Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3131342e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3137342e3131342e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          RNaVb2urJr+SOK2KitrnpYlUsrW/aQd9wBIu+WiNOhU=
Subject key identifier:   E3:8C:74:EC:F0:05:13:3D:56:82:63:42:0A:55:10:48:FB:A3:88:BF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       76132C64B818A4CF4F16DC48F05A887FC31E70DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3131342e302f32332d3234203d3e20313336303532.roa
Signing time:             Wed 17 Nov 2021 01:07:05 +0000
ROA not before:           Wed 17 Nov 2021 01:02:05 +0000
ROA not after:            Thu 17 Nov 2022 01:07:05 +0000
asID:                     136052
IP address blocks:        103.174.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:2c:64:b8:18:a4:cf:4f:16:dc:48:f0:5a:88:7f:c3:1e:70:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 17 01:02:05 2021 GMT
            Not After : Nov 17 01:07:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:98:32:32:ee:80:c0:79:cd:d2:0f:fe:b1:3f:
                    14:43:d4:27:05:6f:3b:f0:8a:ed:d0:7e:06:d8:71:
                    37:26:75:ac:ee:6e:4e:6a:1c:48:41:28:cf:4a:f3:
                    55:99:81:dd:e7:76:59:6d:94:e1:77:ac:70:15:33:
                    10:d2:af:be:6a:2d:45:14:9c:71:52:ac:48:b9:08:
                    95:ba:3d:15:16:97:5c:86:5d:6d:b2:76:fd:85:ee:
                    f2:a1:9b:d3:9c:7c:d8:59:fe:2a:3f:f0:b5:70:14:
                    02:9e:c6:95:e2:11:52:7c:1e:57:4b:67:37:c0:e6:
                    0e:2e:b4:5b:e5:d3:74:4c:23:15:bd:0b:23:9e:ca:
                    ed:ff:28:40:fb:58:55:cd:d4:5b:a1:c2:41:94:38:
                    b4:89:e9:25:5a:86:29:e5:12:a8:d7:df:ea:5e:6b:
                    9b:2a:8a:8a:1c:84:71:3e:b7:a2:c4:8b:1d:04:47:
                    21:6f:e5:82:f3:21:fc:77:24:22:c5:b7:06:0c:e7:
                    dc:fa:b0:ad:e8:79:f0:f5:7d:9f:a3:f7:35:b9:18:
                    83:f4:44:22:01:15:cd:71:51:fa:5c:e1:66:2e:a6:
                    04:33:1a:f2:3f:80:53:e5:58:31:f5:e1:93:ff:66:
                    90:ae:db:20:d2:29:7d:84:e6:10:a5:08:00:84:74:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:74:EC:F0:05:13:3D:56:82:63:42:0A:55:10:48:FB:A3:88:BF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3131342e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:a2:79:2b:0c:f6:91:e3:85:5e:7a:43:b4:61:31:ea:7f:
         d9:00:fb:55:51:ce:8e:93:2b:d8:6f:87:c5:99:0d:17:64:3b:
         09:34:a2:f7:34:1b:c3:83:73:3c:9a:2d:3e:1d:0d:3f:14:a6:
         28:22:ff:b2:88:71:ca:df:94:5d:5b:6d:65:4f:ae:29:b1:97:
         e6:47:8d:a5:0f:c5:f2:bb:32:a9:9c:fc:ac:a0:55:34:c6:ae:
         33:8c:25:d3:ae:78:64:a6:44:24:0c:33:4c:f0:e1:cf:14:45:
         a0:23:e6:de:6f:47:6e:83:c9:6f:3f:87:76:7c:45:c7:51:dd:
         71:f7:58:e3:e0:62:07:34:ff:ca:a7:c9:a6:bd:8a:a7:2b:15:
         59:75:81:ff:d8:37:b0:bb:b6:01:45:f0:7e:d8:d2:4f:0d:b9:
         2d:5c:5a:fd:4f:d7:4c:2f:d9:51:c3:24:c5:c7:e4:5b:44:81:
         c0:91:f0:62:60:18:e1:d8:fb:5a:88:b0:d8:0f:d8:e1:24:c8:
         f4:3c:63:e9:9a:cc:59:9a:ff:34:4f:8d:a6:1f:e6:f8:b8:2f:
         54:a6:d9:b3:fb:e0:8c:4d:80:62:0d:7e:29:04:4c:92:d2:09:
         a7:6b:4e:d9:84:5d:09:be:d6:9b:49:fa:fb:6b:9c:c3:eb:0a:
         b4:e7:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----