Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa
File:                     3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (raw, json)
Hash identifier:          CuYY0Rxmt8VbOdmXO+LyGCKQvZgvHRT3Z8+kvQhODuc=
Subject key identifier:   C0:0B:53:27:0A:72:38:E5:02:BB:C0:E1:16:77:49:F9:00:74:7A:2B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D4F87177276B7053B64994FF5BD624B8732B7D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa
Signing time:             Mon 29 Nov 2021 08:41:52 +0000
ROA not before:           Mon 29 Nov 2021 08:36:52 +0000
ROA not after:            Tue 29 Nov 2022 08:41:52 +0000
asID:                     142385
IP address blocks:        103.172.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4f:87:17:72:76:b7:05:3b:64:99:4f:f5:bd:62:4b:87:32:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 29 08:36:52 2021 GMT
            Not After : Nov 29 08:41:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:a1:66:df:21:0d:7d:e5:78:42:55:94:e1:
                    6d:f5:fd:8c:c3:2d:7c:b8:cb:f5:00:2e:8c:7a:ef:
                    9e:2c:71:2a:27:e0:bf:f9:ff:f7:b6:2c:05:89:64:
                    e9:c0:6f:1d:3b:68:c5:a0:94:11:31:a9:5a:32:2b:
                    87:13:fb:c1:9b:ea:41:69:bc:4b:a2:ad:d5:40:fb:
                    a5:09:3d:eb:7a:5f:e9:50:c9:6c:4a:d8:81:59:6a:
                    4d:e3:54:f6:08:a5:c3:50:e8:fd:6e:c0:01:ea:08:
                    d4:f9:ef:08:9f:89:dc:00:65:f9:23:93:39:4d:49:
                    9d:fb:50:f1:5c:69:7c:81:44:6d:ed:d1:f0:44:10:
                    ca:ec:01:95:84:4b:05:78:60:c1:f0:7e:5f:94:01:
                    1c:86:b7:d4:10:66:12:63:8b:0b:a6:11:7e:ac:4b:
                    75:3a:7c:c4:39:2e:d7:10:ed:eb:0c:5c:88:6d:f7:
                    9b:d7:e0:bd:40:36:14:99:f0:0f:26:65:cc:c7:09:
                    69:3b:0a:74:14:a6:c3:fd:b6:66:83:9a:73:e2:4c:
                    a3:54:7b:9d:6d:f3:4e:dc:54:6a:47:a9:1b:d9:ba:
                    c1:8d:00:db:b4:e8:c0:df:7b:87:a0:59:28:93:d5:
                    d1:ed:06:93:72:97:43:51:88:e2:08:65:d8:fe:fa:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0B:53:27:0A:72:38:E5:02:BB:C0:E1:16:77:49:F9:00:74:7A:2B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:4f:66:76:c4:3b:3f:0d:f5:70:89:ab:1d:d6:81:8d:c4:
         a1:b9:be:94:38:78:52:1d:89:ad:6f:b0:79:8e:01:94:70:03:
         e7:46:57:b1:20:2f:d1:4c:13:c5:bf:37:06:b4:a1:38:1b:6f:
         be:71:01:1c:12:fc:a7:82:9f:30:f8:33:ee:4f:6a:15:3b:77:
         84:5c:ad:70:f0:52:43:cb:6e:fe:a7:19:e2:17:8d:5c:b7:d4:
         11:7f:40:e5:7e:7f:5d:9e:88:36:d6:d0:d2:72:af:52:cc:bf:
         e9:5e:32:c3:7c:cd:af:81:72:30:44:52:29:96:5f:80:f3:a4:
         9b:87:63:75:32:21:30:d5:a5:2e:cd:fc:79:0e:83:ed:4d:a9:
         22:06:05:7a:e1:9b:10:29:0f:9a:2d:38:ba:5a:52:fb:e7:de:
         8a:bc:4a:66:f1:a4:a2:a3:d1:5a:8e:57:32:be:fc:94:8a:7b:
         38:cc:35:d7:6a:84:d6:c4:2f:b1:4d:c8:b9:99:08:73:fd:5d:
         41:9a:51:12:8c:52:f8:d8:44:b1:50:42:86:36:cd:5c:7f:b8:
         af:8d:db:bc:50:be:77:8d:d5:22:2f:60:7e:73:f5:c5:fa:9e:
         a0:f1:50:ac:19:b4:ff:4b:8d:d0:10:fe:bf:4e:1b:37:6b:e9:
         88:9c:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----