Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32332d3233203d3e20313437303839.roa
File:                     3130332e3137332e3233322e302f32332d3233203d3e20313437303839.roa (raw, json)
Hash identifier:          /Wn61+qtXTwL4QXZDFeZz/gMCvo2REGKR4R8fuRH+DI=
Subject key identifier:   D5:57:3F:4A:4A:5F:D9:50:88:CA:5B:BE:AD:A7:BA:A3:AC:EB:99:C7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       13CF59D14EF43B638087754EDFF74BE3293AB6EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32332d3233203d3e20313437303839.roa
Signing time:             Wed 10 Nov 2021 09:09:35 +0000
ROA not before:           Wed 10 Nov 2021 09:04:35 +0000
ROA not after:            Thu 10 Nov 2022 09:09:35 +0000
asID:                     147089
IP address blocks:        103.173.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:59:d1:4e:f4:3b:63:80:87:75:4e:df:f7:4b:e3:29:3a:b6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 09:04:35 2021 GMT
            Not After : Nov 10 09:09:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:2f:79:03:3d:65:6c:bd:a2:38:ea:3e:54:
                    62:d3:d6:a2:76:b4:2e:04:ee:1b:2d:19:ae:ad:f4:
                    da:bc:97:49:db:ea:e5:ff:3a:c3:e0:d0:65:b2:fd:
                    09:a8:23:a1:a3:c9:c9:d1:8c:30:af:1b:e0:78:d3:
                    8d:bd:3c:5b:4c:4c:ef:a6:b5:79:6b:d6:2f:f6:b5:
                    13:67:e8:1c:b6:45:6f:57:4d:2d:a7:3c:9a:71:66:
                    32:d7:30:fe:08:08:80:6d:95:38:aa:c6:c9:a7:6f:
                    94:b5:76:f3:a6:24:d7:f6:a3:60:4b:af:16:4f:75:
                    d7:d9:f4:a7:b3:3a:30:47:ea:5b:0f:2c:6e:24:a9:
                    98:34:48:a2:17:86:6d:09:26:51:a7:ef:18:a0:84:
                    1b:c9:22:15:47:5f:b1:7d:32:8d:15:5a:21:dc:d0:
                    2e:0a:9d:8b:3a:0f:12:53:57:25:ab:06:6f:49:2f:
                    12:0c:8f:c0:ca:4f:f4:c2:0c:11:01:50:63:67:06:
                    0f:c5:7b:bb:6c:b7:39:f9:a6:35:12:b9:3c:d6:6a:
                    4b:bc:bb:1d:2d:30:5a:45:b9:38:6c:e5:91:16:eb:
                    7e:8d:ba:9e:d4:2b:bd:58:7a:77:1b:55:2b:3a:14:
                    40:95:e6:fd:8a:ff:00:33:2d:af:a1:b9:aa:30:c6:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:3F:4A:4A:5F:D9:50:88:CA:5B:BE:AD:A7:BA:A3:AC:EB:99:C7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233322e302f32332d3233203d3e20313437303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:76:9b:21:a7:0b:b8:f0:c4:51:32:7a:ac:25:5d:93:c3:80:
         98:39:42:8d:04:64:e6:e5:b2:a3:cd:36:67:89:0c:6b:31:f8:
         ba:f8:ff:47:8d:b6:4c:63:14:c6:70:53:05:6c:91:7a:aa:74:
         62:f3:cd:7a:be:30:56:44:e6:4d:e0:d1:35:6c:d6:a7:48:a8:
         84:46:bf:a8:73:6b:b4:c1:7c:03:d1:9d:b2:e6:ce:23:e9:e9:
         da:00:00:5f:17:f0:0b:0c:91:3c:12:8b:a0:2a:ee:da:81:6c:
         a7:38:3c:6d:e2:1a:6b:af:36:f0:26:d8:a3:78:1c:50:c7:fd:
         15:5c:4a:15:21:13:67:50:cf:21:d8:c6:ab:1a:0f:5f:72:78:
         77:0a:94:fb:f7:f9:c3:c3:20:fa:0f:a4:a2:6c:21:7c:a9:ee:
         c9:94:7e:15:d2:2b:1e:13:fc:80:87:b0:41:ed:83:8c:6b:cd:
         7a:20:00:8c:cc:34:dc:87:44:fc:db:08:1a:95:74:e6:e7:dc:
         93:bc:89:86:cd:e1:57:7d:ac:38:1a:ed:d0:03:a3:a7:07:c0:
         c0:08:b1:23:59:16:c5:96:cc:7f:cf:81:f2:a6:86:05:d3:be:
         98:e3:8c:b7:c8:20:37:7b:84:bd:2a:b2:01:27:60:cb:07:e2:
         79:4c:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----