Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38302e302f32342d3234203d3e20313333383030.roa
File:                     3130332e3135302e38302e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          xDHeaI5XFkHlFlLqRp27xBGe9+zGXU8TN7BvN8LGfrE=
Subject key identifier:   E6:CF:61:CA:14:04:00:02:FF:A3:0F:83:9D:5E:96:E3:3D:82:13:D6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4FCADE3DEF99085117F5B6449BB6B9B35F7C3438
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38302e302f32342d3234203d3e20313333383030.roa
Signing time:             Wed 16 Feb 2022 12:00:00 +0000
ROA not before:           Wed 16 Feb 2022 11:55:00 +0000
ROA not after:            Thu 16 Feb 2023 12:00:00 +0000
asID:                     133800
IP address blocks:        103.150.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:de:3d:ef:99:08:51:17:f5:b6:44:9b:b6:b9:b3:5f:7c:34:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 16 11:55:00 2022 GMT
            Not After : Feb 16 12:00:00 2023 GMT
        Subject: CN=3082010A0282010100A386FCB67200710D7091A2374259EF25C37E0E789A8960E59A8DEDDA85A0B5DF79B702FAC3FD9379CF776EDEE5E9C7CE5626BAF21C797115C2327C22145BDD4C077F887E1DCA87A9FBE756D5CA4465EB9EB03FE53EA6FD5159B215FE9842A0041EDF99C7E26DB0A706B1BD9DAF1A34B4F88FA22702529E91F79F3EA78B89168A835FB1F02C44CA5C15371975AB58B20D9659F12B403AAC1F55449A71574C00705B40C59460F9DA6141092F3004AD33B1E7B1BE5FEC548A8C4BA68203B38D19BD680A8986843EC7044C57CB00EB9B5B611B0AB45F5DB06BA372AC4216971FC30DAEA9EA5EC4E67C485E94E3275DE73F0D9B77B1DA7C9BD444933BC334B74DB3E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:fc:b6:72:00:71:0d:70:91:a2:37:42:59:
                    ef:25:c3:7e:0e:78:9a:89:60:e5:9a:8d:ed:da:85:
                    a0:b5:df:79:b7:02:fa:c3:fd:93:79:cf:77:6e:de:
                    e5:e9:c7:ce:56:26:ba:f2:1c:79:71:15:c2:32:7c:
                    22:14:5b:dd:4c:07:7f:88:7e:1d:ca:87:a9:fb:e7:
                    56:d5:ca:44:65:eb:9e:b0:3f:e5:3e:a6:fd:51:59:
                    b2:15:fe:98:42:a0:04:1e:df:99:c7:e2:6d:b0:a7:
                    06:b1:bd:9d:af:1a:34:b4:f8:8f:a2:27:02:52:9e:
                    91:f7:9f:3e:a7:8b:89:16:8a:83:5f:b1:f0:2c:44:
                    ca:5c:15:37:19:75:ab:58:b2:0d:96:59:f1:2b:40:
                    3a:ac:1f:55:44:9a:71:57:4c:00:70:5b:40:c5:94:
                    60:f9:da:61:41:09:2f:30:04:ad:33:b1:e7:b1:be:
                    5f:ec:54:8a:8c:4b:a6:82:03:b3:8d:19:bd:68:0a:
                    89:86:84:3e:c7:04:4c:57:cb:00:eb:9b:5b:61:1b:
                    0a:b4:5f:5d:b0:6b:a3:72:ac:42:16:97:1f:c3:0d:
                    ae:a9:ea:5e:c4:e6:7c:48:5e:94:e3:27:5d:e7:3f:
                    0d:9b:77:b1:da:7c:9b:d4:44:93:3b:c3:34:b7:4d:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:61:CA:14:04:00:02:FF:A3:0F:83:9D:5E:96:E3:3D:82:13:D6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38302e302f32342d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:6b:a6:d0:90:7a:60:1c:5b:bb:08:d4:14:69:64:4b:7e:
         78:b8:d5:b8:11:cd:a5:16:89:42:7a:e0:e0:e9:20:d2:32:aa:
         d9:ab:be:71:ae:c6:2c:0e:30:ac:16:e5:b4:19:41:d3:6b:3f:
         e4:47:a9:a3:e9:4b:b7:65:c5:3d:67:28:73:a5:31:ec:f6:8d:
         7f:50:e0:3f:bb:ee:d3:9e:91:9b:1a:25:67:c1:77:52:f4:e1:
         06:e1:0f:68:fd:62:4c:0b:57:00:2b:b5:3d:54:31:30:83:a2:
         22:31:d4:ce:07:1b:c0:13:fe:1c:e3:b7:68:f6:14:87:74:51:
         62:9c:52:18:90:3e:1b:83:5b:09:26:2d:1f:e3:96:70:0a:9d:
         1d:05:34:48:24:5c:90:d5:3a:5c:03:54:84:66:df:09:76:ee:
         e8:2f:f3:b6:39:40:05:b1:cd:d4:92:e0:9c:7c:b8:1a:4a:8f:
         02:50:18:45:85:d5:d3:a1:ac:bf:aa:69:20:69:30:ac:32:77:
         7c:64:38:0d:cf:43:fc:c4:b6:d2:93:95:5e:fc:75:1a:ba:23:
         6d:37:6b:cf:9b:79:8e:e4:fd:46:92:4e:02:d9:cc:88:5a:fc:
         0a:c8:14:73:10:77:f6:0c:bf:7f:3b:c2:86:ac:17:cf:b2:09:
         01:cd:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----