Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e32302e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3137372e32302e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          i6Galw7vA8pBWmJmVSXzQ96SSy9CNcId4BWdzZaxnno=
Subject key identifier:   19:18:4A:90:BD:CC:E8:AE:20:97:28:78:31:36:93:10:C6:FC:C2:05
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       50FECBB89B45677C3922211C9DA1BED726CA9C8D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e32302e302f32332d3234203d3e20313339343439.roa
Signing time:             Thu 16 Dec 2021 03:58:46 +0000
ROA not before:           Thu 16 Dec 2021 03:53:46 +0000
ROA not after:            Fri 16 Dec 2022 03:58:46 +0000
asID:                     139449
IP address blocks:        103.177.20.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:cb:b8:9b:45:67:7c:39:22:21:1c:9d:a1:be:d7:26:ca:9c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 16 03:53:46 2021 GMT
            Not After : Dec 16 03:58:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:4d:04:ad:fb:e4:99:40:67:41:f4:28:d5:
                    96:1b:c6:1b:5f:3b:b6:91:03:6d:73:86:54:fd:a9:
                    85:63:a4:cb:c1:2d:7a:c0:58:85:d0:d7:98:dd:7d:
                    77:24:57:e9:bc:6b:06:bf:7b:cf:6f:7f:b5:49:40:
                    80:76:53:7e:0c:11:3d:88:e6:58:58:16:68:9f:73:
                    38:4f:be:ac:04:a1:8a:65:79:13:dd:8d:65:49:b0:
                    00:55:0d:0a:73:9f:77:5b:9c:2f:25:8f:a0:fe:17:
                    d4:66:8a:7f:d1:ad:b4:3e:0d:d7:c4:f1:5f:da:e0:
                    e9:bf:95:dc:59:14:2e:1f:33:ff:33:b6:5f:60:1c:
                    84:3a:ed:8a:e2:e6:07:3a:98:23:f5:59:05:9a:88:
                    02:cc:c2:0c:10:21:be:96:14:d0:7f:21:f3:e6:0e:
                    28:43:57:4c:54:60:1f:79:3d:c6:ee:57:99:4c:b7:
                    a6:52:0c:07:1c:3c:0a:56:a8:11:a5:4c:77:9a:df:
                    1d:49:6b:c1:d3:71:81:b0:3c:b1:c3:4e:f8:e8:a1:
                    db:b3:5b:89:71:b8:4c:0d:76:75:47:19:ee:c3:89:
                    43:fb:04:8d:5e:a1:6b:5b:01:fc:f6:24:3c:ce:57:
                    c1:3d:a5:5e:f1:52:e8:96:f8:a8:e3:3c:3a:64:aa:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:4A:90:BD:CC:E8:AE:20:97:28:78:31:36:93:10:C6:FC:C2:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e32302e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:72:0b:42:a1:f1:d5:56:20:44:75:30:67:48:49:63:d6:8f:
         16:42:90:fa:f9:ab:e8:c6:4a:c2:c9:e9:15:cd:21:0e:06:ee:
         83:1a:c4:0c:74:20:e1:40:84:3c:56:e9:5f:87:5e:40:59:7e:
         f4:b3:c0:44:bb:dd:0f:e2:5b:8b:a5:0b:df:b8:a6:52:04:7a:
         76:09:5e:ce:f0:55:a8:ae:c1:82:b4:30:ff:ac:8c:05:f6:3e:
         98:19:e1:f6:d2:20:9f:3f:42:44:14:ff:aa:66:a9:1e:9f:2e:
         d8:d5:c2:cb:ad:96:c6:cc:b0:ad:42:30:c5:74:d7:08:71:43:
         6c:30:e0:d6:e1:23:ee:d1:05:7c:64:e5:f4:58:84:af:8d:6d:
         5f:a1:f0:60:69:5a:0b:07:f7:f8:eb:02:e0:ed:fb:bb:f8:86:
         e5:bb:d6:e8:0b:90:b4:b0:4e:d8:5b:54:86:75:4a:58:2c:ba:
         95:cb:e8:41:1b:32:7a:72:10:23:62:5b:c1:0e:68:29:a0:c9:
         a8:27:09:a6:01:48:b5:86:6f:21:40:61:3d:e4:19:b7:ac:98:
         38:92:86:01:bd:58:23:49:99:ad:7b:06:02:b1:e9:9e:e0:33:
         8e:46:1f:a5:b0:0e:f5:97:1c:85:b9:a8:f7:16:1e:b8:9c:bb:
         ba:f4:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----