Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e3137372e302f32342d3234203d3e20313437313335.roa
File:                     3130332e3137362e3137372e302f32342d3234203d3e20313437313335.roa (raw, json)
Hash identifier:          jQX5aAM+9K2cHiylGbSqir1IFfXQkdt3x6zjaAwELcM=
Subject key identifier:   B0:09:44:CA:53:B5:17:34:7E:7C:36:5C:0E:08:46:0F:CA:34:82:BA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2E1F0595788E2EC75CAC0F3B8F40B7FAD6DEC0F6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e3137372e302f32342d3234203d3e20313437313335.roa
Signing time:             Mon 10 Jan 2022 06:54:22 +0000
ROA not before:           Mon 10 Jan 2022 06:49:22 +0000
ROA not after:            Tue 10 Jan 2023 06:54:22 +0000
asID:                     147135
IP address blocks:        103.176.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1f:05:95:78:8e:2e:c7:5c:ac:0f:3b:8f:40:b7:fa:d6:de:c0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 10 06:49:22 2022 GMT
            Not After : Jan 10 06:54:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:d8:bf:7f:95:b7:36:c2:83:03:df:df:99:
                    11:f0:5b:ca:4d:09:db:5e:f5:64:9f:44:f2:ce:c3:
                    d2:38:40:9e:52:19:cd:06:2d:ec:03:48:7c:d7:3e:
                    d8:95:3c:5f:22:46:e1:43:f3:13:30:ed:4f:f3:fe:
                    ca:3a:56:e0:0f:0c:08:d3:dc:fc:a1:47:1f:a2:0d:
                    14:a1:fc:1d:01:7d:e4:3a:c6:e8:53:67:bd:37:8c:
                    63:03:f5:8b:c8:82:7f:ed:4c:21:44:15:4f:43:b4:
                    58:32:b3:11:e6:7e:71:28:87:13:3f:31:6c:aa:31:
                    41:c3:63:87:9f:aa:91:17:63:f6:f3:b9:51:4a:db:
                    ce:9f:97:fb:dd:96:01:b9:95:c6:5a:71:e6:17:0c:
                    71:fc:4f:39:27:e5:93:cc:b8:96:2d:d1:70:e2:68:
                    39:17:82:d2:72:b3:dd:f0:19:63:b3:38:a8:2a:18:
                    a2:a6:f6:51:b6:12:37:4f:6a:7a:db:69:41:3f:e4:
                    41:10:e7:63:34:70:19:4c:e3:52:7a:ae:5f:ea:fe:
                    ac:07:86:63:34:6e:e1:99:24:f4:43:7a:63:5d:2d:
                    52:38:71:d2:7f:99:dc:a0:2c:c2:45:1f:a9:1a:73:
                    40:6b:ff:8d:09:31:88:0a:56:c2:15:b4:e6:e9:9c:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:09:44:CA:53:B5:17:34:7E:7C:36:5C:0E:08:46:0F:CA:34:82:BA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e3137372e302f32342d3234203d3e20313437313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:22:ae:32:4d:71:47:e8:ab:3c:62:73:27:47:66:e2:61:e8:
         c2:2e:6d:25:08:d8:e0:89:62:82:cd:9b:92:2b:fe:d4:40:e0:
         7d:7e:48:61:5e:58:ff:59:e4:42:c6:a2:0b:11:41:f2:e3:84:
         7e:f9:30:1b:af:84:65:4a:ef:ef:b6:fe:05:be:73:28:24:27:
         fd:d2:7e:35:81:ae:03:26:88:d2:32:b4:74:b6:e6:fb:34:e2:
         dc:1d:67:d3:c8:81:ac:eb:00:e7:76:0c:b3:d3:1d:2d:f3:11:
         94:28:7d:25:67:17:be:fe:7a:bd:57:8e:48:a2:fd:61:a4:25:
         4c:d9:d8:18:17:ff:19:52:a2:9f:f0:24:ce:76:17:4e:8b:a8:
         f4:8b:52:e4:7b:10:84:27:a0:66:f4:8f:86:b5:89:dd:be:8b:
         77:e9:2f:4f:59:5e:d5:ba:af:57:c8:9b:3d:01:03:c2:ee:6c:
         81:76:55:87:cf:bf:41:79:6d:ca:b9:b6:5b:d8:75:00:99:5f:
         b8:16:f3:ed:39:aa:b0:07:ac:7e:d2:72:a8:be:93:f9:06:42:
         eb:cb:ef:af:02:3c:78:67:b7:68:e1:9f:e6:40:5d:69:81:82:
         d9:a1:a4:09:ab:0c:61:e7:16:63:f9:a8:6f:f2:d4:a5:f8:bd:
         40:b0:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----