Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa
File:                     3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa (raw, json)
Hash identifier:          9Q+Ek3eRsD0HKC5eFgTVcUXacMxQz0Snb2+wWJbPrv8=
Subject key identifier:   E0:0F:F6:94:7D:B3:9E:4C:A4:BA:B9:22:C6:04:05:16:2D:CD:D9:93
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       625D204D08932E366BB320FB381599CB2AE9705F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa
Signing time:             Sat 23 Oct 2021 08:00:00 +0000
ROA not before:           Sat 23 Oct 2021 07:55:00 +0000
ROA not after:            Sun 23 Oct 2022 08:00:00 +0000
asID:                     139933
IP address blocks:        103.146.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5d:20:4d:08:93:2e:36:6b:b3:20:fb:38:15:99:cb:2a:e9:70:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 07:55:00 2021 GMT
            Not After : Oct 23 08:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:80:49:ba:8a:5b:f0:09:08:f9:c9:d3:b3:
                    d5:9b:85:dc:63:32:ad:3d:11:07:c6:c7:ce:96:63:
                    b4:f3:4b:20:ba:61:d6:f0:96:66:8e:0d:74:e8:ea:
                    d2:85:8b:99:00:17:e9:6c:22:15:1b:85:52:80:f2:
                    06:82:e6:0f:27:36:92:04:37:57:58:80:b9:ca:ca:
                    48:13:35:1b:e8:fb:cd:ac:78:74:3a:97:64:86:e3:
                    8a:ac:e6:e4:7e:9d:4f:8b:9f:65:03:41:f4:93:11:
                    3b:b2:53:86:d0:06:65:cb:a0:c8:4f:f9:c8:b6:55:
                    8a:a4:6b:df:0b:74:fd:87:b6:a5:87:7a:e8:f8:12:
                    a3:b2:cb:53:3e:31:db:a1:c5:97:55:a2:60:54:60:
                    d4:07:33:4b:fc:66:90:c7:8a:fa:26:af:a9:22:74:
                    25:49:0a:26:d1:c1:c8:25:93:93:bf:db:72:5b:67:
                    aa:3f:1d:87:cc:39:c8:59:1b:92:b5:8e:9a:33:5e:
                    86:23:f5:57:cb:ea:c6:92:d4:b3:06:62:0d:87:db:
                    f6:e0:89:72:44:d5:9b:9c:a1:06:7c:70:28:c7:51:
                    4c:8e:1a:9c:e2:63:7a:4d:4f:d2:61:ac:25:33:f3:
                    03:5b:99:4c:3e:3b:c5:40:0a:9e:55:7d:df:fa:3c:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:F6:94:7D:B3:9E:4C:A4:BA:B9:22:C6:04:05:16:2D:CD:D9:93
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:ef:60:93:64:8d:24:4f:cf:6d:f0:0f:7e:a9:5c:dd:b6:
         86:a3:e7:c1:1f:62:4c:53:07:f0:a1:61:54:d3:18:c9:7a:cb:
         60:e1:26:5b:fa:1c:a5:f1:6e:f1:5a:9c:06:a4:64:cf:2a:e6:
         00:6b:20:d4:cb:ff:4e:c5:6a:f8:60:ab:3e:5f:b1:62:d9:2e:
         ff:90:d0:cd:cb:c4:41:49:92:14:f1:cf:16:dc:30:e6:a0:96:
         a3:de:6b:da:47:95:53:87:a4:25:07:9c:71:64:ca:0b:36:2d:
         05:aa:59:61:06:6d:87:c6:4a:7c:9f:34:3e:0d:ab:9d:91:62:
         89:8d:9a:eb:5a:5b:d8:16:e5:ae:4b:e5:f5:8b:6e:16:a7:d7:
         2d:02:59:70:63:df:77:c8:bd:c2:07:a9:9c:6d:5d:f8:7b:0a:
         3d:e0:19:d3:08:63:2a:0c:74:0e:d1:1d:a8:74:98:97:4e:b3:
         8b:ba:e5:87:f6:5e:ec:bb:bf:ff:72:46:d7:2d:b3:44:58:4c:
         82:e6:88:de:59:bd:fa:8b:f0:64:68:bf:87:4a:84:c3:c0:ef:
         eb:7f:9f:24:e0:9f:94:89:07:b6:99:1b:f2:3e:4c:52:35:a0:
         f5:73:35:83:6a:79:c3:12:40:7d:49:5c:0b:01:91:b1:0c:e3:
         b8:60:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----