Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3135382e36382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          /579qPq37o4bFmrNuc64YLG9rkoFeiybkfkQBbMA8Bg=
Subject key identifier:   FE:B9:23:41:74:59:CC:54:52:B9:9B:74:6F:72:D3:16:64:01:90:D4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       782AC92BE18F0913562FCEE88860586CAFE901F3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36382e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 27 Oct 2021 21:00:01 +0000
ROA not before:           Wed 27 Oct 2021 20:55:01 +0000
ROA not after:            Thu 27 Oct 2022 21:00:01 +0000
asID:                     17995
IP address blocks:        103.158.68.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:c9:2b:e1:8f:09:13:56:2f:ce:e8:88:60:58:6c:af:e9:01:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 20:55:01 2021 GMT
            Not After : Oct 27 21:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:21:32:2d:02:99:06:9e:63:b4:03:41:6e:
                    f2:75:c1:3e:8e:0d:26:ac:19:83:2a:a9:39:d2:42:
                    6b:da:44:50:2a:25:f5:ce:35:ad:cf:0b:e7:12:f9:
                    1f:7b:92:20:21:e2:ad:63:5b:93:6c:78:0d:78:e7:
                    e5:71:8e:b7:19:c3:59:5f:3f:6c:bb:15:66:42:e2:
                    3b:a6:5f:d5:bb:e4:4b:d5:82:2e:d8:c9:b6:32:ee:
                    4b:fd:dc:1b:f0:a9:af:6f:24:0a:87:ad:88:87:d6:
                    1c:43:7e:de:5c:71:67:4c:e9:44:7a:0e:61:10:ec:
                    40:80:c1:b1:99:e2:06:de:3a:0c:98:18:ee:52:0a:
                    70:56:1e:8f:d2:f6:3d:5f:77:a0:08:c3:64:53:cb:
                    17:b3:f2:68:36:29:9a:99:64:5a:d8:1c:17:00:1a:
                    39:97:dc:5a:f8:d8:d0:a0:3c:43:e0:2a:f0:20:bd:
                    cd:5d:16:fe:8e:8e:83:ac:df:3b:5e:ac:09:a8:68:
                    82:f1:11:3a:58:67:67:b9:53:b1:d7:46:3c:9a:e8:
                    6c:63:49:d1:dd:79:9f:62:0b:d5:ba:32:dd:75:17:
                    73:b2:92:9a:ca:e0:d0:16:ca:40:21:8a:a6:69:f7:
                    76:d2:3b:c3:12:31:a8:ae:3e:db:0b:13:66:fd:b0:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B9:23:41:74:59:CC:54:52:B9:9B:74:6F:72:D3:16:64:01:90:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e36382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:a7:eb:b2:35:bd:fe:bf:e8:0e:df:ab:07:a1:37:3e:30:
         92:c1:5c:3f:e9:1a:96:35:20:df:5a:c0:e6:66:59:ef:03:c2:
         99:d1:c3:14:e8:b9:2d:93:79:14:43:7d:45:83:56:d3:f6:96:
         6d:01:53:23:56:f2:9b:a8:ac:29:bb:44:58:9b:d3:4d:71:59:
         3e:fd:cd:8d:f0:0d:54:c6:f4:3b:c9:35:2c:a4:b0:1f:a5:b8:
         9f:a5:57:d1:3c:bd:e7:48:5f:ba:67:10:70:4c:91:c5:73:25:
         11:1e:52:4d:ef:a1:21:1e:15:83:9a:a8:75:e7:94:60:a1:8c:
         15:3a:18:93:c4:42:90:61:b7:ac:7c:0e:70:7c:32:fb:9e:3c:
         73:1a:26:8b:3e:f7:19:8f:5b:92:0d:f1:7f:d5:ef:e5:22:92:
         16:4a:44:80:13:de:0f:fb:02:16:86:84:c0:df:f7:3c:3e:24:
         b9:80:ed:ed:72:f4:d6:37:3e:45:9d:c3:52:e0:18:23:0e:bb:
         6a:11:f1:de:be:68:26:24:38:24:be:e1:dd:5e:45:cd:f4:dc:
         1d:2f:2c:6c:22:72:eb:d7:c8:d1:7a:c3:f3:2e:18:3a:e6:9a:
         c1:b6:ca:d7:49:96:1a:58:bd:08:22:1c:00:c4:c6:88:33:1f:
         17:a3:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----