Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231322e302f32342d3234203d3e203435373237.roa
File:                     3130332e3137352e3231322e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          A7x8SMMN+7YKPoGJlyDB7aeqA9LDHXkKK4ec4NG9Dz0=
Subject key identifier:   16:45:A2:35:4A:CC:B4:06:B9:77:14:BB:8D:E2:75:B9:27:A9:47:CC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5AC11EB6B62CDF843EFC3D469477E0CD89CE1035
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231322e302f32342d3234203d3e203435373237.roa
Signing time:             Tue 14 Dec 2021 02:41:38 +0000
ROA not before:           Tue 14 Dec 2021 02:36:38 +0000
ROA not after:            Wed 14 Dec 2022 02:41:38 +0000
asID:                     45727
IP address blocks:        103.175.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c1:1e:b6:b6:2c:df:84:3e:fc:3d:46:94:77:e0:cd:89:ce:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 14 02:36:38 2021 GMT
            Not After : Dec 14 02:41:38 2022 GMT
        Subject: CN=3082010A0282010100B5118A8C376B98D23FC4163E80BA9C0F6505F43A0E056A12D17A7E18ADC3D8759C7CA3CECBFB7A0207E76F49A948B20C09ECA444D45A21C052EBF15798399F9AD3C0D304A6A81AB74DADA398B7C705BC55FBC504F20096A5B2EFDD4C0395620DFA9B5FE95DA221376B929C7DE414E8C493E9BD65F2AF8B4CA8EA3824C9805F5958660FA4F3B6326A9B530B10A75E89E9D5A7C4D03CCC37D2B95F6C7B11D5FF22073BC8783F46878A5B3EF06037E952DABE54A0EABEE976EF81108FA6D6F910A56A1610AC2D43714C3E43CF806D54917E9BE42CD5DF0645D5642795042F3C2B4A56823ED5C608133AA73EEF6C85F8D6AA17CDC7E425F49317692F966806E2A61B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:8a:8c:37:6b:98:d2:3f:c4:16:3e:80:ba:
                    9c:0f:65:05:f4:3a:0e:05:6a:12:d1:7a:7e:18:ad:
                    c3:d8:75:9c:7c:a3:ce:cb:fb:7a:02:07:e7:6f:49:
                    a9:48:b2:0c:09:ec:a4:44:d4:5a:21:c0:52:eb:f1:
                    57:98:39:9f:9a:d3:c0:d3:04:a6:a8:1a:b7:4d:ad:
                    a3:98:b7:c7:05:bc:55:fb:c5:04:f2:00:96:a5:b2:
                    ef:dd:4c:03:95:62:0d:fa:9b:5f:e9:5d:a2:21:37:
                    6b:92:9c:7d:e4:14:e8:c4:93:e9:bd:65:f2:af:8b:
                    4c:a8:ea:38:24:c9:80:5f:59:58:66:0f:a4:f3:b6:
                    32:6a:9b:53:0b:10:a7:5e:89:e9:d5:a7:c4:d0:3c:
                    cc:37:d2:b9:5f:6c:7b:11:d5:ff:22:07:3b:c8:78:
                    3f:46:87:8a:5b:3e:f0:60:37:e9:52:da:be:54:a0:
                    ea:be:e9:76:ef:81:10:8f:a6:d6:f9:10:a5:6a:16:
                    10:ac:2d:43:71:4c:3e:43:cf:80:6d:54:91:7e:9b:
                    e4:2c:d5:df:06:45:d5:64:27:95:04:2f:3c:2b:4a:
                    56:82:3e:d5:c6:08:13:3a:a7:3e:ef:6c:85:f8:d6:
                    aa:17:cd:c7:e4:25:f4:93:17:69:2f:96:68:06:e2:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:A2:35:4A:CC:B4:06:B9:77:14:BB:8D:E2:75:B9:27:A9:47:CC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231322e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:80:14:54:88:a1:41:45:07:7a:af:df:6b:5d:48:33:8c:
         d5:bc:c8:86:68:3e:30:72:b9:04:06:c8:cf:b4:e2:e0:4c:a9:
         70:15:4a:4a:3f:ab:af:d9:ad:47:08:88:5b:0f:17:91:de:4c:
         82:f2:2c:aa:fc:dd:de:e1:92:86:8d:21:b7:48:4f:99:bc:1b:
         15:bf:1c:5a:8e:85:aa:99:11:49:09:2a:b4:58:a4:12:e9:bb:
         d6:16:36:40:8c:70:aa:dd:e2:5f:2c:a0:c4:22:d2:f8:9a:20:
         8f:37:d4:8b:bb:d2:ba:ae:fb:ef:3a:cf:4d:93:84:52:8b:b7:
         1b:27:28:a3:4e:9b:8c:5e:fd:dc:99:a2:7e:8c:67:29:13:42:
         a6:24:46:8c:1c:8a:45:58:6d:1d:6f:6d:71:a0:75:d1:03:d8:
         2f:84:fb:a9:ad:36:b9:8c:d0:26:a4:f8:4a:c5:d1:e7:c2:83:
         bc:9b:9e:3c:1c:12:2e:b7:82:aa:3c:70:d5:c1:5f:39:5e:72:
         48:28:64:e4:d3:47:11:6d:c5:d4:f5:77:68:ba:0e:4d:7f:ab:
         dd:cc:2e:03:9f:91:86:ec:8c:fe:d9:c8:bf:a3:51:7b:ad:71:
         c9:18:10:0e:1e:e0:d8:8b:ee:de:45:d9:e8:fa:e9:64:e8:58:
         e8:06:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----