Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3131322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          nwddxoIRGqzEuLx2BTJA4g010K1liWPfmL9rUR5TnRo=
Subject key identifier:   5B:8B:7D:FF:25:B0:CF:F7:8A:95:74:8C:5E:79:1F:E0:A1:25:DF:A7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D8AF4F89709371BED2C01B3A736DABE5E4DCDB9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131322e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:00 +0000
ROA not before:           Sat 26 Feb 2022 23:55:00 +0000
ROA not after:            Mon 27 Feb 2023 00:00:00 +0000
asID:                     17995
IP address blocks:        103.164.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:f4:f8:97:09:37:1b:ed:2c:01:b3:a7:36:da:be:5e:4d:cd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:00 2022 GMT
            Not After : Feb 27 00:00:00 2023 GMT
        Subject: CN=3082010A0282010100E596F02F4E869A7191F55983534F8FEC54F1BBFE541A87B9630DFE06E6B44D69A3E258ED98ECC17E5B2AF808539B3C1846A05C2EA09DC7C0B1F973FC72AF6EB4F15F933D5614ED1BADD2EDE2DE43F3BF09FA9659A974B3ACB85197B651AE3257FF5028BBC5C5206454F4DE8FFD9DE9298CBFBC0BA333F1EE766FA18858D099F9438806B5FE868FFD3ADA3C4492D463A437E4E1FE2EA472945EBFB563013FB23FC5431135B12A09CCF1E16BA7DCE02BE260BFCA264625D274DF15F8FB00456CFD6658D79B9DDC89C8056C20663C9465E10ED1B3B55869D85E24D2490F890882863E94FE7D5CCF74DB540361E9B781B48AC842CD29D3AA8B1AB31B4E860CF7ED350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:f0:2f:4e:86:9a:71:91:f5:59:83:53:4f:
                    8f:ec:54:f1:bb:fe:54:1a:87:b9:63:0d:fe:06:e6:
                    b4:4d:69:a3:e2:58:ed:98:ec:c1:7e:5b:2a:f8:08:
                    53:9b:3c:18:46:a0:5c:2e:a0:9d:c7:c0:b1:f9:73:
                    fc:72:af:6e:b4:f1:5f:93:3d:56:14:ed:1b:ad:d2:
                    ed:e2:de:43:f3:bf:09:fa:96:59:a9:74:b3:ac:b8:
                    51:97:b6:51:ae:32:57:ff:50:28:bb:c5:c5:20:64:
                    54:f4:de:8f:fd:9d:e9:29:8c:bf:bc:0b:a3:33:f1:
                    ee:76:6f:a1:88:58:d0:99:f9:43:88:06:b5:fe:86:
                    8f:fd:3a:da:3c:44:92:d4:63:a4:37:e4:e1:fe:2e:
                    a4:72:94:5e:bf:b5:63:01:3f:b2:3f:c5:43:11:35:
                    b1:2a:09:cc:f1:e1:6b:a7:dc:e0:2b:e2:60:bf:ca:
                    26:46:25:d2:74:df:15:f8:fb:00:45:6c:fd:66:58:
                    d7:9b:9d:dc:89:c8:05:6c:20:66:3c:94:65:e1:0e:
                    d1:b3:b5:58:69:d8:5e:24:d2:49:0f:89:08:82:86:
                    3e:94:fe:7d:5c:cf:74:db:54:03:61:e9:b7:81:b4:
                    8a:c8:42:cd:29:d3:aa:8b:1a:b3:1b:4e:86:0c:f7:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:7D:FF:25:B0:CF:F7:8A:95:74:8C:5E:79:1F:E0:A1:25:DF:A7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:ee:cf:fa:e3:5a:4b:79:b2:48:c5:68:ae:29:1f:f8:71:
         3b:5c:42:ae:5d:d4:fb:6b:39:49:f5:fd:06:53:15:41:97:ed:
         88:e5:4e:ad:97:bc:84:5a:1f:e1:4c:5d:0d:4b:1c:99:39:23:
         e5:6d:04:58:a5:68:2c:ad:6f:79:90:6e:02:1b:25:b9:c1:81:
         46:d8:06:8f:df:46:9c:dc:bc:93:70:dd:de:7f:2f:c4:a3:e0:
         6a:ef:ef:8d:06:b4:1b:78:78:41:b2:f1:31:1d:9b:5d:e9:08:
         42:4c:83:b1:64:8e:f1:4d:33:02:80:10:9a:df:b3:6f:00:c1:
         5d:2f:76:e8:55:3d:fa:a1:3c:b2:fb:44:41:06:2e:f4:a5:d1:
         1d:dc:24:ff:99:26:87:63:69:b0:d8:42:12:44:d7:71:c8:e1:
         65:be:4f:29:17:5c:af:af:d4:82:ca:89:bc:0d:52:f9:52:77:
         a9:11:80:42:79:f9:0e:f7:a3:e3:c0:f1:99:65:8e:1d:73:1d:
         a3:2c:cc:c7:4a:f8:cd:06:d1:dc:21:73:31:b2:9e:6f:5a:af:
         29:cb:37:13:e2:3b:16:16:8b:ce:7b:62:b5:2a:ab:ad:f3:3a:
         eb:8e:24:11:26:ea:6d:58:3a:78:37:a2:3f:88:f4:2b:03:f4:
         e0:c0:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----