Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3130322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          LBQ3VipFLHXOT68HReO5zKOmSqJTrRVvig8V4yv5OA4=
Subject key identifier:   BB:97:1D:C9:EE:1F:3D:C4:E0:65:F7:2D:68:44:FF:83:0A:46:EC:CE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B39100199CFEDBD5539DD3FDF9DA736C803F071
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130322e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:01 +0000
ROA not before:           Sat 26 Feb 2022 23:55:01 +0000
ROA not after:            Mon 27 Feb 2023 00:00:01 +0000
asID:                     17995
IP address blocks:        103.164.102.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:39:10:01:99:cf:ed:bd:55:39:dd:3f:df:9d:a7:36:c8:03:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:01 2022 GMT
            Not After : Feb 27 00:00:01 2023 GMT
        Subject: CN=3082010A0282010100BA95871161FD01EBD401918958542D0744585CECF610765BFB5785DF5F2FC2A2421EC5C979F39B2C73575C07557DD53B2CDBE5B8A0371D7594F6C6B0E193F5CCF9ACD1DDAE728640C36BAF909D4971304A81F910703E266249CFB5E9F4E9888F1B94CB0883CA337A2D5A028069656B7986535916499B143A93B8923E20337331E25EA504055230EB211038D0F6CF5DA61065E58CE1B407596E26035C3A68781407E517F6A4820E8CE825F479413E33455706124C8BC467B9BEC495C3C773FBE04E4AF1B0F8C160E599B0CCD8D1341C7B2E59B1A6198D4C741BB413BCBF7274183A1001ED6C05637A0C849D9F8543BB855BB7F69AF8EE1CA868B4B1D62753CC9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:87:11:61:fd:01:eb:d4:01:91:89:58:54:
                    2d:07:44:58:5c:ec:f6:10:76:5b:fb:57:85:df:5f:
                    2f:c2:a2:42:1e:c5:c9:79:f3:9b:2c:73:57:5c:07:
                    55:7d:d5:3b:2c:db:e5:b8:a0:37:1d:75:94:f6:c6:
                    b0:e1:93:f5:cc:f9:ac:d1:dd:ae:72:86:40:c3:6b:
                    af:90:9d:49:71:30:4a:81:f9:10:70:3e:26:62:49:
                    cf:b5:e9:f4:e9:88:8f:1b:94:cb:08:83:ca:33:7a:
                    2d:5a:02:80:69:65:6b:79:86:53:59:16:49:9b:14:
                    3a:93:b8:92:3e:20:33:73:31:e2:5e:a5:04:05:52:
                    30:eb:21:10:38:d0:f6:cf:5d:a6:10:65:e5:8c:e1:
                    b4:07:59:6e:26:03:5c:3a:68:78:14:07:e5:17:f6:
                    a4:82:0e:8c:e8:25:f4:79:41:3e:33:45:57:06:12:
                    4c:8b:c4:67:b9:be:c4:95:c3:c7:73:fb:e0:4e:4a:
                    f1:b0:f8:c1:60:e5:99:b0:cc:d8:d1:34:1c:7b:2e:
                    59:b1:a6:19:8d:4c:74:1b:b4:13:bc:bf:72:74:18:
                    3a:10:01:ed:6c:05:63:7a:0c:84:9d:9f:85:43:bb:
                    85:5b:b7:f6:9a:f8:ee:1c:a8:68:b4:b1:d6:27:53:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:1D:C9:EE:1F:3D:C4:E0:65:F7:2D:68:44:FF:83:0A:46:EC:CE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:f0:d1:62:7e:7f:76:46:0c:e2:3c:e8:35:9d:5b:c0:cb:
         af:bc:a1:b4:b6:9e:bb:15:92:66:7f:3e:75:78:20:4a:fb:e7:
         04:88:ff:26:cb:5a:6d:92:76:f3:4e:8d:e1:72:55:51:81:83:
         f9:6e:64:75:b3:ed:f5:97:a7:63:4a:7c:c0:ce:53:28:f3:70:
         c1:15:0b:d3:89:44:c8:63:56:cc:4e:26:af:8a:92:e2:82:21:
         de:78:a7:3f:1c:45:9b:5a:8c:76:00:ca:a1:11:2d:23:f0:10:
         4d:84:83:74:b7:94:52:7c:3e:62:99:0e:37:7e:67:26:38:5f:
         44:11:f3:7e:7a:53:bf:79:a2:35:94:76:da:35:b5:fb:3a:98:
         dc:8a:a7:3f:9d:aa:7f:8e:0c:b2:7e:d6:5d:ff:7d:96:89:ae:
         79:68:18:b1:bb:88:78:19:8d:3d:a5:0c:89:d6:99:97:0a:11:
         79:f6:1f:0a:39:cf:19:1c:d3:ef:1a:cb:a2:82:9e:29:b2:d4:
         a8:0a:64:0d:4c:fe:09:d5:84:ab:5c:1d:70:93:c7:af:42:39:
         f6:18:ea:49:f3:9e:48:61:85:4b:db:d2:fb:62:f8:c9:22:c4:
         cd:c1:54:8f:1e:dc:6c:1c:6e:00:67:4d:04:d2:f6:f1:60:51:
         28:b9:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----