Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e39382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e39382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          AfZsKN3U0isJxfd76AnGpvfG1bHAuPct0NmHaiDMEHg=
Subject key identifier:   CA:89:3B:1E:7B:C0:4C:CA:9F:DB:7E:3A:5E:03:B3:6E:11:24:EA:13
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       41FE78E7E4497E9AAB83C64F7CECD3DD8D8037CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e39382e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 27 Feb 2022 00:00:02 +0000
ROA not before:           Sat 26 Feb 2022 23:55:02 +0000
ROA not after:            Mon 27 Feb 2023 00:00:02 +0000
asID:                     17995
IP address blocks:        103.164.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fe:78:e7:e4:49:7e:9a:ab:83:c6:4f:7c:ec:d3:dd:8d:80:37:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 26 23:55:02 2022 GMT
            Not After : Feb 27 00:00:02 2023 GMT
        Subject: CN=3082010A0282010100B72A30C5D28EA326A5165DE96D21E0E51B7A7DB93A8EA61919109D108DECD9FBF23E5F603DAE5B0F15A030E86D9D60918F98CE4553A71A32EFD59F78B9CFAF1927CF28B04A98741657F0C27DA2D274DA4EF75A1C57D0157A6719330587608202A404A99EBF05FD40D8A5FDD14AA1A5D371CF1A1C43B76D9A47B506D61C093C16FD496BB8D2001D4A8ADF970F10703FF0FEE3E3F323E1B245FBF6233132A47669DF69C229FB155DC6DF22179DE80327E85C4E65288B08714F038313F853F9A52CD2D9498F596602BABE58D7D6DA53B7C99B864F8962B040A38C366AFE1B255B90706020D5D2E58A04D0D9E9B03057462BFB6F401B39CEE432D352E9936449DB010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:30:c5:d2:8e:a3:26:a5:16:5d:e9:6d:21:
                    e0:e5:1b:7a:7d:b9:3a:8e:a6:19:19:10:9d:10:8d:
                    ec:d9:fb:f2:3e:5f:60:3d:ae:5b:0f:15:a0:30:e8:
                    6d:9d:60:91:8f:98:ce:45:53:a7:1a:32:ef:d5:9f:
                    78:b9:cf:af:19:27:cf:28:b0:4a:98:74:16:57:f0:
                    c2:7d:a2:d2:74:da:4e:f7:5a:1c:57:d0:15:7a:67:
                    19:33:05:87:60:82:02:a4:04:a9:9e:bf:05:fd:40:
                    d8:a5:fd:d1:4a:a1:a5:d3:71:cf:1a:1c:43:b7:6d:
                    9a:47:b5:06:d6:1c:09:3c:16:fd:49:6b:b8:d2:00:
                    1d:4a:8a:df:97:0f:10:70:3f:f0:fe:e3:e3:f3:23:
                    e1:b2:45:fb:f6:23:31:32:a4:76:69:df:69:c2:29:
                    fb:15:5d:c6:df:22:17:9d:e8:03:27:e8:5c:4e:65:
                    28:8b:08:71:4f:03:83:13:f8:53:f9:a5:2c:d2:d9:
                    49:8f:59:66:02:ba:be:58:d7:d6:da:53:b7:c9:9b:
                    86:4f:89:62:b0:40:a3:8c:36:6a:fe:1b:25:5b:90:
                    70:60:20:d5:d2:e5:8a:04:d0:d9:e9:b0:30:57:46:
                    2b:fb:6f:40:1b:39:ce:e4:32:d3:52:e9:93:64:49:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:3B:1E:7B:C0:4C:CA:9F:DB:7E:3A:5E:03:B3:6E:11:24:EA:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e39382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:2a:2b:c1:31:d8:53:86:a5:18:e1:07:9a:c1:dc:17:7f:
         fb:4f:f2:33:bd:ed:e5:9f:fb:89:7c:8b:64:2a:43:fa:7c:68:
         25:db:95:03:9c:f5:d3:ff:74:d1:c6:80:ac:32:12:4e:00:68:
         ea:f1:ea:7d:be:9f:2b:5f:b5:2a:54:8c:50:83:91:0f:b7:71:
         ee:9d:1e:96:af:91:e8:ad:75:b5:f6:6f:46:cd:10:79:13:68:
         69:ab:6e:49:0f:60:93:4e:53:0c:3d:ba:60:02:eb:5c:75:bf:
         03:8e:52:9d:89:d6:fb:ca:f8:49:ab:b2:fd:43:de:58:7e:bd:
         00:4a:f1:30:72:c2:43:fc:3d:42:61:20:49:4f:74:34:38:53:
         d1:f3:52:db:2c:16:f7:73:b0:b2:ec:a0:ad:70:14:6d:57:f5:
         50:32:6d:93:bf:4a:a3:ed:91:44:93:04:54:e5:a4:de:89:b1:
         56:9a:29:d5:d1:d8:86:67:41:29:d0:1c:b2:bb:6e:ed:7f:5a:
         e0:bc:09:08:3d:03:b8:b8:81:ba:fe:6d:65:db:74:c2:70:47:
         e1:c9:a0:40:03:81:8d:02:e4:b8:f4:85:1a:2d:48:f8:16:26:
         d6:d4:44:c8:23:8c:7f:e8:8b:70:83:65:4b:1e:27:9c:c2:78:
         46:22:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----