Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31372e3136342e302f32342d3234203d3e20313331373834.roa
File:                     3130332e31372e3136342e302f32342d3234203d3e20313331373834.roa (raw, json)
Hash identifier:          dw/+vFPUpsviYIyIz2ocBcT00QK8rzw0LiTo6BSvW3s=
Subject key identifier:   34:A2:D6:16:09:71:B0:77:18:AE:8A:34:D7:A7:A0:7D:55:AE:30:39
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       473E871ECEEF8288892CFE5CA7DF9C523E231707
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31372e3136342e302f32342d3234203d3e20313331373834.roa
Signing time:             Sat 20 Nov 2021 04:00:00 +0000
ROA not before:           Sat 20 Nov 2021 03:55:00 +0000
ROA not after:            Sun 20 Nov 2022 04:00:00 +0000
asID:                     131784
IP address blocks:        103.17.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:87:1e:ce:ef:82:88:89:2c:fe:5c:a7:df:9c:52:3e:23:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 20 03:55:00 2021 GMT
            Not After : Nov 20 04:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:85:d3:da:1a:a0:8b:64:d5:95:79:3e:1a:
                    8e:fe:0b:6b:06:fa:01:7f:57:14:4c:90:17:70:02:
                    8c:6c:ab:3a:7f:a6:cb:d6:e2:90:de:97:60:43:a7:
                    7d:b2:17:f8:fb:e5:68:8f:fa:69:48:11:3c:68:c4:
                    03:55:34:4d:e0:31:77:6c:21:ac:83:6a:0c:c1:7b:
                    c2:6d:79:a6:f1:65:6c:11:62:69:af:db:53:8c:7e:
                    d9:f5:77:5c:b7:6c:43:29:96:da:fc:a8:78:54:dc:
                    c0:37:dd:2e:da:8a:8a:b1:b1:8c:6a:e0:59:a6:5f:
                    02:25:ec:a5:4d:e0:40:4d:bc:ab:6b:45:59:3b:ca:
                    dd:32:80:88:e2:d3:a7:70:02:1f:91:1a:67:08:6f:
                    e7:ff:dd:54:f5:ed:25:0a:18:d1:fc:9b:a3:eb:25:
                    ad:d6:c4:20:72:d4:fe:1c:b8:4a:88:50:78:1f:85:
                    89:2b:11:17:18:73:e5:eb:18:56:80:af:aa:b7:7e:
                    6c:19:aa:3a:31:5a:d9:49:97:c2:e4:56:c3:31:f6:
                    63:3b:06:d8:5d:48:f9:bb:d9:af:09:e6:ef:4d:cd:
                    46:19:93:7c:a7:20:d5:b9:8b:a8:e7:7e:e4:b7:c5:
                    d6:1d:55:38:2a:c4:ae:ac:bb:59:9e:cd:50:bf:48:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:D6:16:09:71:B0:77:18:AE:8A:34:D7:A7:A0:7D:55:AE:30:39
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31372e3136342e302f32342d3234203d3e20313331373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:55:0d:ff:59:52:c1:11:00:a6:b3:dc:85:e9:89:a6:6d:92:
         a1:0d:26:b4:d3:26:02:88:55:75:0d:78:da:ac:e7:01:98:13:
         26:85:28:05:02:e1:a6:04:72:c7:92:c6:b5:06:83:34:5d:c9:
         f9:42:e7:73:f1:b9:0e:65:65:32:ec:d5:ca:0a:cf:27:4d:c0:
         ef:6b:11:84:6b:61:bd:74:c2:20:63:7b:2d:47:a7:80:19:60:
         40:30:4f:cb:9a:16:41:2e:c6:5a:50:8b:5d:01:4f:c9:9b:51:
         c0:92:12:ae:20:f7:da:d7:c4:9c:08:2c:d7:02:f1:75:5e:90:
         1e:97:ee:5c:ab:cc:b4:b1:d6:d7:22:0b:70:e8:83:fb:9e:b4:
         c3:0a:3b:60:41:ca:09:bb:5b:aa:9c:ce:e2:49:fe:f6:b7:be:
         01:94:cb:d0:e9:5d:9f:d7:d0:49:3d:d7:38:c3:b7:20:ee:01:
         76:24:5c:63:8c:d2:68:68:15:ae:6d:76:dd:0a:c4:d0:75:0c:
         64:32:8d:7b:3a:d6:26:bb:e2:89:83:10:1f:47:fe:7b:a8:f1:
         59:11:e2:99:d9:5b:be:c3:ca:ce:88:71:af:2a:fc:76:90:6c:
         e5:29:22:07:0f:3c:4c:7f:b8:27:42:04:ad:41:0c:5c:53:cf:
         53:de:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----