Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37302e302f32332d3234203d3e203137373639.roa
File:                     3130332e3135382e37302e302f32332d3234203d3e203137373639.roa (raw, json)
Hash identifier:          A+GBHxjpTks6QJzrkiLNWnKQN7+jq45UiY1EDmA1KfI=
Subject key identifier:   B9:20:2A:BD:EC:8B:9A:9E:C1:80:47:DF:78:7F:FC:AD:E1:EE:1A:C2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       180C0EF4D6FE8267447FC9D7B2ADE6595B429CD9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37302e302f32332d3234203d3e203137373639.roa
Signing time:             Sat 23 Oct 2021 10:00:00 +0000
ROA not before:           Sat 23 Oct 2021 09:55:00 +0000
ROA not after:            Sun 23 Oct 2022 10:00:00 +0000
asID:                     17769
IP address blocks:        103.158.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0c:0e:f4:d6:fe:82:67:44:7f:c9:d7:b2:ad:e6:59:5b:42:9c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 09:55:00 2021 GMT
            Not After : Oct 23 10:00:00 2022 GMT
        Subject: CN=3082010A0282010100C4D5385AC479CA5EB272CEEC67DC08C4D42CB504C99335F043EDE3ABE2955445948B70DEED43AF4426D0360C784DF49A9070C594C8D3F1CF07AE0A5689F031C80E1C4503E1CD4A1824A0E6C1721767684A8797B313A0CCE1EFC2CA538DA50E1294855820CF6B0E798CAF3CABC88C7F6922DB40AC0247BA89FBB866C1D80F7CC920C64B49FFBE6FA45C7A1DC54FBBB8D020331BABBEEA728953D6FB8B7B8E0426C6EFAB74555E489292B30B9D58CC0567444FE39E4C382E6A92EC40534B88594164821A0A0D245428F091FB3B5666FA662C11176FBDDD72DEC41F3CB93BE2BA32D2FC455231CE3E51DB2136AB8429A53BE626569D5F9D5C7BDADDF8F3951F53A10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:38:5a:c4:79:ca:5e:b2:72:ce:ec:67:dc:
                    08:c4:d4:2c:b5:04:c9:93:35:f0:43:ed:e3:ab:e2:
                    95:54:45:94:8b:70:de:ed:43:af:44:26:d0:36:0c:
                    78:4d:f4:9a:90:70:c5:94:c8:d3:f1:cf:07:ae:0a:
                    56:89:f0:31:c8:0e:1c:45:03:e1:cd:4a:18:24:a0:
                    e6:c1:72:17:67:68:4a:87:97:b3:13:a0:cc:e1:ef:
                    c2:ca:53:8d:a5:0e:12:94:85:58:20:cf:6b:0e:79:
                    8c:af:3c:ab:c8:8c:7f:69:22:db:40:ac:02:47:ba:
                    89:fb:b8:66:c1:d8:0f:7c:c9:20:c6:4b:49:ff:be:
                    6f:a4:5c:7a:1d:c5:4f:bb:b8:d0:20:33:1b:ab:be:
                    ea:72:89:53:d6:fb:8b:7b:8e:04:26:c6:ef:ab:74:
                    55:5e:48:92:92:b3:0b:9d:58:cc:05:67:44:4f:e3:
                    9e:4c:38:2e:6a:92:ec:40:53:4b:88:59:41:64:82:
                    1a:0a:0d:24:54:28:f0:91:fb:3b:56:66:fa:66:2c:
                    11:17:6f:bd:dd:72:de:c4:1f:3c:b9:3b:e2:ba:32:
                    d2:fc:45:52:31:ce:3e:51:db:21:36:ab:84:29:a5:
                    3b:e6:26:56:9d:5f:9d:5c:7b:da:dd:f8:f3:95:1f:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:2A:BD:EC:8B:9A:9E:C1:80:47:DF:78:7F:FC:AD:E1:EE:1A:C2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e37302e302f32332d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:57:86:6c:bc:30:b4:e1:98:50:53:fb:d1:de:26:b5:14:69:
         10:aa:d6:fe:64:c0:46:69:37:13:5b:e1:95:40:9b:c1:87:bc:
         64:13:ce:4a:0e:27:b1:f6:72:cb:98:7f:56:73:43:a3:05:dc:
         65:51:3f:92:24:ee:d0:94:87:22:00:b0:38:21:3c:22:f1:94:
         ba:c1:f3:c0:c7:6f:ba:58:2c:ee:80:ae:2c:c8:4c:be:61:ea:
         e0:3a:c3:34:13:d0:1c:bc:9e:7f:89:c3:19:4f:a8:16:d7:f3:
         c9:07:c9:16:c1:bc:ef:f0:60:59:3c:9f:f0:18:3c:a3:cb:13:
         cb:75:10:ef:80:d7:0d:87:57:af:39:b2:2f:0e:1d:8f:20:e0:
         92:dd:91:51:20:d5:85:b0:b6:75:ec:b4:a5:bb:57:e2:3d:c5:
         c4:b3:d5:9d:10:53:06:00:31:55:2a:e5:e8:85:d9:f4:93:6c:
         f5:68:ff:90:b5:32:d8:a6:f5:4a:bb:19:5f:99:0c:d5:d1:34:
         cb:92:7f:60:9f:06:26:22:71:7a:cc:f5:e5:1a:b7:4a:a5:99:
         07:5f:d2:e5:9f:5c:86:95:cb:3e:2e:0a:67:ee:ec:d2:eb:15:
         a9:f0:33:3f:a1:82:41:59:ec:91:ba:6e:e8:8a:a8:50:a1:ea:
         31:92:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----