Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3136322e302f32332d3234203d3e203234353337.roa
File:                     3130332e3137332e3136322e302f32332d3234203d3e203234353337.roa (raw, json)
Hash identifier:          7t8KBnZyI7JuzYI8cs1/0llcg48DwBpfmHPHX80RRjA=
Subject key identifier:   79:71:67:AF:C0:6A:0B:B3:7D:3F:FC:D0:AC:90:98:47:05:10:2A:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2E794E1F6FDA8E546EF227A0D22686FEB223959D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3136322e302f32332d3234203d3e203234353337.roa
Signing time:             Mon 25 Oct 2021 04:01:25 +0000
ROA not before:           Mon 25 Oct 2021 03:56:25 +0000
ROA not after:            Tue 25 Oct 2022 04:01:25 +0000
asID:                     24537
IP address blocks:        103.173.162.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:79:4e:1f:6f:da:8e:54:6e:f2:27:a0:d2:26:86:fe:b2:23:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 25 03:56:25 2021 GMT
            Not After : Oct 25 04:01:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:df:05:b2:33:89:45:a2:4e:32:53:55:f4:
                    c7:9d:a8:d5:2b:bd:15:ba:1f:25:73:8f:3b:0d:89:
                    d2:94:9a:6f:ff:b5:52:ef:78:7b:bc:11:fb:57:a3:
                    43:86:81:d7:7c:d3:f1:98:f8:37:39:47:31:5a:8b:
                    64:ae:ba:db:d3:d4:2f:7b:a3:c5:82:b6:d5:42:7b:
                    e8:7d:0d:39:21:bc:fe:15:ef:52:05:f4:dc:33:a4:
                    c4:d0:eb:f4:bb:0e:68:f8:c8:77:03:79:8e:d2:fa:
                    90:f2:b9:ba:e3:ac:0a:ee:96:6e:99:9c:fe:0c:bc:
                    65:a4:29:e6:51:27:85:42:e1:a8:78:47:04:52:83:
                    c3:3c:55:a8:ad:80:30:20:0c:a3:f0:d4:24:08:a3:
                    b5:30:7c:b8:17:02:93:2e:33:13:84:0a:1f:e1:11:
                    e5:8d:17:f1:1d:9d:d9:a4:4e:de:c6:52:97:b8:3f:
                    e0:79:b9:8f:69:e3:c0:6b:d7:94:b9:b3:2d:ee:66:
                    a5:6b:81:8e:e5:68:99:a8:54:92:40:24:dc:16:08:
                    4a:6a:67:44:80:3e:f4:72:c3:d1:f7:a6:23:c8:4d:
                    31:39:40:52:fe:a4:59:ea:bb:2e:12:a4:fd:e5:d6:
                    a4:a5:95:a9:09:c2:29:e4:5e:43:a3:45:ee:5f:7d:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:67:AF:C0:6A:0B:B3:7D:3F:FC:D0:AC:90:98:47:05:10:2A:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3136322e302f32332d3234203d3e203234353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:79:74:c7:5d:5a:ff:a1:41:db:4e:f2:50:38:73:d8:91:
         4c:9e:ab:c3:48:6f:55:5d:af:c4:6f:01:24:52:84:33:be:0e:
         d6:e2:53:92:3a:74:57:5c:3c:7a:07:1d:b0:13:3f:16:07:76:
         c5:9b:a1:e6:48:75:e7:fd:51:4f:af:d6:f8:c7:86:f7:af:5e:
         72:da:d3:c2:60:21:95:a3:8e:59:84:3d:e4:d1:96:56:b5:a4:
         56:b7:7e:ac:55:2a:9b:f3:bb:26:1b:39:29:5c:7b:a2:02:98:
         b5:b2:2d:fd:34:0d:0a:3d:9d:3f:5b:f5:4f:01:25:8d:39:95:
         9d:c9:81:0d:70:2c:4e:d9:c4:d5:38:72:19:0e:e4:bb:38:c9:
         09:c2:75:b1:d7:fb:08:a0:14:8d:36:82:78:b2:56:5a:8a:ce:
         70:2d:71:76:b8:c0:10:89:4e:a9:69:91:29:15:7f:b9:89:04:
         41:58:fc:8d:c7:af:77:d7:92:34:14:61:fe:a5:43:82:3c:e3:
         08:07:9b:55:a1:79:95:dc:fe:2c:44:54:c7:89:ba:92:4b:40:
         e2:f8:54:e1:18:4e:82:bf:c7:36:00:96:98:c5:64:0a:71:5c:
         21:ee:66:e7:7b:f5:ef:f8:e0:70:41:be:07:56:a2:21:1a:ef:
         4f:8e:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----