Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3231322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          MqfWBxMTapAVrrIJCZat/t/9QCzgoqaxBkPE17qkuH0=
Subject key identifier:   6B:37:07:56:E0:2D:C2:B3:47:C0:3D:E9:9F:7F:C0:D8:18:BE:86:F2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18B791468264B843DC416D0AF3498D1F72115322
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:15 +0000
ROA not before:           Tue 02 Nov 2021 00:38:15 +0000
ROA not after:            Wed 02 Nov 2022 00:43:15 +0000
asID:                     17995
IP address blocks:        103.164.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b7:91:46:82:64:b8:43:dc:41:6d:0a:f3:49:8d:1f:72:11:53:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:15 2021 GMT
            Not After : Nov  2 00:43:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:9a:c2:c2:be:93:c9:c5:38:01:e4:a5:83:
                    c3:d9:ad:eb:a1:d2:fb:da:0f:c1:61:43:ec:66:3b:
                    0d:c9:7d:b6:ba:4e:58:65:01:bb:2f:c9:33:c5:6c:
                    6f:c7:e2:79:c6:86:b1:73:c3:59:f5:f3:81:95:d6:
                    78:ca:3a:94:83:15:6b:52:30:c4:35:bb:de:04:03:
                    e0:44:6e:4c:dd:26:31:6b:32:18:50:e6:aa:ee:24:
                    31:2c:5a:4f:d1:56:64:6e:4a:0f:42:bc:04:d6:e0:
                    a5:dc:18:0c:69:d6:1e:83:89:c6:b5:eb:21:bf:96:
                    47:2c:6e:9c:37:99:77:5b:2e:e5:b6:72:e0:f1:81:
                    86:41:06:e3:a1:23:dd:98:07:97:b0:84:ed:41:84:
                    98:db:78:f0:c1:f7:d8:99:85:3a:c3:35:a1:46:3b:
                    ac:a6:87:12:ac:0a:d4:32:e0:99:66:80:aa:f4:94:
                    e3:05:bd:3b:36:52:42:73:ba:0b:f6:3f:ef:03:ae:
                    d6:10:ba:e0:59:d9:1a:55:b6:8b:b7:a7:9c:63:e1:
                    ac:f3:76:9e:a6:43:c7:58:81:e6:c4:8f:e2:00:09:
                    b4:a2:7d:33:da:a9:09:55:ef:ae:8c:d7:bf:9b:be:
                    61:e5:86:c7:51:d2:4a:ec:86:2c:d0:e5:b4:e1:15:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:07:56:E0:2D:C2:B3:47:C0:3D:E9:9F:7F:C0:D8:18:BE:86:F2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:d0:c7:be:0c:59:4a:39:57:b5:0c:9f:45:87:c4:64:b1:
         9b:4e:7b:a4:4d:bb:be:eb:2a:7e:97:b4:af:9d:8f:df:c1:e6:
         14:04:ff:69:2d:02:2a:ab:ba:4e:7f:a0:c7:a4:0f:f0:aa:37:
         ec:f3:56:2d:4d:23:24:63:18:92:5f:44:c6:9d:a3:77:12:7e:
         96:ba:b9:e0:72:80:7f:c1:1d:06:17:ed:85:49:2e:34:d8:28:
         17:42:51:f2:35:f8:d2:1a:6a:c9:c8:d8:dd:71:b5:16:b1:74:
         d5:04:91:b4:8e:ed:24:66:3e:5d:10:df:e6:8a:a7:fc:22:cc:
         8d:8f:7b:96:59:42:f6:44:20:19:77:56:1a:9f:10:84:c7:16:
         3c:9a:4f:d6:64:d3:7f:ad:61:9c:82:3b:83:d6:1a:8b:1a:3a:
         1a:ee:bc:68:e7:13:b4:bf:bf:0a:bb:c0:70:6f:5d:bd:96:97:
         f1:c9:7d:5f:5c:51:4f:6d:fd:9a:62:32:11:5e:82:55:95:7d:
         c5:a5:4b:5d:73:9d:f4:ac:1f:ff:cf:12:e5:f8:d7:70:5c:37:
         c8:ee:61:94:a9:fa:27:74:6d:d3:c9:71:54:85:32:89:64:2e:
         c4:e9:74:e3:d0:f9:78:15:ad:d7:a6:72:01:bf:90:1b:12:ca:
         d1:e5:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----