Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e3137362e302f32332d3234203d3e20313431383938.roa
File:                     3130332e3137372e3137362e302f32332d3234203d3e20313431383938.roa (raw, json)
Hash identifier:          pAgAIHO5cnglwsvMe+fhqXYBIhLV5HOSms4s/ppe+Mg=
Subject key identifier:   76:01:97:1B:73:5A:EC:67:DE:8F:1E:0A:D7:9A:BB:14:D4:50:0A:3E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D2E4DB2B40C26974DC6E1ED7783C86BD8B7C52D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e3137362e302f32332d3234203d3e20313431383938.roa
Signing time:             Tue 21 Dec 2021 09:49:23 +0000
ROA not before:           Tue 21 Dec 2021 09:44:23 +0000
ROA not after:            Wed 21 Dec 2022 09:49:23 +0000
asID:                     141898
IP address blocks:        103.177.176.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2e:4d:b2:b4:0c:26:97:4d:c6:e1:ed:77:83:c8:6b:d8:b7:c5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 21 09:44:23 2021 GMT
            Not After : Dec 21 09:49:23 2022 GMT
        Subject: CN=3082010A0282010100C7C31CDDA448DE89072675093E405F247F5EAEC823A8B8291C2ADBF52B56A390D8DE14385E1BE58261154C6DD6028C34E367F3F6A3983ABA1EA9F7C3039D1B279BD2FB4B851274F5536747B1A0F9A3D91BB5542F17F57B2BB1062390611549229EF974A1243F634E5CCA6FDFDAE9CEFC4AE7F89857E3943C87F3AEBBAC17062E11D1DB3B283DE335F1D664C86798768D7CEB0889447528F52A336D2C96EDF7EF91F85E99ED1096B88BCA5465E879C9F24936EC494F80D34479B34E6E418D514973177DC5091279B0ECDD4A5B76A59EC8600C791B41FEF119F2CF1ABAF01191AFCB29F71962EBC23D424F1EF2AD843E351314AFF2F0C17C033B00A54C38FBDA4D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:1c:dd:a4:48:de:89:07:26:75:09:3e:40:
                    5f:24:7f:5e:ae:c8:23:a8:b8:29:1c:2a:db:f5:2b:
                    56:a3:90:d8:de:14:38:5e:1b:e5:82:61:15:4c:6d:
                    d6:02:8c:34:e3:67:f3:f6:a3:98:3a:ba:1e:a9:f7:
                    c3:03:9d:1b:27:9b:d2:fb:4b:85:12:74:f5:53:67:
                    47:b1:a0:f9:a3:d9:1b:b5:54:2f:17:f5:7b:2b:b1:
                    06:23:90:61:15:49:22:9e:f9:74:a1:24:3f:63:4e:
                    5c:ca:6f:df:da:e9:ce:fc:4a:e7:f8:98:57:e3:94:
                    3c:87:f3:ae:bb:ac:17:06:2e:11:d1:db:3b:28:3d:
                    e3:35:f1:d6:64:c8:67:98:76:8d:7c:eb:08:89:44:
                    75:28:f5:2a:33:6d:2c:96:ed:f7:ef:91:f8:5e:99:
                    ed:10:96:b8:8b:ca:54:65:e8:79:c9:f2:49:36:ec:
                    49:4f:80:d3:44:79:b3:4e:6e:41:8d:51:49:73:17:
                    7d:c5:09:12:79:b0:ec:dd:4a:5b:76:a5:9e:c8:60:
                    0c:79:1b:41:fe:f1:19:f2:cf:1a:ba:f0:11:91:af:
                    cb:29:f7:19:62:eb:c2:3d:42:4f:1e:f2:ad:84:3e:
                    35:13:14:af:f2:f0:c1:7c:03:3b:00:a5:4c:38:fb:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:01:97:1B:73:5A:EC:67:DE:8F:1E:0A:D7:9A:BB:14:D4:50:0A:3E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e3137362e302f32332d3234203d3e20313431383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:97:e7:57:3b:65:de:b4:06:df:ae:6d:09:ac:77:31:b3:
         f8:75:33:62:50:93:2f:40:b8:f0:a3:2a:fd:fa:5d:d8:1e:1d:
         63:49:a7:0b:44:49:ab:7c:12:3d:29:09:df:4e:0a:97:53:53:
         50:64:bc:cf:aa:9b:3c:e3:0c:6f:2b:0a:9a:e3:f7:1e:1f:aa:
         bc:92:59:f1:5f:bd:a4:0b:08:88:0c:dd:50:75:2a:82:53:2f:
         d4:ce:53:9e:65:e6:73:ed:b7:e3:25:a4:3c:be:3b:e8:85:26:
         d4:e0:e3:f5:4f:1e:88:00:ad:f0:df:27:d2:93:b3:c1:4c:27:
         41:e5:de:22:2d:6d:be:e2:60:9f:02:bd:eb:6b:ea:ee:53:34:
         b2:b3:37:cd:77:0c:1e:4d:ad:9e:26:13:f0:48:48:49:35:dd:
         9b:8c:89:09:9a:8b:e3:45:64:c3:bb:aa:3d:24:9b:38:e4:c3:
         8d:86:ab:f0:af:55:ad:c4:0e:9d:6d:25:e6:d4:86:8d:09:b3:
         e5:51:be:49:ed:6e:7c:85:bf:ee:5e:bc:28:4b:db:a1:72:e7:
         90:1f:0d:f2:a9:ae:53:f8:05:e2:c7:d2:26:79:d6:a5:7b:65:
         0c:2c:f7:0e:26:12:3e:73:58:92:d7:1c:78:cc:da:b8:47:3c:
         0f:52:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----