Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3130362e302f32332d3234203d3e20313338383432.roa
File:                     3130332e3135352e3130362e302f32332d3234203d3e20313338383432.roa (raw, json)
Hash identifier:          uCVojHqC5fOaS1+JiYPhAV8fhamtxcyRpyYucjzw1Bk=
Subject key identifier:   72:2C:D1:37:5D:22:16:CD:ED:07:B8:FB:99:39:56:68:6A:65:82:22
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       33FC3D295E5C63A4426DC53D497872CC7112EF5A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3130362e302f32332d3234203d3e20313338383432.roa
Signing time:             Fri 10 Dec 2021 11:00:02 +0000
ROA not before:           Fri 10 Dec 2021 10:55:02 +0000
ROA not after:            Sat 10 Dec 2022 11:00:02 +0000
asID:                     138842
IP address blocks:        103.155.106.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fc:3d:29:5e:5c:63:a4:42:6d:c5:3d:49:78:72:cc:71:12:ef:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 10 10:55:02 2021 GMT
            Not After : Dec 10 11:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:cd:5f:73:9e:ce:70:f3:57:04:f2:88:b2:
                    df:c9:36:ac:e2:69:1b:bc:16:8a:41:89:31:14:a4:
                    77:20:ad:59:15:e2:93:c2:9d:64:15:9c:4c:cb:2e:
                    77:6e:c7:41:d9:23:95:c7:ca:93:45:53:1e:69:48:
                    3c:59:0f:70:96:9c:cc:76:1e:14:af:74:8b:f7:10:
                    ca:bb:8b:b7:99:4d:fc:8c:58:93:b4:8e:d3:25:a5:
                    45:f2:2c:99:f0:27:b4:40:b7:db:cb:0e:c4:6e:5b:
                    65:04:fe:8a:d3:ad:2d:de:9e:fe:a7:95:59:ae:2b:
                    8a:3e:6a:ab:d4:12:ec:b5:1a:ef:4c:b1:7a:1b:64:
                    f7:6a:5e:82:e7:21:f8:63:8c:73:61:d2:d0:a9:e2:
                    20:3e:1e:04:1d:50:ca:6b:50:87:f7:ce:d5:fa:25:
                    f8:74:0a:97:29:44:eb:e4:9c:11:32:c9:ca:41:01:
                    4a:ac:7d:8c:17:34:ff:d8:54:2c:78:f1:21:75:e5:
                    7b:39:29:79:1c:85:62:68:0e:7d:31:5a:ff:6f:f3:
                    69:91:6a:39:1b:45:b5:aa:03:10:6b:e8:67:60:3c:
                    d6:eb:fd:52:23:f2:56:fa:97:3f:79:99:ae:36:44:
                    03:1a:25:f9:c7:ac:e8:9c:e2:a9:ae:c3:73:52:34:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:D1:37:5D:22:16:CD:ED:07:B8:FB:99:39:56:68:6A:65:82:22
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e3130362e302f32332d3234203d3e20313338383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:fb:d7:e9:a3:a4:51:06:58:4e:b6:27:a1:3c:c7:a7:b4:
         99:65:ca:8b:9b:59:64:05:fe:3a:74:59:f5:e2:6d:83:3d:15:
         1c:3b:4b:a3:0c:fd:d4:34:7d:67:e0:42:a7:4b:5a:68:ff:ae:
         51:01:86:e4:fb:e1:dc:ea:a0:bc:ab:ae:d4:82:09:df:a4:0e:
         c5:34:90:ac:69:16:e0:13:70:85:ee:05:8d:0c:d4:23:0e:8c:
         1b:c8:9a:27:2d:ac:8f:02:f7:e2:2a:2d:80:79:09:1f:4d:08:
         52:94:a0:cd:44:c8:a7:ee:6b:ce:7d:49:bb:7d:c9:1b:4a:8f:
         91:f1:70:7e:5c:bd:e1:75:d6:44:66:9a:78:b0:56:ae:34:f5:
         85:64:eb:1c:a9:ce:ba:9d:1f:ed:94:d0:a4:4a:d0:4b:2b:6d:
         88:26:c6:36:ab:2d:92:f7:f4:9a:e7:96:27:58:82:31:88:95:
         e6:41:52:2b:d8:7b:cd:62:90:d3:ef:98:3f:a2:19:63:44:bf:
         40:7c:3d:48:80:f6:40:d7:24:ac:8a:5d:74:67:3d:e1:8c:a8:
         f8:a0:8d:9a:ff:fc:46:02:0d:42:0b:4c:3a:2f:9c:17:1f:a9:
         53:b4:56:aa:5b:45:f8:aa:fa:13:97:9f:ae:d7:42:87:01:18:
         03:93:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----