Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3139342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          0C3C6FuyHDN7WqP/2tuDOIoghZawy1BGhFzx8o/NggQ=
Subject key identifier:   41:CA:82:89:43:6A:17:33:CF:55:BA:F5:21:7F:5B:BF:2C:7B:CE:F7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B3BC2B40FC80A15A4D61928ED0CEE9EB36F9C8E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:17 +0000
ROA not before:           Tue 02 Nov 2021 00:38:17 +0000
ROA not after:            Wed 02 Nov 2022 00:43:17 +0000
asID:                     17995
IP address blocks:        103.165.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:c2:b4:0f:c8:0a:15:a4:d6:19:28:ed:0c:ee:9e:b3:6f:9c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:17 2021 GMT
            Not After : Nov  2 00:43:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:12:63:51:90:59:f4:69:26:e5:4a:fa:03:
                    66:e7:37:5a:e6:7e:93:5c:fc:f8:5f:42:eb:78:57:
                    55:b4:f9:53:35:ab:ee:31:d4:7c:d6:d9:05:d0:c1:
                    23:b4:ca:30:4d:47:22:dd:b6:46:dc:4d:94:2d:10:
                    b5:2e:12:d8:ba:11:d4:de:1a:37:40:a1:ac:b6:63:
                    05:b9:fa:27:2a:02:32:08:12:84:34:28:eb:a9:93:
                    ce:6b:33:fa:c9:29:1d:87:b9:85:c4:b9:aa:77:d3:
                    87:29:e6:bc:ad:d9:9e:b5:26:03:c3:1d:12:de:4e:
                    95:15:53:d2:d4:02:a4:3f:e2:a4:5b:e2:5b:02:f7:
                    80:08:ed:57:26:de:37:e4:63:e8:3f:27:4d:92:4d:
                    5e:5c:05:5e:42:66:c1:9d:04:d2:16:9e:9a:7a:30:
                    b8:e0:54:09:57:5e:1c:43:92:4d:62:c0:d5:cd:9a:
                    58:6f:bd:ac:1a:88:52:61:72:bd:0f:0d:8c:06:78:
                    09:73:47:87:00:94:96:9e:af:e6:9d:6a:5d:8d:c6:
                    52:f2:c3:da:3e:79:f7:81:21:61:2c:da:56:69:27:
                    77:6f:04:08:cb:f1:c4:bd:e1:41:18:7a:11:90:a5:
                    2f:b8:e9:4c:54:4b:de:52:93:3b:0d:99:e0:bb:f2:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:82:89:43:6A:17:33:CF:55:BA:F5:21:7F:5B:BF:2C:7B:CE:F7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:19:83:20:30:84:f2:93:78:66:d0:03:3b:ce:a4:b2:15:ca:
         07:f5:59:42:86:01:e0:6a:16:ec:0b:32:5c:7f:e2:f8:54:5a:
         3c:3e:cc:3a:32:5f:10:d6:1a:c6:f0:1b:cd:b3:d4:c2:48:bc:
         f6:50:d8:bb:c2:88:7d:5c:8c:a1:aa:c2:61:fe:df:b2:83:cd:
         83:48:c1:11:11:22:49:56:83:1a:b2:4f:b3:e8:3b:f3:4d:92:
         1a:51:43:3a:f6:23:81:a6:92:44:4e:f5:8b:8b:e4:4d:cf:52:
         2c:c5:55:61:c9:5c:2c:44:4e:79:e7:5b:27:ff:1e:ab:65:90:
         96:58:7f:35:aa:f4:ce:41:66:c4:04:7e:62:d9:41:22:7f:95:
         e8:74:a3:79:2f:2a:8a:58:71:36:91:04:01:48:d8:ea:9c:1c:
         be:20:6b:73:a9:27:01:09:a8:82:39:aa:8f:07:0d:7e:55:ea:
         d0:ac:8e:10:79:7b:e2:e2:d7:ce:e6:bf:4c:cf:52:6d:3c:6c:
         5a:68:45:28:4d:71:2a:97:4c:1b:cf:28:ad:96:99:a2:d8:c0:
         e5:4b:62:2b:03:0e:66:bb:e2:11:7e:97:b1:9b:40:78:3e:b8:
         4f:c4:24:41:20:b9:56:a1:b7:75:c1:3b:d6:d9:c1:93:cb:e1:
         bc:32:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----