Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3134312e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136312e3134312e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          vFUbQJ9BhitCyB0PO7TZB3HMXj+Uek6xtkjE96rFPNQ=
Subject key identifier:   40:5A:EE:04:D4:0F:0F:36:92:62:03:45:E4:18:E2:B1:5C:A8:3B:D9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       15A177CC4AD272BD97CF8BCE7F18730E276862EA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3134312e302f32342d3234203d3e20313333383233.roa
Signing time:             Sat 29 Jan 2022 08:00:01 +0000
ROA not before:           Sat 29 Jan 2022 07:55:01 +0000
ROA not after:            Sun 29 Jan 2023 08:00:01 +0000
asID:                     133823
IP address blocks:        103.161.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:77:cc:4a:d2:72:bd:97:cf:8b:ce:7f:18:73:0e:27:68:62:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 29 07:55:01 2022 GMT
            Not After : Jan 29 08:00:01 2023 GMT
        Subject: CN=3082010A0282010100B3F08A721EEEA45E05E32DA029AF2FCC9F44F8D68E55C0B7C94354682B2AE05D671FDBD25654598788CF2092D1977677E85310EFE8A5957F4FB8726F5A1C51C1764CBA5FF8839E3080AB37688802E71DA1895A33F4FA51EAE3EDBB44F9144F1BE3A486DC0644E49B08D24D2DFC3EC57BB6EE31398DF548D3B9238C46BD9DE29DEF8EB15848FF533230266C8CBFDC9B7287B2D42206D2B750EC3882B8609A204A0E38E8877300271DC2DA78303FBF65584A3C38BE7B39D865A380406DCD1B89D5083B98C32E03B9937EBB2C81F65C7AB7F660CC95CED5F555CB383946EF10B4A35A5240D7D4F95175363A7FADD66E4520CB0407B8CA9370C1988DBBBBACE6C8950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:8a:72:1e:ee:a4:5e:05:e3:2d:a0:29:af:
                    2f:cc:9f:44:f8:d6:8e:55:c0:b7:c9:43:54:68:2b:
                    2a:e0:5d:67:1f:db:d2:56:54:59:87:88:cf:20:92:
                    d1:97:76:77:e8:53:10:ef:e8:a5:95:7f:4f:b8:72:
                    6f:5a:1c:51:c1:76:4c:ba:5f:f8:83:9e:30:80:ab:
                    37:68:88:02:e7:1d:a1:89:5a:33:f4:fa:51:ea:e3:
                    ed:bb:44:f9:14:4f:1b:e3:a4:86:dc:06:44:e4:9b:
                    08:d2:4d:2d:fc:3e:c5:7b:b6:ee:31:39:8d:f5:48:
                    d3:b9:23:8c:46:bd:9d:e2:9d:ef:8e:b1:58:48:ff:
                    53:32:30:26:6c:8c:bf:dc:9b:72:87:b2:d4:22:06:
                    d2:b7:50:ec:38:82:b8:60:9a:20:4a:0e:38:e8:87:
                    73:00:27:1d:c2:da:78:30:3f:bf:65:58:4a:3c:38:
                    be:7b:39:d8:65:a3:80:40:6d:cd:1b:89:d5:08:3b:
                    98:c3:2e:03:b9:93:7e:bb:2c:81:f6:5c:7a:b7:f6:
                    60:cc:95:ce:d5:f5:55:cb:38:39:46:ef:10:b4:a3:
                    5a:52:40:d7:d4:f9:51:75:36:3a:7f:ad:d6:6e:45:
                    20:cb:04:07:b8:ca:93:70:c1:98:8d:bb:bb:ac:e6:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:EE:04:D4:0F:0F:36:92:62:03:45:E4:18:E2:B1:5C:A8:3B:D9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136312e3134312e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:4a:10:26:97:2d:6f:46:4a:27:e8:8d:af:ca:fd:31:4f:
         81:37:f1:5f:5f:b3:b8:5c:df:7a:54:75:f2:3f:c4:ba:f5:c4:
         28:38:f8:e1:6f:cf:91:04:9b:48:81:b3:4f:d7:44:50:a0:ae:
         86:dc:f0:e8:91:64:1e:22:f0:29:53:27:4d:ca:8a:9e:5d:3a:
         4c:0e:f8:8d:52:1e:78:df:10:4e:5f:e6:57:07:ad:40:71:5f:
         1e:26:a1:15:02:7e:a9:8f:b4:d8:84:43:e2:5b:6d:06:a4:43:
         99:d8:78:03:6a:13:c5:51:a6:c7:1b:31:fa:be:24:8a:08:fc:
         d2:da:c6:8a:de:f8:a0:2c:3c:47:ca:2a:f2:1f:87:fa:45:ad:
         3f:45:6a:26:33:ba:43:2d:70:67:de:63:24:4d:65:a0:ad:de:
         02:fa:14:14:7c:61:e6:c5:56:5a:51:da:00:ec:ef:01:f5:91:
         9e:c5:0b:76:88:cf:61:f7:33:08:42:93:08:5d:4c:92:42:84:
         ba:a1:bf:b8:16:2c:a6:d6:20:c0:67:9b:6a:00:db:86:f7:89:
         9e:d2:a6:99:b6:fd:d4:b8:d2:98:64:7d:06:39:d9:97:89:f0:
         42:df:cc:bc:aa:74:89:09:65:b9:46:52:38:fd:50:b4:e5:98:
         93:8d:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----