Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3135342e302f32332d3234203d3e20313338303737.roa
File:                     3130332e3136302e3135342e302f32332d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          9g2Ij8m6lEn0xag7D0kjBVAEPyLBNEXOqiE08D160ao=
Subject key identifier:   B7:1C:F0:ED:8E:C2:75:58:A9:29:E4:53:A9:DD:51:56:4B:81:25:D1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7079E067D06E925158ECF7486D26161FB7108BC2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3135342e302f32332d3234203d3e20313338303737.roa
Signing time:             Sun 21 Nov 2021 06:00:01 +0000
ROA not before:           Sun 21 Nov 2021 05:55:01 +0000
ROA not after:            Mon 21 Nov 2022 06:00:01 +0000
asID:                     138077
IP address blocks:        103.160.154.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:79:e0:67:d0:6e:92:51:58:ec:f7:48:6d:26:16:1f:b7:10:8b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 21 05:55:01 2021 GMT
            Not After : Nov 21 06:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:9e:d8:60:68:33:9a:b8:7e:86:93:dc:10:
                    44:39:44:77:fb:6c:65:ad:80:3a:55:da:08:3e:97:
                    43:66:d6:19:48:3d:1a:d2:f4:e6:da:19:96:6b:3c:
                    9d:96:29:18:e4:88:c2:39:b9:0a:29:40:a6:fc:93:
                    d9:4a:e0:a7:77:15:9b:60:a4:b9:79:dd:c7:57:e2:
                    68:b8:09:c0:78:f1:6a:1d:91:0a:1f:d4:cd:82:6a:
                    af:63:89:4f:fb:1e:e2:ba:70:78:d0:43:07:13:ec:
                    cf:ff:2f:ea:85:f5:1b:fa:61:78:10:72:fe:e0:91:
                    03:d0:d2:e6:b7:3d:1f:56:ae:1b:64:e9:74:20:69:
                    75:8d:53:c2:c5:fc:f9:db:02:10:bf:a0:26:e8:e0:
                    1f:3e:33:57:1a:69:3f:89:c4:dd:77:99:ec:e6:f4:
                    91:75:ea:52:b0:5e:33:b2:7f:f0:a2:61:03:b0:2d:
                    df:d1:be:77:20:8a:e4:ba:3a:8a:5a:15:d6:34:57:
                    f8:06:97:3f:eb:18:35:31:a1:a1:9d:f8:d5:6e:f5:
                    f5:65:0d:91:34:e7:1d:b6:40:05:6d:41:06:88:d8:
                    b5:ec:43:6c:a3:84:a7:59:f7:6f:73:2d:c8:f9:c2:
                    82:ea:d6:fd:49:72:d1:17:0d:d9:61:9d:dc:f8:4b:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:F0:ED:8E:C2:75:58:A9:29:E4:53:A9:DD:51:56:4B:81:25:D1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e3135342e302f32332d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:a8:9c:8c:71:75:e1:37:b4:7b:26:99:6f:2f:10:89:12:
         5b:be:ec:0f:0d:11:7b:f6:ca:27:29:31:49:a1:a6:4b:b3:3b:
         87:a0:f2:81:73:36:4f:97:fd:f3:12:bd:f0:49:66:80:51:71:
         a8:11:63:9f:0c:2d:07:11:b0:94:67:cb:f4:21:95:6f:53:23:
         e3:f7:e6:17:c4:a4:74:1f:0d:09:15:b7:4f:d3:a9:83:24:eb:
         30:fe:53:01:99:3f:b8:a2:57:a2:11:87:05:f9:73:1f:70:d8:
         2c:80:4d:b1:e6:65:5d:20:7c:b6:b9:cd:77:96:42:db:92:95:
         54:e1:e6:5d:5a:29:7d:65:1b:ee:e7:66:c4:fe:a2:3c:f5:3f:
         27:19:a7:d0:f1:11:33:25:ed:f5:a4:c6:3c:22:a1:43:c3:22:
         d2:77:d9:a0:b0:69:f2:17:a6:f2:c3:30:8b:1b:fe:73:3b:6c:
         fb:ac:a2:97:21:e9:38:bf:ae:e2:ed:17:9e:c8:a0:30:0e:39:
         dc:82:61:c1:8e:ae:2e:41:35:60:5a:77:4b:4b:66:e5:bd:89:
         1b:75:04:18:a4:75:ca:6f:56:37:7e:7e:d8:5b:72:30:7f:f8:
         be:25:bc:92:24:7a:c7:91:24:fe:c2:de:7f:de:ab:b9:3e:c7:
         80:d1:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----