Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232382e302f32332d3234203d3e2039383735.roa
File:                     3130332e3135392e3232382e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          MUPXgzmT8m7BhpGil2ox3TG2WUAqg8jeHD2hirKgtLM=
Subject key identifier:   64:A0:99:CD:4B:AD:69:E1:1E:28:BB:EC:FD:B8:33:5D:D0:79:24:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       212598F547918BDFC5323F6522BF8285103BFCAE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232382e302f32332d3234203d3e2039383735.roa
Signing time:             Fri 12 Nov 2021 01:00:02 +0000
ROA not before:           Fri 12 Nov 2021 00:55:02 +0000
ROA not after:            Sat 12 Nov 2022 01:00:02 +0000
asID:                     9875
IP address blocks:        103.159.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:25:98:f5:47:91:8b:df:c5:32:3f:65:22:bf:82:85:10:3b:fc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 00:55:02 2021 GMT
            Not After : Nov 12 01:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:f5:83:c9:a3:f0:9b:32:56:e8:36:6b:a0:
                    47:d3:68:60:e3:79:d9:a6:01:e6:51:45:99:93:3b:
                    ec:3e:78:0b:3c:5e:47:b2:55:8a:49:a7:2a:e9:11:
                    36:d0:16:a8:68:d8:f6:09:09:d6:8b:74:1f:b2:0b:
                    d0:69:0d:b3:7a:3c:56:5d:86:71:ed:8c:6e:15:8b:
                    25:43:bf:6e:94:b7:58:9e:66:13:24:c1:e7:69:78:
                    01:9d:82:1d:aa:25:26:5a:39:23:8a:d0:94:3b:71:
                    0e:b8:a2:18:80:df:6f:af:57:c1:b3:09:65:80:37:
                    96:f4:38:e1:42:e9:c7:a0:68:e2:96:1b:df:55:75:
                    50:c1:dc:02:6c:60:03:2d:92:04:21:66:1f:b6:d9:
                    0d:eb:2c:44:ce:b5:bf:40:3d:c0:ba:c5:16:59:3e:
                    fa:e2:bb:08:74:07:af:46:d1:e2:a9:2f:ee:c0:e5:
                    9c:6f:16:e8:65:70:33:e7:9b:0f:92:14:fe:6f:a6:
                    bf:64:4a:44:f1:47:3f:c9:2e:5e:fe:e3:08:c2:81:
                    d8:28:f2:41:c7:e0:c0:c5:c6:2f:56:4f:7a:d6:7a:
                    dd:8f:f2:9a:69:e8:d3:69:45:52:66:7b:9f:22:4b:
                    38:78:35:58:85:05:f0:25:1c:31:cd:8a:40:6e:01:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A0:99:CD:4B:AD:69:E1:1E:28:BB:EC:FD:B8:33:5D:D0:79:24:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135392e3232382e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:35:32:d2:b6:0f:ff:1c:d2:1b:49:89:b1:c3:e3:61:4b:
         92:1e:ab:bd:b2:0b:b4:bb:9f:6d:d6:05:86:e4:80:2e:92:01:
         37:3a:39:eb:74:55:26:8a:ce:62:5d:94:a5:d8:5a:fe:06:d3:
         e7:d2:f6:af:d8:69:1c:36:1c:27:a5:8e:87:8b:40:ba:a8:68:
         79:9d:ac:f7:2b:03:cc:0c:60:19:fd:23:76:3f:ff:dc:16:08:
         5d:58:70:6a:3f:e2:38:6e:0d:df:b9:2f:e7:c5:dd:f5:ef:19:
         f6:12:f4:2e:21:e6:31:22:b1:2c:4e:3f:32:98:f9:c6:95:df:
         17:54:84:e8:c8:89:7e:67:1a:bc:3b:29:53:1b:a4:91:ac:a9:
         54:ea:7c:50:2c:b3:f6:a9:1a:3e:6c:92:43:47:bd:71:cc:8b:
         77:65:b2:b4:ce:91:dc:87:70:5b:3b:4d:24:7e:bb:22:c1:fa:
         09:3a:d5:cb:83:01:c1:f5:c7:0c:ad:1e:5f:22:5a:9c:a3:64:
         e7:7d:ca:44:7b:f5:d3:ca:b6:43:b4:af:8f:ae:d8:2e:87:e4:
         9b:e7:02:ec:f3:2e:b3:04:cf:e7:92:3e:ce:51:cf:98:71:ef:
         2d:4a:ab:f6:45:6a:e8:0b:e7:20:7f:79:85:54:e3:b1:b2:51:
         8a:3c:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----