Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3131302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4HuPDMgazNX7MukXIQmuaThP0ZJi8xbaesfW2XG55KI=
Subject key identifier:   1D:0C:62:38:E8:F6:79:15:34:DA:86:1C:8B:A2:E4:2C:FB:DC:61:B0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4FB9FC751731B21C3D2314D31EB50BC7C294F6D5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131302e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:01 +0000
ROA not before:           Sat 26 Feb 2022 23:55:01 +0000
ROA not after:            Mon 27 Feb 2023 00:00:01 +0000
asID:                     17995
IP address blocks:        103.164.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:fc:75:17:31:b2:1c:3d:23:14:d3:1e:b5:0b:c7:c2:94:f6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:01 2022 GMT
            Not After : Feb 27 00:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:51:0f:3f:fe:1b:fd:2e:6e:b7:d3:ee:e3:
                    1f:37:f2:dc:11:bc:3f:9c:c6:32:88:00:ea:25:36:
                    1c:c8:e6:19:93:73:c8:5d:ff:a3:d9:bf:08:cd:77:
                    b5:69:28:8d:13:a8:63:99:af:bc:36:40:c5:46:60:
                    91:8d:61:31:06:4a:b7:6f:b3:fe:85:78:fe:63:3a:
                    4d:05:7e:b9:5e:26:9f:2c:68:52:b9:01:73:a4:51:
                    cb:73:d2:fd:82:64:98:41:7c:ba:5b:0e:c9:6c:13:
                    80:4d:b4:6b:06:96:cf:25:9e:d8:76:7d:e0:70:97:
                    d5:f8:97:d9:9b:08:55:c4:75:b1:f2:cb:5a:22:e3:
                    68:de:80:ec:a1:0b:64:c0:d3:c1:e1:9b:c5:39:a2:
                    c7:da:f9:ea:5b:c9:e4:eb:1c:a5:11:78:ce:96:73:
                    0d:66:2e:43:a0:0c:9a:47:3b:11:f2:4d:12:b9:e1:
                    8f:66:29:8b:26:79:6e:61:2f:b7:6a:6d:6b:12:20:
                    67:9f:d6:d1:b9:c0:67:44:f4:c2:71:39:de:fe:76:
                    40:4a:ef:6f:b1:47:b7:8c:14:85:5a:03:6d:19:28:
                    00:cb:08:57:c8:72:ca:7f:bb:da:ec:a4:70:9c:68:
                    03:e3:e5:ed:fd:da:26:cc:98:23:ec:ab:8e:c3:aa:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:62:38:E8:F6:79:15:34:DA:86:1C:8B:A2:E4:2C:FB:DC:61:B0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:45:45:78:12:11:fd:59:1c:ce:bb:4f:bc:85:41:aa:78:d2:
         d4:2b:24:f9:93:7b:6e:43:d8:b9:80:8a:b3:95:4f:f2:26:5d:
         08:3c:80:7e:ac:48:a2:ae:85:ce:28:17:91:77:13:ab:66:f8:
         7b:04:80:b1:c8:a2:db:0c:c2:63:d9:d0:38:81:f3:d3:5c:ca:
         40:35:be:e2:fc:46:13:2c:8e:4d:43:c3:b1:cf:2b:c6:7f:e8:
         11:05:e6:02:50:ce:f8:a7:64:37:37:dd:bc:83:e5:cf:d9:d8:
         ec:93:4c:95:7a:ad:cf:99:a2:2e:be:27:5e:98:34:ba:51:b3:
         08:43:f7:9f:26:32:2a:72:a2:9e:f6:57:4c:99:f1:c7:25:e3:
         be:63:a5:c3:47:8c:b9:1d:00:29:88:b6:18:98:bb:49:c1:47:
         b8:36:13:e8:c7:1b:e3:05:b3:1f:20:64:fa:e3:b0:51:6a:00:
         c8:b3:67:9d:8f:41:df:e4:59:98:18:43:b8:91:d4:d4:20:9f:
         25:68:b8:89:fe:fc:57:3a:87:7c:97:f5:b1:99:05:57:e7:01:
         bf:79:7b:7b:4d:55:03:c1:b4:f1:dd:9a:e1:31:8c:a8:99:cb:
         54:8b:a3:30:ef:ea:93:09:a1:ce:dd:47:e3:15:8f:69:8f:a1:
         10:86:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----