:07:
         83:fe:a0:78:8b:1c:6e:9b:3e:08:f2:bf:0d:41:24:e3:d4:73:
         75:f7:70:bb:a4:8d:5f:cc:b8:5c:ff:f0:54:ef:45:7d:98:c4:
         ec:ce:c1:3f:6b:f5:4d:5f:3a:f7:bd:0e:2f:88:2c:a4:ac:cd:
         73:e2:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----