Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3231342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          3fFOP18E4r6Gj2aqi2V2X3ARSVu/PMQm6qCBojncQJs=
Subject key identifier:   30:69:DE:75:CB:3E:0F:01:16:D8:33:3A:BB:E3:D4:2B:80:65:8D:D9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C95C919A32251BD9430C5EC21240137E5274EB9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:15 +0000
ROA not before:           Tue 02 Nov 2021 00:38:15 +0000
ROA not after:            Wed 02 Nov 2022 00:43:15 +0000
asID:                     17995
IP address blocks:        103.165.214.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:c9:19:a3:22:51:bd:94:30:c5:ec:21:24:01:37:e5:27:4e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:15 2021 GMT
            Not After : Nov  2 00:43:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:0d:a5:3a:ae:4a:86:4d:c2:0d:14:6a:77:
                    f5:f3:c6:0f:d5:4e:d2:e7:bb:54:6b:fa:c3:a3:28:
                    84:04:85:f4:96:51:2d:a1:97:e8:e8:8d:53:06:f9:
                    51:16:48:4e:a9:d3:38:a1:31:c0:7e:f9:fb:fb:87:
                    0c:c3:9e:b7:17:38:ad:fb:d1:ac:f3:80:3e:ac:a5:
                    05:a4:fa:6e:68:e1:c5:23:c2:79:2c:d8:35:91:da:
                    ee:08:fd:e6:68:2e:5c:23:85:b3:b0:85:fd:be:b7:
                    24:15:83:67:1d:60:ff:8c:76:d7:f5:4f:7c:9f:a8:
                    f3:19:48:e8:af:01:cc:12:f5:a6:9f:58:33:dd:f3:
                    7f:ba:e9:eb:4c:f8:b8:3a:e3:99:5b:de:13:fe:2a:
                    2d:1d:8c:4f:75:9e:a6:11:59:c1:3b:ee:4a:43:82:
                    ad:f4:ea:48:1c:72:f0:bb:d3:fd:0d:3c:0e:ef:95:
                    23:84:d6:d0:7e:33:91:a7:0c:1b:ba:b1:d4:42:b1:
                    29:70:4c:c3:36:06:90:a4:ad:cd:2e:b4:88:7d:e5:
                    9a:64:67:75:aa:3d:32:0d:ff:41:14:26:03:11:ee:
                    33:84:25:47:d2:cc:06:fc:13:a4:6d:6a:53:40:33:
                    56:44:4e:69:40:09:4f:7e:21:8b:74:c1:ea:b1:39:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:DE:75:CB:3E:0F:01:16:D8:33:3A:BB:E3:D4:2B:80:65:8D:D9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:ea:32:f8:a5:f9:b6:6d:f0:2c:20:7f:76:ac:55:e1:4f:
         86:1c:a7:41:ca:a6:57:9c:4a:b5:ee:4e:be:92:77:d2:0e:b2:
         81:50:7c:2c:df:74:7f:e5:66:47:31:d3:c3:10:c1:f3:81:8f:
         a2:f9:27:38:1d:af:6e:bb:34:55:9e:92:6c:e3:2d:09:41:42:
         66:ae:b7:be:81:dc:7f:53:f4:ce:44:f4:80:89:c9:0b:5a:3a:
         0e:36:8e:0b:4f:54:f6:fe:ca:02:33:8c:c2:be:4e:e4:d8:ef:
         1f:21:17:14:37:53:00:7a:a0:fa:9b:fe:c2:00:43:4a:2e:b4:
         45:e2:fa:33:50:89:42:22:a7:76:c8:cf:8e:d9:fb:ab:21:21:
         02:bd:e9:7e:78:b1:01:33:bc:f8:a5:f4:a5:2c:eb:c2:1e:8b:
         9a:8b:c9:a0:ab:1d:c2:be:cc:62:2c:23:37:d3:4e:cc:cb:cf:
         b4:61:d1:c1:78:0b:ca:5b:9b:c0:6d:8d:08:37:33:1c:d3:6d:
         91:73:59:4d:a6:00:f8:e3:db:3b:4b:47:f6:df:7e:37:79:64:
         21:df:a4:4d:e3:47:24:79:c7:03:26:b1:81:df:83:b6:0e:f0:
         07:51:58:47:27:cb:60:d5:5d:f3:6c:53:7f:da:27:39:ab:86:
         4a:17:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----