Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3234362e302f32332d3234203d3e20313430343337.roa
File:                     3130332e3135312e3234362e302f32332d3234203d3e20313430343337.roa (raw, json)
Hash identifier:          nZ9P5P5jel+//6XfhF3i2P/yP20x9Wx8AfnsENMxgpU=
Subject key identifier:   DD:F9:BD:99:C4:B4:02:1E:2C:B9:CB:E6:2E:29:AC:EA:EC:26:B0:50
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       056520530E5A3EEA8CFA5BF6A9687F0F431A1F31
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3234362e302f32332d3234203d3e20313430343337.roa
Signing time:             Sat 23 Oct 2021 04:00:02 +0000
ROA not before:           Sat 23 Oct 2021 03:55:02 +0000
ROA not after:            Sun 23 Oct 2022 04:00:02 +0000
asID:                     140437
IP address blocks:        103.151.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:65:20:53:0e:5a:3e:ea:8c:fa:5b:f6:a9:68:7f:0f:43:1a:1f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 03:55:02 2021 GMT
            Not After : Oct 23 04:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:b9:00:58:34:db:a2:99:35:6b:de:2a:81:
                    8f:c0:eb:ee:56:1d:92:29:f2:a9:2c:c6:43:a1:cc:
                    33:4d:9a:25:d2:c7:f6:f5:a2:bb:0a:c3:15:41:4d:
                    52:16:02:08:68:e2:25:c0:03:bc:47:44:78:0e:bc:
                    3b:ab:e6:f8:81:41:ae:f5:2e:be:fa:e2:6c:29:e9:
                    2b:bf:a0:a3:a3:23:fe:a4:d5:2f:17:93:0b:f1:c0:
                    cd:17:02:80:65:84:22:5e:7e:78:78:8c:75:5f:81:
                    b1:3f:04:37:da:94:09:02:54:fd:c7:05:d0:a1:81:
                    9b:f5:ed:6b:47:fa:ee:33:3d:61:97:43:fe:73:d2:
                    0b:90:8f:41:41:aa:2e:d1:82:56:6e:36:df:38:5f:
                    24:b8:6e:17:93:f1:96:f7:7e:8f:45:f6:16:0a:ac:
                    b2:cc:a2:87:91:ba:cc:a7:37:e2:f7:89:35:1c:fa:
                    ba:72:f3:ac:84:5c:c3:d0:5f:d1:64:ef:a0:9d:0c:
                    13:50:40:5b:0f:dd:f4:9f:79:aa:12:75:fa:42:bb:
                    4a:18:5c:65:be:6b:03:1f:51:6b:50:d0:1b:f5:00:
                    76:a4:ca:1b:78:1e:62:c4:1c:66:34:dc:b3:67:1b:
                    a7:d3:7f:fb:e5:22:48:d5:e5:34:ac:c5:dc:62:e1:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:BD:99:C4:B4:02:1E:2C:B9:CB:E6:2E:29:AC:EA:EC:26:B0:50
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3234362e302f32332d3234203d3e20313430343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:46:5f:44:80:77:7e:00:75:01:c0:91:db:ac:16:80:40:3f:
         a0:40:89:42:50:77:d7:17:45:61:e4:b4:92:19:7c:fe:cf:23:
         9f:a3:65:9c:bf:c7:78:8b:0e:6f:a7:b8:68:8e:dc:cb:0a:8b:
         2c:dd:7b:99:4c:87:6d:8e:59:51:fe:68:cf:73:9f:ed:e4:72:
         ad:9b:8c:53:80:aa:33:ae:0d:9f:a6:c2:cb:35:4a:0d:d7:13:
         36:fa:24:4f:f4:8f:f1:b0:1b:d8:bc:67:94:00:d7:db:6a:ff:
         03:f2:11:5c:62:33:8b:50:9c:70:d1:97:0d:b9:76:d2:83:71:
         62:45:75:89:76:79:c0:79:24:ec:20:df:e9:f4:50:0f:70:c2:
         14:c2:a3:82:d3:4a:a1:5f:2f:aa:05:3a:cd:3c:33:b5:5e:f2:
         fa:e6:39:c2:4b:5c:8f:f1:a1:5c:85:88:a0:fe:9d:2f:fb:e8:
         b4:70:d2:be:90:3d:52:96:a4:0d:7a:5f:31:66:e9:43:d7:e4:
         c3:71:9f:a0:8a:71:2e:31:9d:55:79:33:68:bc:cf:d2:56:7d:
         51:16:8c:bd:65:4d:0e:3c:2d:ea:16:10:96:3c:61:49:94:af:
         17:c8:55:ac:20:83:00:c7:d9:b1:96:f8:ec:94:4c:7d:08:f3:
         5f:2f:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----