Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e31342e302f32332d3234203d3e203634333030.roa
File:                     3130332e3137382e31342e302f32332d3234203d3e203634333030.roa (raw, json)
Hash identifier:          aIlov6Q42ODlIaymH+R75QTOSsMYHsFkVET32smktRQ=
Subject key identifier:   6C:92:C8:F0:CC:B7:81:8C:23:EE:B4:BF:FB:C3:CE:1D:B3:6A:59:B3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1EA5E482C09FDA53DC10FF5FC0096DBB75171E95
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e31342e302f32332d3234203d3e203634333030.roa
Signing time:             Tue 28 Dec 2021 03:53:24 +0000
ROA not before:           Tue 28 Dec 2021 03:48:24 +0000
ROA not after:            Wed 28 Dec 2022 03:53:24 +0000
asID:                     64300
IP address blocks:        103.178.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a5:e4:82:c0:9f:da:53:dc:10:ff:5f:c0:09:6d:bb:75:17:1e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 28 03:48:24 2021 GMT
            Not After : Dec 28 03:53:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:e8:b4:26:b0:df:1e:9b:56:db:2f:a9:80:
                    c8:92:e6:3b:e3:7f:42:1e:99:c9:cf:20:56:f1:a7:
                    09:04:f1:b9:4e:60:d6:62:fc:a1:24:5d:f2:98:13:
                    39:b3:56:35:0d:cd:01:5a:3d:7c:a3:ec:fa:a2:69:
                    c1:11:45:df:80:c8:00:14:45:54:13:07:82:97:9b:
                    cd:a9:1f:22:0a:a3:75:aa:0e:fc:82:0e:e7:22:4d:
                    6b:d9:73:1b:47:ba:10:c1:db:88:d3:4b:ab:e3:70:
                    20:05:da:cb:08:42:4d:b1:3a:2f:28:ce:69:71:3e:
                    f1:50:5d:a2:88:c6:be:c9:b3:04:46:c2:78:2e:0f:
                    8e:1f:24:29:ee:14:81:e4:28:f0:d9:fa:18:c5:ee:
                    07:a2:97:8e:70:9c:09:ba:54:2b:78:db:dc:13:c3:
                    8d:b4:6c:1a:1d:72:c4:4b:38:f9:bd:3f:65:cc:b0:
                    4f:dc:3b:c6:f5:88:2e:3a:b7:6b:70:b7:40:74:bf:
                    2d:5b:bc:48:ac:f4:8d:a2:18:13:59:60:9b:fb:02:
                    3c:ab:b8:19:a4:6b:23:be:69:94:3b:aa:26:bb:de:
                    39:f8:06:d5:5a:0e:42:66:1f:fe:36:0d:60:43:1b:
                    78:ef:11:47:cd:84:f2:48:88:51:d5:3f:b7:18:b2:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:C8:F0:CC:B7:81:8C:23:EE:B4:BF:FB:C3:CE:1D:B3:6A:59:B3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e31342e302f32332d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:a6:c6:39:8b:16:71:21:9c:56:9a:a4:06:41:b1:23:62:63:
         29:99:68:50:a9:49:f8:cc:ee:c1:bd:53:77:c8:10:cd:00:26:
         8f:8c:5c:70:7f:5d:25:60:1f:bb:bf:4c:9b:1b:8d:4e:74:74:
         65:b8:37:40:b7:5b:78:9d:40:17:c0:8e:2a:db:78:5e:e8:eb:
         be:6c:37:d5:05:6a:0d:29:bd:3e:04:3c:d0:22:77:3d:7d:c8:
         5a:c7:40:86:a4:35:e8:aa:e0:5e:ed:42:cd:50:74:2f:62:87:
         0d:ad:4b:b3:16:21:db:41:bb:11:e4:00:d1:b9:9e:9c:fe:1b:
         07:d3:66:38:59:6e:ad:7a:80:a5:ef:b2:60:02:8c:95:23:c6:
         5c:a0:3f:5f:7f:43:85:16:8b:f8:24:8e:93:8e:26:de:bb:cc:
         ec:7a:43:f6:30:cf:a4:db:fa:e6:02:e9:1b:7e:29:fa:38:bb:
         c6:cb:6b:e2:95:ad:02:1d:13:a7:8e:da:4b:e1:29:ce:b6:2d:
         4b:40:bf:02:a2:4e:03:bd:01:16:1c:79:ee:6f:8c:01:09:cc:
         c6:d1:1f:85:a1:96:c0:89:de:58:b3:d3:23:bb:3b:df:80:50:
         d3:eb:aa:36:21:7b:46:b1:a1:25:d8:2b:eb:4e:0b:25:37:6e:
         e9:25:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----