Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e37322e302f32332d3234203d3e203435323931.roa
File:                     3130332e3135362e37322e302f32332d3234203d3e203435323931.roa (raw, json)
Hash identifier:          WLC9RM2bNlZvLUfXDYrFWDRvw1hTJzInJrStitSQnCI=
Subject key identifier:   FE:FC:08:A8:19:A2:F6:3E:26:1A:90:F4:69:B5:52:E0:C4:8C:86:77
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0B5705209F11FE8CBD8A0C1A5FDC5901804C4992
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e37322e302f32332d3234203d3e203435323931.roa
Signing time:             Thu 28 Oct 2021 06:00:00 +0000
ROA not before:           Thu 28 Oct 2021 05:55:00 +0000
ROA not after:            Fri 28 Oct 2022 06:00:00 +0000
asID:                     45291
IP address blocks:        103.156.72.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:57:05:20:9f:11:fe:8c:bd:8a:0c:1a:5f:dc:59:01:80:4c:49:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 28 05:55:00 2021 GMT
            Not After : Oct 28 06:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:bf:b8:8c:bd:27:8e:c4:8e:f9:dc:1d:b5:
                    3b:b0:f9:95:a9:06:49:94:6f:b7:83:86:56:da:c8:
                    6c:7a:5a:62:bb:39:db:ea:4f:88:f2:8c:01:01:92:
                    35:26:f5:cc:9a:c3:aa:b1:e2:c9:e2:4d:ab:94:4f:
                    a1:8e:64:13:80:6b:84:28:8d:a5:b7:76:50:a0:97:
                    d5:da:35:fc:de:97:44:97:9d:44:56:33:4b:fb:2c:
                    b0:cc:6e:8c:79:7e:3b:6c:b7:05:3f:f1:2e:9a:b5:
                    bc:d6:59:3d:15:58:42:58:9f:80:e6:7e:67:ae:6d:
                    ec:b4:1e:2a:58:43:0b:2b:67:db:37:90:31:8b:2e:
                    c7:b6:d9:2e:a7:93:1c:1c:9a:e6:2c:57:f7:51:d1:
                    5d:a4:9b:a4:ad:b5:86:f2:3f:4f:2a:e6:05:5a:76:
                    09:42:27:49:3a:f0:86:f2:65:cb:d0:64:95:20:cb:
                    9b:b5:5f:02:60:c1:f9:2e:b4:d4:b7:fc:59:7e:43:
                    4a:36:58:31:f8:34:3c:26:8f:2a:f6:d0:1e:5d:cb:
                    27:6a:37:b7:b7:90:e1:b4:03:b0:56:45:4d:79:36:
                    08:71:e6:eb:2c:44:e7:c7:88:e8:0c:bf:2b:dc:de:
                    9f:fc:ee:a8:e2:d5:41:a5:d7:f2:e3:7b:9e:d8:46:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FC:08:A8:19:A2:F6:3E:26:1A:90:F4:69:B5:52:E0:C4:8C:86:77
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e37322e302f32332d3234203d3e203435323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:d8:a1:63:d6:09:8d:b4:3f:a8:12:33:a6:4a:7e:91:4e:
         99:61:51:69:cc:e6:55:6d:7b:69:6f:6d:b6:4c:9f:49:01:db:
         d4:d8:97:d9:80:4e:95:93:f1:09:b7:b1:44:a3:fc:1c:f9:9a:
         15:5d:af:d8:35:bb:a8:7b:ed:79:6b:51:5e:70:92:62:2b:16:
         e2:d3:f0:83:9e:9c:40:8c:45:07:c6:d8:fa:46:db:c6:b3:b7:
         a7:59:6f:d7:33:87:20:13:85:06:d8:50:2b:8d:3f:ad:45:45:
         9f:1d:09:2d:3e:a5:00:f6:94:0e:b3:df:0b:e4:1e:64:a5:6c:
         48:e1:9e:ed:62:a9:17:14:18:11:fa:21:05:fe:70:cf:66:7a:
         b3:7d:41:36:3c:29:0e:76:be:8b:40:f5:28:be:79:2e:3c:44:
         e1:eb:32:32:90:df:84:82:95:88:1f:3c:cc:da:51:c3:87:ee:
         1f:55:3a:48:a8:11:74:d0:9c:c3:f5:58:65:da:e8:14:f7:a5:
         3b:d1:54:79:e5:29:15:82:12:eb:6f:ed:f5:05:a6:6c:a4:57:
         77:a6:e1:c6:97:33:d4:73:06:4a:90:57:2f:06:48:71:0d:19:
         6f:5e:c7:35:76:de:85:e3:a4:b5:3d:32:32:80:cb:33:71:42:
         29:02:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----