Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3130362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          xId5paFbQ2YthIrj3pBwM8bTpbI8tSc3HlJHYUhQxxI=
Subject key identifier:   C4:B1:8A:71:41:BD:25:8A:FB:90:1F:EF:2A:F9:20:9A:9E:73:81:9E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A0D2518EABA90374F33941DF927145A7E74E94F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130362e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:02 +0000
ROA not before:           Sat 26 Feb 2022 23:55:02 +0000
ROA not after:            Mon 27 Feb 2023 00:00:02 +0000
asID:                     17995
IP address blocks:        103.164.106.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0d:25:18:ea:ba:90:37:4f:33:94:1d:f9:27:14:5a:7e:74:e9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:02 2022 GMT
            Not After : Feb 27 00:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:cd:f4:19:e3:db:e0:61:0c:c5:7b:54:16:
                    e6:bd:f6:ac:e6:85:1d:c9:1e:03:83:7e:bd:ea:af:
                    6c:57:d8:4a:52:7e:02:c4:27:cb:f5:0a:05:1c:56:
                    00:d7:09:0f:9c:04:c9:b0:2e:18:14:c7:37:eb:41:
                    9e:ee:6b:1b:e9:56:d1:35:27:f5:ab:a0:76:5c:34:
                    b8:8e:9b:ee:a0:b7:a8:cb:9f:e1:4c:b6:1a:15:9f:
                    f3:d1:c2:96:93:38:64:cd:20:6d:95:a3:f0:e8:a7:
                    8c:72:38:c4:5c:92:f1:00:2b:02:f8:14:74:5b:28:
                    ee:b5:e3:49:ea:53:17:66:29:7e:f6:43:41:b6:5f:
                    9f:65:59:30:38:15:73:c7:46:b4:d6:e1:2e:50:55:
                    18:87:f2:f9:7e:da:52:c4:a3:2f:30:f5:c8:22:35:
                    78:e1:11:65:63:df:5f:a5:46:89:32:16:fb:0f:45:
                    d1:5d:8e:af:b6:bc:12:f8:ba:e5:ff:74:ac:98:29:
                    07:b2:9d:cc:27:27:ba:5b:76:58:d7:14:f0:fc:30:
                    be:bf:5b:a8:d3:e9:f8:fb:f1:e6:9f:c1:9f:20:d6:
                    cb:d1:5a:90:4a:38:cd:e7:d4:28:7f:f8:b4:d2:b3:
                    3d:b2:7f:4e:84:3f:7e:34:f9:07:19:35:1e:b3:38:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:8A:71:41:BD:25:8A:FB:90:1F:EF:2A:F9:20:9A:9E:73:81:9E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3130362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:14:06:2f:b8:0f:1a:c7:7a:b1:21:3c:e6:d7:cc:03:9a:4e:
         5f:70:8f:21:69:68:d7:31:34:5e:8e:60:2d:94:56:80:b9:48:
         52:6b:72:19:36:29:9b:9a:e1:0d:d8:a7:e7:bb:c4:89:95:51:
         36:52:20:c8:7f:da:d2:f0:11:b5:c4:c5:e1:5e:8c:a9:bf:5a:
         d0:af:0e:72:aa:22:f0:16:a9:40:01:48:f5:90:9b:3e:10:fc:
         a2:36:79:f4:8f:12:c2:48:0d:1e:6d:18:ec:42:8d:46:89:9e:
         dd:29:52:31:3e:be:cd:7b:e9:4c:ec:b8:98:00:a5:3b:07:86:
         59:dc:dd:3b:69:f5:73:9b:9a:3d:8e:6b:fa:70:dc:61:f7:c1:
         8e:44:4e:f5:c2:65:57:23:4b:86:18:d7:91:a8:20:96:63:12:
         49:9a:c4:a7:40:5a:52:98:0f:04:8b:28:c3:d4:40:d5:96:4c:
         3e:a7:dd:f3:09:89:04:1c:e7:6e:82:42:0d:2b:4e:8b:f0:96:
         a4:d6:db:cf:ca:bf:8c:9f:da:a5:63:c0:57:37:9c:af:14:15:
         1c:2c:19:9a:15:38:47:ef:56:8d:15:d4:43:a4:6a:80:e1:af:
         ee:71:9f:cd:69:6d:62:1a:78:11:f2:a3:aa:16:72:e9:a7:e3:
         a7:ed:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----