Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3131382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          SWJTbQO4FoqkHS23OxxzsIX/1lEODQqEZqspfJ+Td4A=
Subject key identifier:   BB:B4:25:F2:15:45:C4:BB:45:5F:1C:8D:0F:B6:E1:2D:DC:C4:09:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3726EA064F029544394B0BC0A188140A3E9243D7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131382e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:03 +0000
ROA not before:           Sat 26 Feb 2022 23:55:03 +0000
ROA not after:            Mon 27 Feb 2023 00:00:03 +0000
asID:                     17995
IP address blocks:        103.164.118.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:ea:06:4f:02:95:44:39:4b:0b:c0:a1:88:14:0a:3e:92:43:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:03 2022 GMT
            Not After : Feb 27 00:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:9d:39:81:e1:49:84:20:73:33:4b:df:71:
                    33:ae:b7:17:59:70:c8:95:ae:90:f3:d1:12:b8:18:
                    1e:6a:5b:64:32:d0:29:bc:13:cc:f4:1c:55:49:ba:
                    39:b8:e9:c3:ca:bd:58:cb:87:a4:82:ae:20:f3:f7:
                    1d:76:c7:40:b9:f7:ea:99:c9:4f:e5:74:00:6e:ef:
                    9f:a1:10:88:62:7b:d4:5b:5f:f3:05:33:f7:ff:c2:
                    81:77:5c:fb:4a:3b:97:f0:0b:5c:2c:09:bd:bd:fa:
                    a5:66:54:21:c1:d2:9b:9a:83:dd:ae:00:fb:e1:ab:
                    af:fa:c4:2d:d7:da:b4:e5:28:e9:12:8c:3f:fa:fd:
                    e3:33:29:0f:de:d0:a5:da:d7:e2:a2:67:b6:b1:1c:
                    11:f8:b6:28:d6:67:da:44:21:85:75:bd:ea:02:5b:
                    03:45:9d:f1:37:63:9b:e4:4b:d8:99:62:50:73:2c:
                    10:8d:35:9d:03:ee:f0:2a:c0:94:37:ec:32:94:63:
                    f3:f4:b3:ad:25:00:48:bd:6c:f8:4f:15:d6:dd:a9:
                    23:4d:80:bd:d3:ba:fa:77:f3:9a:0c:89:20:7d:ba:
                    be:d8:32:f1:35:86:a6:47:c2:03:a3:cd:24:9c:70:
                    77:5e:b8:8a:d3:f8:ee:1d:66:9b:eb:ca:07:30:67:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:25:F2:15:45:C4:BB:45:5F:1C:8D:0F:B6:E1:2D:DC:C4:09:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3131382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:47:06:9b:93:69:3b:d7:83:65:46:89:f0:bb:bd:a7:cc:
         58:2d:47:bb:49:2a:22:38:a4:81:02:05:a8:07:18:7a:5e:48:
         ed:b2:ef:44:e0:9c:70:f2:ed:67:a9:2b:05:11:28:77:37:90:
         a6:2a:07:91:ff:76:ed:93:08:a1:b3:19:84:5c:94:82:60:46:
         1c:75:9d:12:c6:7f:d4:38:19:d1:56:49:fa:52:83:c4:73:1f:
         3e:da:34:c1:1d:33:7f:56:ee:a9:6f:e3:68:de:f0:f2:4f:f8:
         bd:02:c3:67:19:61:03:e9:bc:4a:68:f5:29:8e:ec:01:4d:7d:
         98:7f:aa:f1:9f:0c:4f:f7:0c:06:80:c0:a6:ba:ba:ac:e5:01:
         7e:3f:c9:0b:8d:b8:55:b2:e2:36:c0:70:85:95:6d:17:b0:ff:
         40:f5:e0:7e:c3:73:e9:79:75:b7:ec:4b:b4:24:52:16:97:66:
         19:20:b9:d5:60:aa:24:81:01:5e:17:b2:11:66:3a:5b:12:df:
         f2:b9:42:8e:2a:9d:bb:d1:4f:80:33:59:07:c1:14:84:b2:a2:
         95:49:0d:1d:2d:7e:20:5f:1f:54:2c:d4:3f:80:90:6a:0e:1c:
         23:92:48:2d:17:36:e2:04:93:9f:a2:b7:18:cf:1c:a7:a2:48:
         82:63:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----