Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3130342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          X75bNGWwI8Xn1Rjl0hkhWzp9vyGdATYye5Oei5eK8wY=
Subject key identifier:   F5:4B:F2:DC:10:E7:9D:7F:5F:34:98:54:81:3D:25:87:08:47:09:D2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       234F40A880F68BADC5F9986C0CB06242FB29D2CA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:01 +0000
ROA not before:           Sat 26 Feb 2022 23:55:01 +0000
ROA not after:            Mon 27 Feb 2023 00:00:01 +0000
asID:                     17995
IP address blocks:        103.164.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4f:40:a8:80:f6:8b:ad:c5:f9:98:6c:0c:b0:62:42:fb:29:d2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:01 2022 GMT
            Not After : Feb 27 00:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:4d:99:6d:21:72:29:06:47:19:f9:e1:7a:
                    10:8c:c3:a2:cb:ea:4a:f2:c8:bf:a3:3b:be:d2:3d:
                    15:d3:78:68:c2:a6:c1:dd:75:47:e8:a7:7a:21:c1:
                    cb:56:00:4e:a4:b3:9f:4c:54:16:d2:19:7b:f7:60:
                    b5:e9:ce:9d:2b:16:7b:0b:ec:a1:79:cd:d8:95:95:
                    53:15:33:ae:9a:b6:d0:9e:76:e7:6b:8a:47:ec:53:
                    b5:94:c2:d8:a7:9d:e4:75:b0:71:20:a5:ca:f0:9b:
                    5a:ed:e2:0f:a6:ee:43:07:02:84:d1:73:7c:8f:d1:
                    ad:ca:ca:43:50:9e:88:71:92:56:dc:47:4a:06:e5:
                    a2:c5:c3:27:e6:ed:04:7d:b8:7a:94:b0:15:4b:c7:
                    8b:1a:74:57:9f:a9:0b:25:65:45:81:9e:0e:da:bb:
                    53:7d:8f:45:1c:58:b4:4d:6f:84:37:2a:5e:b9:71:
                    01:59:10:b0:04:0e:6d:a4:c3:4c:18:31:58:d9:96:
                    d1:7d:83:c3:a8:28:81:ae:35:c4:c7:72:cc:21:d2:
                    1a:e2:a2:ea:8f:4c:fa:a7:50:ab:90:2c:d3:f6:4d:
                    fc:10:90:44:ba:53:d0:72:57:e4:fc:0d:bd:b6:d1:
                    73:3c:a3:05:c1:35:ae:6c:ce:16:49:57:28:2d:8c:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:F2:DC:10:E7:9D:7F:5F:34:98:54:81:3D:25:87:08:47:09:D2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:28:5a:86:3a:03:4a:89:cf:3a:58:f7:25:d0:c3:79:20:b8:
         e5:a7:32:bb:72:d5:74:2c:bf:41:be:b8:33:d2:7b:9e:c5:42:
         33:ed:24:d9:27:dd:36:77:b0:97:5a:b3:69:3d:5e:7b:58:52:
         9c:05:2e:8d:73:fc:7f:ec:4d:80:20:ed:99:c9:2a:a3:8c:f0:
         32:b7:e9:8e:c4:f1:9d:6e:20:4c:47:2b:ea:74:2d:8e:ba:8a:
         d5:4a:87:c0:17:f5:da:46:dd:15:8c:7b:b3:df:2b:95:ab:70:
         23:83:2e:ba:4e:94:df:9b:0b:11:9f:a0:71:7a:55:16:22:81:
         2e:58:2b:cf:7a:78:60:16:4e:93:b0:99:03:b5:d1:24:2e:65:
         8e:cc:b4:08:bd:a7:69:c8:f1:cb:48:a7:2f:5f:b2:59:d2:d8:
         0e:01:f7:f7:ad:ac:85:25:dc:c8:51:83:52:c2:5b:de:49:c3:
         96:5c:c6:1b:7e:ae:42:43:c1:e2:78:ac:7d:ff:90:f6:b3:ca:
         65:e2:49:fb:23:a3:05:b8:4d:36:e7:4d:8f:11:89:77:cc:59:
         65:68:11:75:71:b1:5f:82:d9:ae:95:d7:d8:ff:a1:0c:ce:74:
         1c:14:f9:01:16:15:b0:76:32:f1:66:58:23:5a:ec:de:de:02:
         f5:74:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----