Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3132342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          7aAcd5aMuO8h/DjjvY/3GF01CK25nCPOojUGUIiLa/I=
Subject key identifier:   2E:91:6C:90:83:09:65:F2:FE:25:D1:A1:58:BB:0A:DC:4B:62:F2:1F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       097C445921CE1C9DF46227DA534B8599D78E0B5F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:01 +0000
ROA not before:           Sat 26 Feb 2022 23:55:01 +0000
ROA not after:            Mon 27 Feb 2023 00:00:01 +0000
asID:                     17995
IP address blocks:        103.164.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:44:59:21:ce:1c:9d:f4:62:27:da:53:4b:85:99:d7:8e:0b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:01 2022 GMT
            Not After : Feb 27 00:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:27:a5:a1:55:da:10:89:09:49:79:3e:04:
                    41:fb:8c:42:a2:67:f1:69:98:13:53:ea:e5:d9:39:
                    30:c6:e2:f2:86:88:bf:b4:18:6a:23:92:79:36:a1:
                    c1:09:d3:68:30:ae:31:3e:6f:ad:41:25:1f:a8:70:
                    bf:06:e6:5b:ef:cb:77:72:1f:99:61:a6:b4:d6:51:
                    5e:42:b0:b9:c7:ce:50:21:b5:8b:44:82:cd:06:c6:
                    7e:86:bb:8b:9b:a4:26:93:77:59:6f:48:24:8a:a0:
                    cf:5e:2e:6c:76:6f:11:d8:3f:aa:70:e3:29:f6:05:
                    17:65:1a:92:06:f0:3a:8f:d2:99:e4:b5:72:96:ac:
                    e7:d5:ed:7a:b0:46:86:99:1f:27:77:e0:a8:44:8a:
                    19:91:5a:c6:1e:e4:54:24:17:f3:bf:42:20:f7:86:
                    f5:2d:4e:ea:66:e6:b0:c0:5e:8b:a4:cd:b1:bc:83:
                    f6:e8:7e:66:c9:18:dc:78:de:f4:33:b8:d0:2f:73:
                    ed:3b:be:60:28:84:c5:24:71:f9:4e:c6:76:85:d6:
                    eb:32:ae:0d:b0:52:ef:88:78:a9:1e:1e:73:10:9e:
                    cb:c3:c5:c7:97:ae:dc:86:83:bd:97:30:d3:47:2e:
                    a1:e2:6c:d3:ae:6f:5c:8e:4e:cd:31:50:55:d4:3f:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:6C:90:83:09:65:F2:FE:25:D1:A1:58:BB:0A:DC:4B:62:F2:1F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3132342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:85:d8:52:6b:91:28:eb:84:fb:f7:6e:60:45:d1:f2:01:
         49:c3:12:fb:18:5d:14:b3:31:2c:41:53:09:8e:b0:e3:39:0e:
         04:3b:d7:3e:22:13:db:f5:ec:10:5e:23:94:25:05:5a:16:ef:
         48:e5:e5:6f:9f:09:41:34:73:79:93:33:56:59:6b:95:7f:3f:
         3b:bc:1d:13:41:c1:ce:55:30:74:32:10:e0:e9:f2:21:ef:17:
         75:2b:d4:23:03:c5:05:95:99:e7:50:7f:82:2f:eb:e8:5d:d1:
         db:d5:c5:fa:ac:8b:7a:43:6a:f2:0b:fb:3f:21:11:0b:fa:93:
         a3:49:4c:82:80:7c:4b:85:10:e5:e9:86:15:fd:1f:d6:84:f8:
         10:4f:5e:25:80:ce:cd:b7:d0:c5:de:1d:9a:ba:38:04:6f:79:
         a0:7d:08:ea:e2:b1:81:6c:65:fd:f1:63:42:d8:e9:2b:0a:f1:
         e0:8b:94:23:8d:08:79:ae:0b:f9:a4:59:39:53:1d:9d:0e:a8:
         7a:cb:ec:03:b3:03:5a:01:8b:bd:3c:38:59:cd:46:81:ae:20:
         bf:02:22:a0:a6:f0:85:14:0f:f6:8b:79:3e:98:db:45:95:1f:
         a4:16:07:6b:de:ff:57:ad:eb:5c:f4:08:25:5a:e0:18:c7:46:
         82:24:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----