Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3132302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          +/5tUQjdvnY867GFEGt+JAVcNwYCj9IbVXHBjBbfUZw=
Subject key identifier:   F6:A1:81:D6:C0:08:D8:CE:F9:3C:89:3D:A9:76:5B:4A:A2:0C:A1:D9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16D5CA5D59A3EDCF897A42409EE57D12D9F023B7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132302e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:02 +0000
ROA not before:           Sat 26 Feb 2022 23:55:02 +0000
ROA not after:            Mon 27 Feb 2023 00:00:02 +0000
asID:                     17995
IP address blocks:        103.164.120.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:ca:5d:59:a3:ed:cf:89:7a:42:40:9e:e5:7d:12:d9:f0:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:02 2022 GMT
            Not After : Feb 27 00:00:02 2023 GMT
        Subject: CN=3082010A0282010100A3B0C5DBF43C6D255286CB1972C866E20EC53A268F065A08B31CD75313881D295497293FD9A08BA896EF64E0356E49E0F13CD23E9E72DF7D026A0FCCAB7FE29D76E7353D1659D402EEB457DD66B7E4280CA4DEA0516F0DD8982FF8E8C7490D3A8E26997BE03280CCADEA9AE6DBF48442D2C675108E2EAD42099E32BF0613D6B69C4D3517BD3E786908A1D9F1BA94F8D688E0E3B6CC8432F7DEF6F2564F56640032152AE4155F55F137F6E21AA02D7773587E7E53413B15E2411B8197943F67B8A89611E0E882F3900C7B4DE955CBC9F5638BF6EF1A50C58C068988FD107FE4ADCDEE8A5097E30FBFA2EA875C6C5CC0903903024207B111D14F055F471E3877E10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:c5:db:f4:3c:6d:25:52:86:cb:19:72:c8:
                    66:e2:0e:c5:3a:26:8f:06:5a:08:b3:1c:d7:53:13:
                    88:1d:29:54:97:29:3f:d9:a0:8b:a8:96:ef:64:e0:
                    35:6e:49:e0:f1:3c:d2:3e:9e:72:df:7d:02:6a:0f:
                    cc:ab:7f:e2:9d:76:e7:35:3d:16:59:d4:02:ee:b4:
                    57:dd:66:b7:e4:28:0c:a4:de:a0:51:6f:0d:d8:98:
                    2f:f8:e8:c7:49:0d:3a:8e:26:99:7b:e0:32:80:cc:
                    ad:ea:9a:e6:db:f4:84:42:d2:c6:75:10:8e:2e:ad:
                    42:09:9e:32:bf:06:13:d6:b6:9c:4d:35:17:bd:3e:
                    78:69:08:a1:d9:f1:ba:94:f8:d6:88:e0:e3:b6:cc:
                    84:32:f7:de:f6:f2:56:4f:56:64:00:32:15:2a:e4:
                    15:5f:55:f1:37:f6:e2:1a:a0:2d:77:73:58:7e:7e:
                    53:41:3b:15:e2:41:1b:81:97:94:3f:67:b8:a8:96:
                    11:e0:e8:82:f3:90:0c:7b:4d:e9:55:cb:c9:f5:63:
                    8b:f6:ef:1a:50:c5:8c:06:89:88:fd:10:7f:e4:ad:
                    cd:ee:8a:50:97:e3:0f:bf:a2:ea:87:5c:6c:5c:c0:
                    90:39:03:02:42:07:b1:11:d1:4f:05:5f:47:1e:38:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A1:81:D6:C0:08:D8:CE:F9:3C:89:3D:A9:76:5B:4A:A2:0C:A1:D9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:57:bf:ca:78:5f:43:bf:0f:c8:ad:0c:10:88:58:6d:1b:04:
         f6:f2:cb:15:f8:08:2f:f7:26:5e:86:2d:6d:8e:9f:db:a8:42:
         cf:4d:ab:d5:7a:46:4f:3e:da:32:56:c7:ad:53:21:71:a4:e4:
         38:e3:ef:ae:4f:60:08:04:28:31:a1:d1:49:1c:d6:39:a7:1b:
         e0:8b:9a:4d:1c:a1:69:9b:b8:f7:68:e8:bd:c2:ba:fb:21:6c:
         88:dc:f5:f3:2d:db:31:8a:97:81:94:8d:93:74:3b:4e:53:66:
         b4:4c:aa:27:3d:6f:13:2b:fe:cc:d8:9d:31:92:31:b8:d3:47:
         d8:06:91:08:5a:41:3a:4f:d6:88:d1:9c:a3:b9:2e:56:d0:99:
         91:6a:8c:e0:03:b2:c4:5e:8b:84:3c:78:66:0c:b4:f9:80:df:
         29:00:e3:2d:02:a1:3c:b0:9d:a5:d4:88:1c:24:4a:5e:0b:3a:
         18:56:c4:45:97:4a:d7:cc:ed:49:52:69:40:bc:90:67:ca:b5:
         9e:8a:d4:5f:7b:46:9f:e7:ca:06:c6:85:54:60:a9:55:54:f9:
         ad:8c:63:7d:15:99:3f:cf:a2:a7:ab:2a:3d:28:1a:19:dc:48:
         eb:80:5e:37:f6:a8:f1:b5:a6:1a:00:ad:30:97:99:1e:9b:0a:
         0b:11:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----