Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132322e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136392e3132322e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          HY3z6RpH+AC/jVv6emP0vYmppjvhG+yz05MoCiWX53U=
Subject key identifier:   52:DC:8E:B0:50:29:8A:07:16:CA:57:85:E8:C8:7B:7D:7D:E9:4F:09
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B854288520A022B2041862C4EC766F7771FAFA6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132322e302f32332d3234203d3e2039383735.roa
Signing time:             Wed 29 Sep 2021 01:11:34 +0000
ROA not before:           Wed 29 Sep 2021 01:06:34 +0000
ROA not after:            Thu 29 Sep 2022 01:11:34 +0000
asID:                     9875
IP address blocks:        103.169.122.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:85:42:88:52:0a:02:2b:20:41:86:2c:4e:c7:66:f7:77:1f:af:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 29 01:06:34 2021 GMT
            Not After : Sep 29 01:11:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:a5:5a:4e:98:ca:12:47:c7:e2:63:3d:28:
                    b4:d0:91:95:5e:21:12:fe:64:f8:af:aa:ea:14:7b:
                    23:8f:ed:31:90:c6:a7:0e:4d:04:13:48:28:2b:c0:
                    6b:e5:d9:15:e1:6e:d7:42:0f:25:bc:ae:b1:9d:60:
                    3b:23:cf:85:61:4b:d8:3e:50:8e:d8:df:63:e1:3d:
                    1f:a0:62:27:ec:df:d6:54:36:4a:21:7d:1d:d2:15:
                    2e:c9:82:3f:aa:1d:f3:bd:f9:15:f8:5f:ee:d6:08:
                    5f:4d:e2:3c:b7:01:e1:1a:26:d8:3b:15:8a:d4:95:
                    b6:ab:f9:3e:5f:1a:5b:79:da:50:31:5e:1b:ed:1b:
                    bc:63:3b:0b:a7:b4:7f:08:ed:a3:6a:6c:99:1e:1c:
                    51:35:69:9d:c7:22:f9:19:e7:70:b2:3c:94:8c:18:
                    9e:a5:cd:46:8a:e3:9f:ac:80:0f:1b:89:69:01:10:
                    54:d6:ae:64:2f:32:5e:81:c1:35:77:29:a6:18:bf:
                    05:c1:e1:42:ca:89:aa:2d:ab:f7:a3:fa:65:30:00:
                    70:77:59:53:3a:7f:4a:2f:6a:d9:56:b8:36:be:ad:
                    3b:bd:08:13:46:d8:7e:01:6e:ac:9d:71:d5:67:2d:
                    42:a5:09:6d:82:34:6d:0f:b5:24:ea:f0:73:b4:e5:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DC:8E:B0:50:29:8A:07:16:CA:57:85:E8:C8:7B:7D:7D:E9:4F:09
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132322e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:c9:3e:1c:5f:df:9a:7d:ab:3e:d1:5f:b5:db:c6:d8:f3:
         2b:e6:05:af:4c:3a:66:8b:2e:7c:9b:ee:9f:2e:5e:a7:fe:1e:
         01:d9:2d:ab:cc:01:c9:4e:6d:13:5f:f9:6f:26:d7:66:95:12:
         0f:a4:e8:52:07:ba:4e:aa:7b:43:d1:b4:b3:de:5a:8e:31:63:
         bd:ee:84:6b:f4:c9:4f:b2:d4:a2:69:31:ac:62:f6:ff:df:79:
         bc:3c:cc:86:22:e1:9d:f1:9d:c2:f5:06:d3:39:b3:f0:93:49:
         70:15:0f:67:66:5c:3f:97:8f:ba:4b:c3:d5:78:57:13:99:e2:
         b3:e3:1a:39:77:c9:7e:f0:cb:68:de:4b:9b:ca:a8:24:5d:25:
         91:c6:22:27:85:f7:ad:7c:58:3e:fa:c7:4a:30:2c:5b:e3:3c:
         3f:1e:e2:a1:df:ad:36:e8:0a:03:e2:bd:64:46:4d:5b:af:14:
         c5:fb:9f:90:3d:28:6c:b7:63:30:fd:75:a6:cd:c6:77:14:fc:
         24:c2:66:88:03:5a:8c:6e:dd:9d:bf:65:71:15:f3:c1:42:03:
         16:da:ab:4c:a2:18:55:0c:8a:07:54:62:1d:a7:ac:63:37:81:
         27:d2:c0:fc:98:6e:6f:e3:77:06:f4:9f:f1:f4:03:a2:f8:a3:
         e8:53:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----