Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232322e302f32342d3234203d3e203535363937.roa
File:                     3130332e3137342e3232322e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          z2JQ68qD30t3PoyALn2xMhkqqiatDIZ66vQzuKV2HOY=
Subject key identifier:   F4:06:55:72:6A:A4:4B:DA:1B:2D:39:46:84:46:4F:B4:C2:06:0E:80
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23DEDFE3853B5A745AE0AC286037A72232B185CF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232322e302f32342d3234203d3e203535363937.roa
Signing time:             Mon 20 Dec 2021 04:32:32 +0000
ROA not before:           Mon 20 Dec 2021 04:27:32 +0000
ROA not after:            Tue 20 Dec 2022 04:32:32 +0000
asID:                     55697
IP address blocks:        103.174.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:de:df:e3:85:3b:5a:74:5a:e0:ac:28:60:37:a7:22:32:b1:85:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 20 04:27:32 2021 GMT
            Not After : Dec 20 04:32:32 2022 GMT
        Subject: CN=3082010A028201010092972DA128B589CCC8A2E6DC3177373CAE0208923ECA726C4C4DD46A502EAF99CF90AD406B7D4F8367521A59A7185E833F062DE7A7274B3666BA718A860A33322A6F8173B00F89BB305001C88D9C8797364F61B00F6D036CA3A5450FEFDD5339FA86C3028C9B1E0F5443C2FBA4F8B732E513CDCA993ECCA3AD3B3A159B7D9424330654EC1E893E3F636969779FE0768CE80C2FCFD21E54B200C694625E90F2B970CF3877122C7A7EF4BBBC942E6AD0CA5475C79395C58AFA8FB076143F823B1AD936C02E6154AC38B8FCCAE239A7B4394FAF0007ED30D2EDB22B13864DAF5D49AE44D051DAA83D8F0E87F5721D14B0059AB6F1F58B7F272153661C0CBFB129ED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:2d:a1:28:b5:89:cc:c8:a2:e6:dc:31:77:
                    37:3c:ae:02:08:92:3e:ca:72:6c:4c:4d:d4:6a:50:
                    2e:af:99:cf:90:ad:40:6b:7d:4f:83:67:52:1a:59:
                    a7:18:5e:83:3f:06:2d:e7:a7:27:4b:36:66:ba:71:
                    8a:86:0a:33:32:2a:6f:81:73:b0:0f:89:bb:30:50:
                    01:c8:8d:9c:87:97:36:4f:61:b0:0f:6d:03:6c:a3:
                    a5:45:0f:ef:dd:53:39:fa:86:c3:02:8c:9b:1e:0f:
                    54:43:c2:fb:a4:f8:b7:32:e5:13:cd:ca:99:3e:cc:
                    a3:ad:3b:3a:15:9b:7d:94:24:33:06:54:ec:1e:89:
                    3e:3f:63:69:69:77:9f:e0:76:8c:e8:0c:2f:cf:d2:
                    1e:54:b2:00:c6:94:62:5e:90:f2:b9:70:cf:38:77:
                    12:2c:7a:7e:f4:bb:bc:94:2e:6a:d0:ca:54:75:c7:
                    93:95:c5:8a:fa:8f:b0:76:14:3f:82:3b:1a:d9:36:
                    c0:2e:61:54:ac:38:b8:fc:ca:e2:39:a7:b4:39:4f:
                    af:00:07:ed:30:d2:ed:b2:2b:13:86:4d:af:5d:49:
                    ae:44:d0:51:da:a8:3d:8f:0e:87:f5:72:1d:14:b0:
                    05:9a:b6:f1:f5:8b:7f:27:21:53:66:1c:0c:bf:b1:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:55:72:6A:A4:4B:DA:1B:2D:39:46:84:46:4F:B4:C2:06:0E:80
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137342e3232322e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e6:28:18:f9:40:41:b5:29:e9:b8:f0:3c:15:b5:7f:c5:7f:
         6c:18:77:3f:69:1a:0d:dd:ec:ee:6e:e5:ee:d3:32:ec:7e:c7:
         fd:1d:1e:cb:eb:17:c4:61:05:83:77:81:3f:91:28:a7:1a:fa:
         cf:b1:54:1b:b6:64:6a:42:8b:7f:63:30:71:89:77:74:2c:63:
         bb:a5:33:c8:d0:2f:08:0c:c9:19:43:f6:31:be:16:02:bc:fe:
         36:02:9a:70:88:e2:7d:ab:7c:d6:9c:b2:43:83:a0:82:e4:44:
         a9:e4:26:04:a0:68:82:fa:8b:66:45:6d:43:2b:d9:d5:b8:1a:
         c0:c9:8c:7a:32:41:a9:45:00:c5:f2:42:de:ba:6e:6b:d6:41:
         7b:04:21:0b:79:67:ce:8b:bb:e2:12:98:ba:73:d3:ce:90:77:
         86:85:ec:d2:50:63:31:f1:4f:3f:5a:2a:53:4d:3e:31:57:14:
         7d:3f:88:62:c9:c4:9b:27:73:88:5e:fd:12:13:cc:a6:02:28:
         ec:95:0c:a5:b8:49:b4:5e:94:35:51:69:e2:0b:82:ff:72:60:
         67:9f:97:d9:82:72:9d:ef:40:2b:7e:36:2f:80:d9:bd:88:8c:
         90:28:a5:8a:0f:1e:2a:b1:14:0f:bd:22:c2:f1:2e:18:05:75:
         5a:7f:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----