Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e36392e302f32342d3234203d3e20313437313239.roa
File:                     3130332e3137362e36392e302f32342d3234203d3e20313437313239.roa (raw, json)
Hash identifier:          BmP6vcqmMoYO/8Z8yXG3pGm+iXE2tQbAd48XBtNfnA0=
Subject key identifier:   59:A5:D9:62:E7:55:0F:80:8C:D0:A8:6D:FE:78:E9:49:29:5A:1F:16
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       387126621797A2650CC7EF64E1B62D1C531E9DD3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e36392e302f32342d3234203d3e20313437313239.roa
Signing time:             Mon 10 Jan 2022 06:08:21 +0000
ROA not before:           Mon 10 Jan 2022 06:03:21 +0000
ROA not after:            Tue 10 Jan 2023 06:08:21 +0000
asID:                     147129
IP address blocks:        103.176.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:71:26:62:17:97:a2:65:0c:c7:ef:64:e1:b6:2d:1c:53:1e:9d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 10 06:03:21 2022 GMT
            Not After : Jan 10 06:08:21 2023 GMT
        Subject: CN=3082010A0282010100BB3A1DEF884BDFEE181291B9C393DABCEF51F11B8B24C2697A9CC02B95FD1F9118DBF0665671C5AF1DF71BD4F7E9337ED56B5257329695E9E0778CDBF30A10491F0CA29EE0793F44EEB054A4B837C84261A5413C6126A37EF7ACE8D168BBDD7BB7222C165DE55C28A54EC3CCAB3D3A59DAA27FC310636EFFCF45EFF5D988B34396AB59BECEB894EDAC93BA05A44E2B30B099EF03A50B7642CD5FEB360D982E82AF63CB53A4D7CB05FCA06206828C38E34329024ADCEE0C5F52C9A081F21A44AE9C0017415F135E676B528DDBFBEB02AEB6027A3865EB9AABBAFDDA8C73564E5F47A016458F7B6F7B99FBC5C1242E4C0C7C1972DD9257A2425406E4A7B9FEFAA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:1d:ef:88:4b:df:ee:18:12:91:b9:c3:93:
                    da:bc:ef:51:f1:1b:8b:24:c2:69:7a:9c:c0:2b:95:
                    fd:1f:91:18:db:f0:66:56:71:c5:af:1d:f7:1b:d4:
                    f7:e9:33:7e:d5:6b:52:57:32:96:95:e9:e0:77:8c:
                    db:f3:0a:10:49:1f:0c:a2:9e:e0:79:3f:44:ee:b0:
                    54:a4:b8:37:c8:42:61:a5:41:3c:61:26:a3:7e:f7:
                    ac:e8:d1:68:bb:dd:7b:b7:22:2c:16:5d:e5:5c:28:
                    a5:4e:c3:cc:ab:3d:3a:59:da:a2:7f:c3:10:63:6e:
                    ff:cf:45:ef:f5:d9:88:b3:43:96:ab:59:be:ce:b8:
                    94:ed:ac:93:ba:05:a4:4e:2b:30:b0:99:ef:03:a5:
                    0b:76:42:cd:5f:eb:36:0d:98:2e:82:af:63:cb:53:
                    a4:d7:cb:05:fc:a0:62:06:82:8c:38:e3:43:29:02:
                    4a:dc:ee:0c:5f:52:c9:a0:81:f2:1a:44:ae:9c:00:
                    17:41:5f:13:5e:67:6b:52:8d:db:fb:eb:02:ae:b6:
                    02:7a:38:65:eb:9a:ab:ba:fd:da:8c:73:56:4e:5f:
                    47:a0:16:45:8f:7b:6f:7b:99:fb:c5:c1:24:2e:4c:
                    0c:7c:19:72:dd:92:57:a2:42:54:06:e4:a7:b9:fe:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:D9:62:E7:55:0F:80:8C:D0:A8:6D:FE:78:E9:49:29:5A:1F:16
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e36392e302f32342d3234203d3e20313437313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:6f:89:e0:e3:fd:b2:75:32:4e:c4:3e:f1:7f:51:ed:58:
         bc:a3:a6:13:56:5f:3b:ca:57:22:05:18:58:a7:d1:20:24:54:
         58:a3:17:9e:89:b7:54:d3:d8:ba:1f:15:cc:cd:bd:f8:bf:1b:
         13:84:d0:8e:8c:a3:6e:16:9d:95:af:dc:70:49:cf:35:60:4e:
         8a:72:ab:77:81:29:01:c8:84:8c:69:c6:7b:2c:f2:07:aa:04:
         f4:aa:34:d3:c8:c5:86:25:cd:45:28:70:68:90:37:79:5b:e3:
         87:99:e5:91:88:d9:10:0a:20:6b:94:7c:ba:a2:3a:33:b5:f2:
         9d:0b:b1:93:e4:df:e6:e7:50:58:ec:5a:08:6d:1d:ee:da:4b:
         bc:df:89:57:52:4c:c7:43:08:b8:a1:5c:a5:31:d7:68:4f:1a:
         bd:ef:89:36:2a:d8:a1:dd:40:0f:02:27:1e:6b:86:9f:52:93:
         fd:90:ee:4f:45:f7:24:fd:e0:82:69:d8:84:d7:3e:2f:0c:bd:
         e4:39:ea:4f:26:c7:da:f7:78:0b:1f:67:23:a7:27:b6:25:ff:
         89:c9:b1:b5:64:49:b3:d5:69:89:e6:4f:23:86:b4:5f:a2:de:
         26:e5:a4:49:ef:0e:04:8d:6b:59:32:af:8f:ef:7d:18:67:5f:
         a9:56:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----