Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135302e3131342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          zDrtPVgInztdR8GgP8Lyt+ZQcl/lCyXWFW60bE+SyU8=
Subject key identifier:   AB:91:F9:A1:1C:C2:E8:9A:33:47:0F:92:46:D1:13:3C:58:4A:C3:C9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F76FC65EF0738E96ABEF58FF4940C0C2EC811FB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131342e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 27 Oct 2021 21:00:01 +0000
ROA not before:           Wed 27 Oct 2021 20:55:01 +0000
ROA not after:            Thu 27 Oct 2022 21:00:01 +0000
asID:                     17995
IP address blocks:        103.150.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:fc:65:ef:07:38:e9:6a:be:f5:8f:f4:94:0c:0c:2e:c8:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 20:55:01 2021 GMT
            Not After : Oct 27 21:00:01 2022 GMT
        Subject: CN=3082010A0282010100C9868996878ACF4D5CBC65AE51E1D0A9C979F178ACB8A6050D2D192BA21BC7DB6833290EA15CE98FE12C3AC3AFDBC64687E811FA5E9663A8F79AF69121F1088300AD3988A850D51678990C65D6D7B7E9DDA8C527762443084776EB5381C0E43FDAF7BDC329CAA775CEAA552C0AB5D50380765BE9DC8AA1E4556A755CD927FC8DF68DF702B6A35F8A60F30814FA632BF78224D960E779B1471F9B94CAE57DDEE336B7881DE3256229F3D3ED8AEED50A35E3BE83B9FE04D64E61EBDEFC2D671D1F3555E565E2E567F9387CDCE3D57E794ED8A3BD9FBA58810B8CCF3F16897F9F8C62FD64474305123BD4E830969E33A98533BB557E7821BBC182EB3FAD95CC3F1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:89:96:87:8a:cf:4d:5c:bc:65:ae:51:e1:
                    d0:a9:c9:79:f1:78:ac:b8:a6:05:0d:2d:19:2b:a2:
                    1b:c7:db:68:33:29:0e:a1:5c:e9:8f:e1:2c:3a:c3:
                    af:db:c6:46:87:e8:11:fa:5e:96:63:a8:f7:9a:f6:
                    91:21:f1:08:83:00:ad:39:88:a8:50:d5:16:78:99:
                    0c:65:d6:d7:b7:e9:dd:a8:c5:27:76:24:43:08:47:
                    76:eb:53:81:c0:e4:3f:da:f7:bd:c3:29:ca:a7:75:
                    ce:aa:55:2c:0a:b5:d5:03:80:76:5b:e9:dc:8a:a1:
                    e4:55:6a:75:5c:d9:27:fc:8d:f6:8d:f7:02:b6:a3:
                    5f:8a:60:f3:08:14:fa:63:2b:f7:82:24:d9:60:e7:
                    79:b1:47:1f:9b:94:ca:e5:7d:de:e3:36:b7:88:1d:
                    e3:25:62:29:f3:d3:ed:8a:ee:d5:0a:35:e3:be:83:
                    b9:fe:04:d6:4e:61:eb:de:fc:2d:67:1d:1f:35:55:
                    e5:65:e2:e5:67:f9:38:7c:dc:e3:d5:7e:79:4e:d8:
                    a3:bd:9f:ba:58:81:0b:8c:cf:3f:16:89:7f:9f:8c:
                    62:fd:64:47:43:05:12:3b:d4:e8:30:96:9e:33:a9:
                    85:33:bb:55:7e:78:21:bb:c1:82:eb:3f:ad:95:cc:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:F9:A1:1C:C2:E8:9A:33:47:0F:92:46:D1:13:3C:58:4A:C3:C9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e3131342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:32:74:bd:99:77:70:3c:3d:f1:6b:62:98:fb:1a:91:0d:53:
         17:b4:c8:e1:da:1d:a6:9c:ab:3e:6f:2b:0c:64:fb:83:14:0d:
         3c:6c:23:53:14:0e:4b:7a:87:3d:9a:9b:0c:93:fa:46:76:26:
         58:14:69:3f:8a:88:e4:81:8c:1a:b1:49:aa:b2:a8:fb:38:9e:
         ca:d1:fe:9d:c8:6b:f8:b8:e9:50:b7:33:e6:30:f3:2e:3c:bc:
         dc:25:80:b1:e3:a0:84:f1:c8:2e:d2:8d:d8:9f:ea:b7:86:8a:
         01:52:35:69:3a:5e:a1:bc:92:7d:fc:3c:c5:ee:50:26:39:03:
         c9:bb:b1:dd:37:c0:8b:51:1e:8f:df:7b:bc:81:a9:08:2d:c4:
         0a:65:90:15:7a:a8:f4:e1:34:a3:b7:2b:46:b2:02:9b:03:78:
         7e:3b:77:52:f7:86:5d:3d:e1:4b:c1:1c:9f:84:9c:c5:6c:87:
         7c:38:bb:e4:aa:18:fe:7c:0f:89:a7:44:a0:69:a3:59:ed:9d:
         65:66:7b:94:f7:30:ae:d2:cd:ab:c6:1c:78:f7:d4:e2:f6:61:
         f9:d0:b5:a4:ed:e8:67:aa:be:02:29:be:67:b0:27:7a:41:7e:
         f0:0f:3a:19:f0:e8:c8:75:86:d5:45:da:fc:de:b5:17:9f:8c:
         21:47:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----