Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230332e302f32342d3234203d3e20313430303330.roa
File:                     3130332e3134392e3230332e302f32342d3234203d3e20313430303330.roa (raw, json)
Hash identifier:          Ocad6hnPhRMrOoyiGq+yBLtTdZbr4vHzvKRtpRJ2uoc=
Subject key identifier:   1D:F5:B2:03:91:32:28:7F:11:85:22:5C:00:79:E4:B8:C7:38:D4:0A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2A52CC49A11CA55AF6406AADD2392D3D5D17A7CD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230332e302f32342d3234203d3e20313430303330.roa
Signing time:             Wed 24 Nov 2021 04:34:12 +0000
ROA not before:           Wed 24 Nov 2021 04:29:12 +0000
ROA not after:            Thu 24 Nov 2022 04:34:12 +0000
asID:                     140030
IP address blocks:        103.149.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:52:cc:49:a1:1c:a5:5a:f6:40:6a:ad:d2:39:2d:3d:5d:17:a7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 24 04:29:12 2021 GMT
            Not After : Nov 24 04:34:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:ec:42:0f:6d:c4:52:12:43:8a:4f:b2:1f:
                    9e:61:f1:aa:61:37:82:76:8e:12:08:02:2e:32:3b:
                    71:bd:75:2e:46:5b:1b:72:2b:1d:50:5b:85:30:b9:
                    39:e8:14:32:43:01:58:ec:a2:81:8a:e7:01:46:82:
                    72:74:70:92:96:4d:98:10:9c:d3:3e:f9:e8:e1:ed:
                    2e:ae:f0:f4:ab:76:a5:db:4f:1f:97:7d:40:89:40:
                    b5:a2:24:69:26:c7:e2:27:c3:f5:f5:fd:d5:26:32:
                    7c:42:83:6c:4d:51:b8:34:02:2e:29:7e:ab:ea:63:
                    0e:c6:93:db:a4:f9:9b:d7:ce:29:8f:6b:f4:06:b2:
                    e0:29:ca:d5:cb:c2:b3:03:90:81:40:83:7a:b3:7d:
                    32:13:3a:7a:8c:c1:00:66:73:49:dd:f3:7e:d1:ac:
                    4d:b1:06:31:de:d1:75:d8:92:ea:e7:4d:e1:ab:89:
                    ed:6d:00:b8:76:c5:c1:5a:18:60:e9:65:54:9f:bb:
                    62:6b:0c:f7:41:48:e5:05:4f:96:9f:63:98:cc:6b:
                    1b:01:57:0f:31:81:fc:66:d3:ed:1e:8b:8c:38:75:
                    27:a2:50:6b:ed:16:07:39:47:d8:94:15:fd:81:5b:
                    0d:b5:ba:18:36:f5:20:87:b6:49:fc:aa:7a:b9:04:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:B2:03:91:32:28:7F:11:85:22:5C:00:79:E4:B8:C7:38:D4:0A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3230332e302f32342d3234203d3e20313430303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:63:5c:83:fa:96:6b:c7:98:f8:2b:fc:88:fe:f2:ee:4b:
         b7:64:2e:24:e9:46:4c:af:5e:bd:c9:e8:a9:fa:73:f4:71:62:
         47:51:e3:ed:c8:12:8a:3d:09:bb:af:7a:53:1a:3d:a9:b3:31:
         c1:db:5b:74:dc:24:fc:ed:e6:16:09:db:06:0f:71:e1:80:e7:
         97:c7:46:3e:27:2d:cb:c3:d2:b9:21:e5:0d:99:f4:74:e7:f0:
         a4:49:80:a5:df:6b:1a:7d:27:35:a0:ff:14:16:54:3e:bf:67:
         6e:a2:5e:2d:82:e4:ba:34:8b:df:75:8a:30:d3:a5:e8:03:72:
         48:22:72:1d:f9:8e:f5:41:3a:20:98:dc:20:8e:e2:23:bb:cb:
         12:71:61:72:39:f9:77:9e:af:f7:25:d5:9d:eb:31:fa:3f:69:
         f5:79:71:04:61:32:01:fe:33:c2:e0:d5:39:74:71:29:15:52:
         b9:52:7a:b9:1d:c9:55:d5:f8:2f:15:53:13:71:6b:c0:f0:bd:
         98:a1:97:8d:45:2e:75:87:e2:40:f8:44:60:b0:72:06:7f:0f:
         3f:92:0c:f0:87:f6:ba:8e:bf:64:8c:67:d6:53:d2:16:ef:8f:
         26:fc:2d:6c:2e:9f:28:49:a0:54:95:86:29:73:5b:03:9c:26:
         9c:ca:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----