Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e32362e302f32332d3234203d3e20313431313037.roa
File:                     3130332e3135372e32362e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          P27UQ7Wx7Hs3xC6zeFc4OzQqZGc9P+7iKM/EIGK37nA=
Subject key identifier:   84:97:C0:02:4A:1A:F3:DE:E4:4C:FA:81:EA:AF:71:6F:08:36:28:83
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       118E6704F527D472F266E1EA9BB2E31F72E5DE3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e32362e302f32332d3234203d3e20313431313037.roa
Signing time:             Sat 23 Oct 2021 03:00:01 +0000
ROA not before:           Sat 23 Oct 2021 02:55:01 +0000
ROA not after:            Sun 23 Oct 2022 03:00:01 +0000
asID:                     141107
IP address blocks:        103.157.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:67:04:f5:27:d4:72:f2:66:e1:ea:9b:b2:e3:1f:72:e5:de:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 02:55:01 2021 GMT
            Not After : Oct 23 03:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:4d:f1:45:df:30:e2:4b:69:64:ad:50:1c:
                    55:70:14:f0:c6:3e:82:fd:ee:80:88:8c:53:93:4b:
                    af:66:aa:ed:2c:0b:cb:fd:e6:98:8c:a5:1f:f5:51:
                    8c:50:e3:88:07:37:f2:1e:90:89:3d:f0:fd:52:dc:
                    d2:68:6d:c8:07:c9:13:b0:5a:83:70:38:02:40:62:
                    08:89:36:5a:81:7d:69:51:e8:98:9c:08:93:74:c0:
                    35:dc:75:9f:a1:f9:39:d1:cb:5c:d5:c5:b5:4b:1f:
                    e8:0f:45:9e:ce:4f:9c:70:a2:04:fd:6b:4a:d4:48:
                    3f:3a:7d:ed:3a:53:0a:63:8a:65:cc:3c:71:d8:d2:
                    0f:76:18:92:6a:06:b2:1b:95:f6:56:44:eb:f8:2d:
                    6c:6f:89:f1:f6:33:13:7f:8b:e9:4d:95:3e:e2:ca:
                    55:d2:48:b5:00:7e:31:4b:ae:4a:b1:40:34:15:de:
                    ab:1e:3a:c6:75:ba:ee:cb:18:6a:aa:e5:83:b7:1d:
                    88:1d:b0:38:46:36:c8:a2:7c:bf:f5:81:87:75:e5:
                    c5:4d:f3:a2:65:fc:29:3b:87:d9:63:8f:a0:3a:b5:
                    e1:2f:f0:19:6b:de:69:34:89:f4:3f:4d:80:04:08:
                    8c:9b:48:12:25:30:c5:74:88:fa:69:ba:a9:e8:41:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:97:C0:02:4A:1A:F3:DE:E4:4C:FA:81:EA:AF:71:6F:08:36:28:83
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e32362e302f32332d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:f0:3b:6f:ad:72:7e:9e:60:eb:b8:77:52:c6:74:1f:9b:
         02:f3:e4:34:e5:86:0b:47:dc:20:55:b0:3f:4c:49:f7:df:19:
         8b:ef:10:e4:4d:a2:b0:ff:32:57:40:15:8e:a8:e2:2d:79:c5:
         b1:fc:6a:43:63:70:56:09:b4:56:c7:8f:03:12:24:7c:ad:ab:
         b9:c5:bc:82:c7:a8:9e:7b:7b:14:56:45:6d:4a:56:41:41:18:
         74:94:90:04:13:c8:6e:03:de:00:f3:29:ce:61:b3:0c:50:f8:
         2d:bf:55:1c:8b:dc:bc:ac:0b:f7:b5:8e:79:71:ed:0c:b1:43:
         8a:21:ce:8a:fe:b3:8f:c2:5b:4b:bf:0e:f8:ee:f0:65:d6:f7:
         53:8f:5f:92:04:02:f0:3d:10:97:6c:5c:c6:b0:cd:e1:44:a1:
         b3:46:ea:ec:28:64:c2:98:e1:2f:07:b0:b1:7d:1c:27:a2:d8:
         ed:f7:72:48:d1:a7:35:63:56:05:c7:df:3a:8f:39:5e:03:d6:
         7f:67:f6:8d:9e:68:e4:0b:ef:5d:ea:60:61:9f:04:59:26:b1:
         d2:db:44:d3:27:5b:a1:ce:bc:d6:d0:3d:07:4d:a6:b8:39:43:
         75:78:0f:69:2a:ca:fa:98:b7:67:f0:0a:1b:60:5d:ab:8e:fd:
         e2:18:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----