Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa
File:                     3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa (raw, json)
Hash identifier:          IS2P+Y7quPiUz04fmwmLP9TqHooR2VlntSh+rkZMVT4=
Subject key identifier:   D1:02:27:98:AF:F4:B2:6E:FE:2A:E9:21:E8:E3:D9:2D:CE:10:3E:28
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6AA58C311A8E3494992C6F6254B2A29D2B5EA524
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa
Signing time:             Thu 18 Nov 2021 08:52:20 +0000
ROA not before:           Thu 18 Nov 2021 08:47:20 +0000
ROA not after:            Fri 18 Nov 2022 08:52:20 +0000
asID:                     131713
IP address blocks:        103.149.140.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a5:8c:31:1a:8e:34:94:99:2c:6f:62:54:b2:a2:9d:2b:5e:a5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 18 08:47:20 2021 GMT
            Not After : Nov 18 08:52:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:0b:3b:4e:14:3d:d5:84:26:10:0f:56:6f:
                    f1:90:2a:b0:f0:ad:da:a8:e0:91:21:f5:fc:96:8f:
                    5c:45:e5:0e:a6:52:b4:b4:a5:f8:42:bf:8b:fb:11:
                    76:22:c4:86:01:c1:86:9f:a8:bf:3b:9c:c1:e5:51:
                    56:83:d7:b7:02:af:c4:4f:08:0f:5d:42:d8:04:a1:
                    94:d4:4b:bc:2f:60:ad:26:c0:80:57:7c:bf:66:20:
                    bd:6e:30:42:43:b1:08:a2:a0:71:38:d3:6f:0d:e7:
                    b9:9e:20:93:65:93:2e:ff:6a:89:ac:d8:1e:42:27:
                    9a:28:46:39:50:b1:4e:bb:10:cd:b8:8b:44:30:24:
                    49:83:26:53:33:23:98:b2:f5:3d:6b:39:c6:f6:dd:
                    12:13:6d:9c:f9:29:4e:e8:91:95:05:8b:58:b0:ef:
                    bb:df:70:ff:19:73:cf:17:5a:81:79:cb:bb:26:7c:
                    92:07:bf:6a:42:23:1a:6c:c5:ec:40:c7:25:ed:e1:
                    f6:bc:77:7e:ef:12:00:fd:22:a7:3c:2a:94:a6:12:
                    bf:94:0e:a0:3d:06:9a:24:42:3a:17:da:0a:a5:37:
                    c9:b1:52:5d:24:e0:1d:68:c5:6f:03:31:68:f7:1a:
                    0a:3b:6b:ff:c2:8c:b7:6a:a4:3f:29:e1:4d:b4:d5:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:27:98:AF:F4:B2:6E:FE:2A:E9:21:E8:E3:D9:2D:CE:10:3E:28
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:76:40:1f:e3:6b:7b:c3:23:26:f7:61:c7:91:8e:90:fb:71:
         57:bc:ab:18:1e:91:42:c8:30:75:86:94:93:e9:04:a8:76:62:
         53:44:d4:cf:12:5c:35:c9:be:87:ca:1c:d0:57:28:fb:3d:fe:
         09:cb:de:43:13:56:eb:48:40:e4:17:a0:6e:05:ee:38:7d:bf:
         cc:20:a5:e0:df:9e:fd:81:d5:87:c6:ff:bd:f2:9f:b0:5d:b5:
         98:c2:db:66:d0:d2:13:9e:80:af:1f:5c:6b:bb:f0:85:72:60:
         47:83:72:79:7d:ca:0f:47:7b:67:11:c6:b4:5b:94:7b:1c:a4:
         60:e8:f5:1a:9a:26:fe:5d:d3:1b:cc:0c:ce:43:97:3c:0d:12:
         49:a2:6b:15:ba:07:15:d3:b9:5b:c6:2d:b4:98:e6:2c:02:9f:
         8f:1d:a0:61:56:03:19:8c:ca:2f:63:5b:d6:4e:8a:f2:c6:4c:
         cd:ae:02:ae:9c:fb:79:54:73:18:82:82:30:74:10:8a:e5:9f:
         a9:81:ad:6d:29:8e:88:4e:00:1c:40:4b:26:7a:b4:af:f8:f3:
         50:64:02:14:7e:d9:cf:ef:44:7e:c9:c7:f0:24:b9:de:1c:30:
         13:06:a5:fe:fa:be:79:39:c8:95:12:9a:70:f4:69:5b:21:44:
         1f:a3:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----