Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e37362e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3137362e37362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          I1xRHSSiS7Oh3uLrqrlv4ewvcGvy780pVWrAzMG+ykc=
Subject key identifier:   DE:84:F6:00:ED:1D:9B:16:8B:28:88:31:B4:69:2B:66:8B:3C:08:F1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6B96C7040A8BB929E2B53173F5F3FCFDA0E69F05
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e37362e302f32332d3234203d3e20313336303532.roa
Signing time:             Wed 24 Nov 2021 00:18:39 +0000
ROA not before:           Wed 24 Nov 2021 00:13:39 +0000
ROA not after:            Thu 24 Nov 2022 00:18:39 +0000
asID:                     136052
IP address blocks:        103.176.76.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:96:c7:04:0a:8b:b9:29:e2:b5:31:73:f5:f3:fc:fd:a0:e6:9f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 24 00:13:39 2021 GMT
            Not After : Nov 24 00:18:39 2022 GMT
        Subject: CN=3082010A0282010100DD2B8C10B88A7F2F5F4449441DD0E8B2230F4E63FC59DBEA4E77C31A4FB9DB06B36FF79F74912ADB0C40B25FB44CDEC102421E479743477DCC5758E87E9B762B9B752CFF01A3B1B60C52279377BA85C377DD45FE2DFCD64FFB7A4502C1185730CEB8DD002F5F769B603B2C511F02CD17267BE4B2C1AF51A8536B6B1E33424887482D41DE64120E331A728A46033BA1D1FD280B9E0B406777BC20256E0DE6D8C24AB31AAA84885742502B64702F9CA5D33AA7EA28BF17A8041FA0B91A5BDD01C65DAAD07E8517CE9B38606FA5E87C018F502722998C9A2EEA74EF11BD4ADB26305A61DE2887AAD19160747337FF2920D5ACAF246AEF5AA346ECC2B743B52B878B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:8c:10:b8:8a:7f:2f:5f:44:49:44:1d:d0:
                    e8:b2:23:0f:4e:63:fc:59:db:ea:4e:77:c3:1a:4f:
                    b9:db:06:b3:6f:f7:9f:74:91:2a:db:0c:40:b2:5f:
                    b4:4c:de:c1:02:42:1e:47:97:43:47:7d:cc:57:58:
                    e8:7e:9b:76:2b:9b:75:2c:ff:01:a3:b1:b6:0c:52:
                    27:93:77:ba:85:c3:77:dd:45:fe:2d:fc:d6:4f:fb:
                    7a:45:02:c1:18:57:30:ce:b8:dd:00:2f:5f:76:9b:
                    60:3b:2c:51:1f:02:cd:17:26:7b:e4:b2:c1:af:51:
                    a8:53:6b:6b:1e:33:42:48:87:48:2d:41:de:64:12:
                    0e:33:1a:72:8a:46:03:3b:a1:d1:fd:28:0b:9e:0b:
                    40:67:77:bc:20:25:6e:0d:e6:d8:c2:4a:b3:1a:aa:
                    84:88:57:42:50:2b:64:70:2f:9c:a5:d3:3a:a7:ea:
                    28:bf:17:a8:04:1f:a0:b9:1a:5b:dd:01:c6:5d:aa:
                    d0:7e:85:17:ce:9b:38:60:6f:a5:e8:7c:01:8f:50:
                    27:22:99:8c:9a:2e:ea:74:ef:11:bd:4a:db:26:30:
                    5a:61:de:28:87:aa:d1:91:60:74:73:37:ff:29:20:
                    d5:ac:af:24:6a:ef:5a:a3:46:ec:c2:b7:43:b5:2b:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:F6:00:ED:1D:9B:16:8B:28:88:31:B4:69:2B:66:8B:3C:08:F1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137362e37362e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:17:4b:3f:0e:37:c2:44:b6:be:c5:1c:56:87:e7:59:69:
         e4:43:2f:78:a7:1b:e4:b9:2b:8d:86:ae:7c:f7:bf:e1:86:85:
         14:bf:21:0e:db:a3:af:25:22:3a:6a:63:51:2a:30:be:e5:f1:
         0c:9c:1e:ad:43:6d:4a:1a:05:d5:50:c3:a8:76:f2:1b:ae:81:
         b8:c3:3b:4e:4b:9e:fa:ac:94:95:02:99:32:6c:2a:4b:5c:96:
         ca:5a:d4:81:bb:c8:09:12:60:3e:4e:a6:2a:11:94:b1:77:18:
         8a:dd:d7:f1:69:85:81:f4:e9:06:da:a5:9d:1b:97:d1:ec:f2:
         55:e8:1d:cc:b4:b1:d3:9f:23:98:ea:65:1f:05:86:47:8f:35:
         5d:4d:72:25:53:ed:a2:b7:d7:af:d4:4a:47:11:87:79:e3:60:
         a2:68:3a:ea:5b:78:e4:72:11:1e:55:dc:c4:3c:af:79:65:7d:
         b4:e2:1e:d6:ec:f7:9b:ea:4a:54:f3:68:8d:62:5c:97:9c:b1:
         d3:27:a4:c4:83:20:47:5f:99:8c:5f:63:09:e0:48:bc:ad:45:
         d6:59:db:95:1f:cd:80:72:4a:7c:ac:54:a8:97:2b:8c:c5:00:
         f5:12:9a:a2:96:d7:95:5d:13:05:f7:ce:45:de:5c:1c:6b:9d:
         df:78:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----