Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38352e302f32342d3234203d3e20313336303532.roa
File:                     3130332e3137312e38352e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          /9HBXhlLvws2y285FEYrEZyqRjvGxmj/+Bmc2pLvLQk=
Subject key identifier:   65:D3:28:BA:1D:2B:C6:F4:C3:11:29:1A:FB:BC:E7:FB:31:19:0D:E7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       549C9C68E0533B0F21853C36E3AE0963F05521D3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38352e302f32342d3234203d3e20313336303532.roa
Signing time:             Thu 27 Jan 2022 23:30:31 +0000
ROA not before:           Thu 27 Jan 2022 23:25:31 +0000
ROA not after:            Fri 27 Jan 2023 23:30:31 +0000
asID:                     136052
IP address blocks:        103.171.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:9c:68:e0:53:3b:0f:21:85:3c:36:e3:ae:09:63:f0:55:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 27 23:25:31 2022 GMT
            Not After : Jan 27 23:30:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:99:40:77:26:b5:d9:3b:00:5e:43:f3:db:
                    6d:2b:ca:fe:8c:34:bd:85:46:b3:8a:ac:35:c6:9b:
                    44:91:d1:be:9c:91:64:bd:b1:8d:58:2e:db:e8:1f:
                    db:1d:98:5c:0c:71:b6:4e:e0:0b:40:ec:e7:2e:e9:
                    3d:2f:6e:72:c5:13:ac:93:4a:83:4c:56:fc:d1:71:
                    d2:a8:cf:d0:da:45:00:93:dd:64:37:1e:42:54:f1:
                    ca:50:1d:c1:95:f6:8d:6d:af:81:69:dc:12:c8:32:
                    50:07:d3:9a:d9:89:0b:a8:52:eb:39:1b:6f:e3:4f:
                    70:77:72:5a:f3:8f:33:8e:fc:f2:49:bd:1d:ab:4e:
                    a3:ee:5d:6e:05:4e:42:89:25:ff:0f:ec:fc:a3:04:
                    d8:77:05:ec:6e:17:11:9f:83:6f:62:de:80:39:a2:
                    de:6d:22:8d:ec:c8:e0:a6:fc:8a:31:3b:80:39:94:
                    8a:85:0d:95:c2:2f:70:ca:09:a1:ac:59:79:08:52:
                    7c:b8:94:59:0c:6a:66:be:2f:78:51:04:92:09:b3:
                    58:49:23:ed:38:3b:6a:32:c4:9a:71:35:08:b7:47:
                    ea:46:1c:23:31:8b:44:84:4c:1e:ca:09:f0:f3:09:
                    c6:ed:2a:f9:2c:58:e9:a8:74:15:7d:39:e3:83:ca:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D3:28:BA:1D:2B:C6:F4:C3:11:29:1A:FB:BC:E7:FB:31:19:0D:E7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38352e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:d7:18:aa:06:9b:f2:ee:46:c0:0b:4b:05:16:30:c3:44:
         5a:33:b2:10:0c:74:c9:b2:d1:a2:76:ed:4b:03:50:be:53:9b:
         bd:21:2b:ca:70:15:bd:c5:e5:9c:33:08:ed:69:a2:33:98:ca:
         10:7a:a9:65:35:86:49:b0:35:fb:5e:5e:b6:22:f5:9b:9a:34:
         75:89:9e:f3:52:c0:a0:c3:3b:c8:25:e5:ea:04:c6:fc:7c:9f:
         ee:c7:1e:d9:0a:67:25:d1:08:d2:b7:ec:ee:b0:ae:a5:c6:55:
         bb:42:e3:a2:e2:0f:e4:b0:fd:29:4f:55:5c:1f:00:c3:67:78:
         4f:ed:5e:5f:61:ea:6e:50:cf:b2:9a:06:64:4e:d4:dc:98:c1:
         e6:71:de:ad:c7:b4:e1:a8:6e:00:8a:23:43:b8:d6:3f:cf:ed:
         74:f0:26:8e:bd:eb:f3:1a:9e:ab:76:a4:24:cb:93:64:41:3d:
         b2:e9:4d:54:36:29:25:1e:8a:f8:8b:ed:fb:5f:42:f1:c8:43:
         5f:fb:32:af:b5:3e:d9:00:cc:d6:6a:cd:5a:a6:36:03:cf:e7:
         07:b5:0f:87:83:29:c3:90:59:93:70:0b:ae:0e:30:f5:44:47:
         07:8e:28:44:58:0a:95:cc:75:08:ce:5e:54:1a:3d:49:00:ae:
         b8:02:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----