Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3130302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          lUOLbyvyg7/4JHk7aL9gMIbg9folu7y2uXFXJMrnXlI=
Subject key identifier:   3A:E4:1D:27:EC:A7:A2:10:89:5A:09:70:7C:29:71:D0:87:80:B6:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0456039F2B138CB2034441AAE0F31F2D7FE4C4D1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130302e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:02 +0000
ROA not before:           Sat 26 Feb 2022 23:55:02 +0000
ROA not after:            Mon 27 Feb 2023 00:00:02 +0000
asID:                     17995
IP address blocks:        103.164.100.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:56:03:9f:2b:13:8c:b2:03:44:41:aa:e0:f3:1f:2d:7f:e4:c4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:02 2022 GMT
            Not After : Feb 27 00:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:24:b0:28:c8:6c:41:f6:62:13:0b:3e:e9:
                    64:91:16:7c:17:66:a6:be:e8:39:9e:82:58:68:1e:
                    f6:84:be:1e:58:ac:95:c3:76:cd:9d:be:7e:a9:fb:
                    40:44:23:20:2d:9a:6a:3e:91:31:d4:8e:d4:71:e9:
                    4b:de:a4:ca:b3:83:96:3a:b9:84:57:23:f8:53:77:
                    34:97:03:d4:e1:f9:ee:03:ce:40:24:14:5b:7b:96:
                    16:e7:dc:49:88:7b:d2:8f:87:40:21:8b:88:2e:13:
                    a7:33:d7:79:48:ab:21:46:13:c8:e8:4b:a1:28:57:
                    21:f2:6d:89:0e:a3:b3:82:7d:dd:ce:85:d1:84:69:
                    67:ec:6e:4b:2a:a0:64:01:51:54:5c:19:ac:53:d1:
                    24:6b:22:d0:4c:59:57:14:b8:ca:a6:f5:ff:3a:c2:
                    b3:fa:a3:25:3f:f9:89:1d:ff:b8:82:eb:eb:a6:73:
                    9a:f9:1f:30:da:9e:4f:57:41:9a:18:b4:d3:82:9e:
                    2a:57:66:24:38:68:91:48:d7:4c:5a:46:3e:ed:14:
                    38:6b:ea:4d:73:b8:48:54:a8:0b:1a:90:34:c7:2e:
                    ca:37:37:1e:80:2f:09:eb:c0:41:7c:e0:39:13:06:
                    eb:6d:ba:28:68:9c:75:79:9f:43:de:b6:83:b3:a5:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:1D:27:EC:A7:A2:10:89:5A:09:70:7C:29:71:D0:87:80:B6:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:d7:2a:16:8e:36:82:6e:f8:52:27:1e:b9:97:ca:ad:f6:
         57:bc:a6:31:46:b7:66:81:31:8a:d4:46:8d:78:fe:92:3b:e2:
         55:d6:ae:8c:55:40:5f:fe:e6:83:81:a7:e5:3e:1d:d7:0f:58:
         ed:3a:6a:ad:74:ae:c1:86:8d:81:61:a6:79:15:ba:9c:10:bc:
         63:4d:94:79:b6:0a:d0:8a:ee:67:7a:22:ba:3d:1d:1f:59:a2:
         5d:51:ab:3e:44:8a:14:de:e8:00:92:c8:95:85:b2:d4:3a:1b:
         88:11:fb:c1:13:ce:65:e5:5e:f4:f6:94:c2:18:4b:39:80:27:
         07:04:a0:38:14:1d:61:85:b6:fe:6e:ef:94:8b:f4:cd:7a:7d:
         59:48:61:4c:67:68:8b:69:06:0f:0c:cc:65:f0:7d:b3:47:ca:
         eb:3d:e9:76:a0:af:86:d5:0b:6b:c2:36:11:26:06:21:7a:3c:
         9a:f8:3a:76:ae:e3:3d:55:62:cd:2b:23:e2:61:be:0b:75:b6:
         57:9a:fb:a1:57:77:9c:61:7b:d5:73:ab:ba:2d:9c:1e:34:6b:
         25:4d:0e:b3:f9:d0:55:e4:55:02:e8:a3:25:00:9d:c4:91:b1:
         46:ae:ba:e9:d6:a3:3e:36:b0:4f:dc:56:8f:c1:01:f8:bc:42:
         4e:89:ea:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----