Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233332e302f32342d3234203d3e20313437303839.roa
File:                     3130332e3137332e3233332e302f32342d3234203d3e20313437303839.roa (raw, json)
Hash identifier:          HUaGzbBOrZtAxtVbmQg/RQjEGpbm6Xd9WP5BvgS1Gyg=
Subject key identifier:   3C:47:19:A3:84:AA:24:D2:52:73:D6:50:FB:58:B1:A8:A3:2E:6E:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1577EC756C0118998ED0396C2CB4BA713A76F631
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233332e302f32342d3234203d3e20313437303839.roa
Signing time:             Wed 10 Nov 2021 09:10:22 +0000
ROA not before:           Wed 10 Nov 2021 09:05:22 +0000
ROA not after:            Thu 10 Nov 2022 09:10:22 +0000
asID:                     147089
IP address blocks:        103.173.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:ec:75:6c:01:18:99:8e:d0:39:6c:2c:b4:ba:71:3a:76:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 09:05:22 2021 GMT
            Not After : Nov 10 09:10:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:0d:c0:8f:07:20:fd:7d:33:bf:ec:c7:ca:
                    03:7c:25:77:de:ed:bc:4d:e0:5e:fb:27:ee:aa:56:
                    26:ac:7f:b3:09:6e:c6:71:4d:90:a3:9c:f6:44:27:
                    d3:83:56:48:e2:c6:57:98:ec:a0:3e:f4:cb:97:15:
                    07:ef:b9:3a:e2:b2:77:4f:6c:a7:3e:a8:f2:2a:e4:
                    a5:95:67:12:93:c6:2d:57:b3:fe:05:8d:fa:df:a8:
                    58:64:a0:d8:6e:45:6a:8e:70:2b:45:4e:5a:f8:96:
                    7d:ee:d0:83:62:28:2c:7e:da:d2:d0:79:d6:f7:3a:
                    0e:8d:be:24:1c:2b:c4:aa:a7:9c:2c:70:b0:67:80:
                    7a:53:83:50:b7:e8:7b:37:51:c3:52:16:31:ec:ed:
                    1d:60:09:bd:38:9e:04:ba:0c:66:7c:85:27:4c:fc:
                    aa:68:13:6b:09:14:6b:46:9f:2d:5a:be:31:a8:ee:
                    7a:2d:6e:b1:94:38:2d:83:de:43:49:a6:48:9f:97:
                    b7:fa:c3:01:b9:d9:e7:c0:8d:43:89:97:f5:a9:34:
                    5b:e2:a2:99:86:d7:8c:50:3f:bc:26:97:9c:8c:57:
                    14:4b:d6:94:87:b1:36:66:99:e8:60:47:40:75:ff:
                    77:15:95:61:8f:a7:f9:9a:1f:9d:3d:31:f6:c3:64:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:19:A3:84:AA:24:D2:52:73:D6:50:FB:58:B1:A8:A3:2E:6E:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137332e3233332e302f32342d3234203d3e20313437303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:82:cc:35:9a:16:b1:aa:52:c5:c6:25:f0:43:b4:48:59:
         b4:27:e0:71:98:b5:ff:22:3e:bc:c8:b8:63:36:49:3a:ac:66:
         6f:00:13:71:b2:64:76:af:27:40:1a:65:4a:74:41:83:af:f2:
         b1:16:59:9d:59:e8:5a:9d:86:11:13:fb:4a:82:8e:86:62:23:
         9d:16:7b:f7:78:48:29:58:1d:d5:60:94:ef:ba:60:df:70:94:
         50:7b:cd:ca:b6:91:4b:13:14:f0:a2:12:1a:da:37:75:d8:89:
         cb:d9:95:51:30:24:b1:f2:cb:4d:59:c7:c5:1f:b6:80:71:b8:
         2f:64:4b:9b:fa:98:b4:c9:42:d2:97:f8:0a:25:97:c7:56:bd:
         75:84:80:01:c7:2c:63:7a:4f:cd:53:6b:0d:36:85:dd:41:f4:
         66:6b:39:17:ef:b8:ab:34:0b:24:92:07:69:bb:70:ff:7e:64:
         18:16:f0:6f:49:91:ff:15:da:f7:af:0e:06:6c:8c:50:03:9b:
         8a:28:df:60:03:3e:3a:49:46:cd:bb:38:8e:24:6f:98:a5:4b:
         aa:5f:91:3e:07:36:14:93:8a:e9:91:7e:84:1b:5b:8f:ed:fc:
         a2:76:53:2a:81:ac:b2:2c:59:40:59:a5:af:1c:de:9e:c0:2a:
         4a:bd:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----