Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3133382e302f32332d3234203d3e203538333639.roa
File:                     3130332e3137392e3133382e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          rYlMxh6Z1dUThIcAaICaYP0zihuvIoaMuK0eFiUgn+8=
Subject key identifier:   91:85:01:B2:1E:3F:72:4B:01:3F:55:65:A7:17:D5:0A:6B:0E:ED:14
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4ADBE0F2E1BCF8AE0A0AC7B21FEE86988D5E79F9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3133382e302f32332d3234203d3e203538333639.roa
Signing time:             Wed 26 Jan 2022 03:28:20 +0000
ROA not before:           Wed 26 Jan 2022 03:23:20 +0000
ROA not after:            Thu 26 Jan 2023 03:28:20 +0000
asID:                     58369
IP address blocks:        103.179.138.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:e0:f2:e1:bc:f8:ae:0a:0a:c7:b2:1f:ee:86:98:8d:5e:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 26 03:23:20 2022 GMT
            Not After : Jan 26 03:28:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:54:64:e5:a7:79:0e:b4:ac:4b:65:8e:6a:
                    d7:a7:97:c1:63:18:32:26:32:ee:85:5a:9c:75:92:
                    05:72:38:53:bc:1d:7c:38:d2:8b:8c:7d:9d:a4:54:
                    35:83:c4:57:20:e5:9e:61:43:9b:06:d0:79:aa:5b:
                    ad:a5:b3:c5:4c:77:79:25:17:23:ed:47:70:32:6d:
                    41:26:0e:48:74:e9:67:68:39:aa:bb:c2:b9:de:3c:
                    4a:fc:73:c4:34:65:c7:d4:8f:17:b3:c9:a4:d3:07:
                    e4:93:44:6d:ee:14:0e:59:5d:b2:89:5c:20:ec:24:
                    1a:ab:85:d6:f0:68:d6:fb:74:e8:fc:c1:b9:8e:e2:
                    7d:27:fc:84:f8:76:c5:86:47:82:96:43:8b:ab:bb:
                    55:ed:a3:31:60:2d:ee:b7:2e:de:d7:e3:2d:15:e8:
                    25:f3:6c:23:4d:5e:6f:75:d0:05:05:db:d4:c8:c3:
                    30:f6:b5:b6:5e:af:30:a3:1d:2e:d6:a8:62:19:28:
                    4a:a8:89:70:c0:fc:1c:f7:a7:c7:d5:30:08:4f:eb:
                    f0:e2:cf:3a:11:6d:73:10:04:b3:91:11:ee:0c:33:
                    cc:77:52:06:e5:26:52:e6:89:c7:23:d7:74:a9:b3:
                    cb:f4:92:fc:57:d8:86:35:bb:d3:61:d6:a7:9b:90:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:85:01:B2:1E:3F:72:4B:01:3F:55:65:A7:17:D5:0A:6B:0E:ED:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3133382e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:ff:0e:b6:44:32:e2:de:72:4c:60:90:36:12:66:31:23:
         38:ba:02:2c:f5:37:0c:cc:df:b4:65:ba:e2:8f:6a:bb:e6:60:
         bf:7b:c3:c4:e5:46:1f:b7:f3:d7:7e:b7:82:80:e5:7b:06:b7:
         48:e5:d6:cc:f5:57:37:9b:ac:0c:ea:42:16:a6:c4:ba:4e:b8:
         63:5d:24:f0:c2:09:67:4b:02:a6:fc:f3:50:80:14:07:e2:90:
         79:63:5a:c7:09:6b:ca:bd:ad:97:b1:dd:52:82:27:c5:40:2f:
         37:20:78:9e:f5:e1:13:cf:6f:30:f8:6f:17:48:54:17:f2:d8:
         d9:b6:38:76:97:01:f5:84:f9:22:93:90:f8:3e:5e:0d:d4:e0:
         63:4c:71:a9:91:96:b8:d2:62:91:8c:10:fc:11:3b:96:5c:9e:
         f9:99:06:58:60:b6:c4:6e:71:06:81:1c:78:38:42:b7:8b:72:
         57:1c:75:60:fe:9c:ea:c4:39:9f:ed:9d:19:c8:1c:ae:67:ec:
         b0:55:cd:cc:51:40:9e:2a:69:d5:18:01:59:a5:43:17:b6:29:
         1c:39:66:d5:85:7e:3a:47:07:4d:38:17:80:1b:ea:b5:89:f1:
         fa:ff:87:c7:a6:f4:e3:02:42:4f:97:63:82:ec:91:35:8f:51:
         a8:79:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----