Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3235342e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3137392e3235342e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          GpIqpKHbYtD3C1uYFvm730bDnR1Pj9ZdTar1UrJtnc8=
Subject key identifier:   84:A0:F0:1D:24:91:D9:09:6D:A9:9C:80:6A:B2:F1:15:70:CF:08:61
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       07C37D1025F648862200F4DC46B2D00B243F2EBA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3235342e302f32332d3234203d3e20313336303532.roa
Signing time:             Thu 27 Jan 2022 23:30:46 +0000
ROA not before:           Thu 27 Jan 2022 23:25:46 +0000
ROA not after:            Fri 27 Jan 2023 23:30:46 +0000
asID:                     136052
IP address blocks:        103.179.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:7d:10:25:f6:48:86:22:00:f4:dc:46:b2:d0:0b:24:3f:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 27 23:25:46 2022 GMT
            Not After : Jan 27 23:30:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:82:86:61:d4:e7:42:62:8e:8a:a5:94:f4:
                    11:ba:ac:5a:6c:45:b8:c7:ca:95:8a:c7:9d:53:c1:
                    12:21:d8:88:b2:03:ac:bd:07:43:5f:34:52:0c:b1:
                    bc:fb:78:f0:ad:a4:42:df:04:93:6d:7c:3b:17:0f:
                    70:b5:a3:2f:5e:d0:14:42:ea:b0:87:ff:bf:81:b4:
                    a0:55:e7:1c:56:79:fa:f7:29:40:39:c3:72:0c:44:
                    ea:8e:31:c3:2b:b5:1b:56:67:40:ac:57:d4:b3:03:
                    40:fc:c9:03:f9:e6:e5:e7:27:9a:00:47:e0:90:2d:
                    b6:c6:ec:d7:46:65:da:66:68:a9:a5:81:6b:bb:e2:
                    6a:1e:70:14:0b:a4:58:7e:9b:bc:0c:48:95:53:2d:
                    57:79:70:47:fb:b4:37:e8:b1:4f:5a:52:9a:b0:6d:
                    11:f4:ac:e5:18:91:4b:4f:61:0a:36:85:f7:ce:eb:
                    a9:ba:ef:b2:76:ee:b8:16:47:f6:70:49:81:fd:c7:
                    c9:04:e5:e6:d7:9a:11:13:bd:c0:5e:5a:19:83:36:
                    2e:98:80:29:de:1f:27:48:4b:33:15:91:f8:6f:11:
                    2f:e4:a9:03:93:9c:cd:d9:96:1e:96:f1:a3:38:82:
                    dd:82:7a:1b:1a:34:5e:34:10:03:98:39:e6:bb:58:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:F0:1D:24:91:D9:09:6D:A9:9C:80:6A:B2:F1:15:70:CF:08:61
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137392e3235342e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:58:fe:4f:50:5c:8f:58:56:6d:86:b3:60:7f:4c:04:36:
         13:7e:de:fe:ab:74:a5:3d:59:1d:b3:a7:81:49:15:4c:6b:fc:
         9a:e8:3e:d9:89:4d:10:1f:d6:e9:21:8b:dc:de:e8:a1:03:35:
         02:e7:0a:56:5d:69:ce:53:ea:79:a8:d9:62:83:1d:d2:3d:2e:
         c7:24:f8:27:68:41:6f:85:15:f0:f7:ac:44:c7:e9:1b:cf:7c:
         db:23:ea:9a:71:65:11:1a:56:07:f1:ce:a9:b3:d1:eb:6b:4e:
         b5:d2:e0:b9:38:35:3b:90:0e:ed:5f:c5:51:f2:f6:fe:df:b6:
         dc:3a:7b:76:42:a6:bf:b4:1b:97:02:0b:a3:e4:86:c2:14:41:
         d7:79:9e:c1:52:3d:c0:f3:a7:3a:22:7c:17:8b:ec:db:22:fc:
         f4:38:d7:72:b5:a1:fc:d6:c2:ad:46:87:ae:b6:71:e1:64:cd:
         13:23:a8:3c:cc:86:65:44:35:fd:b5:98:87:fb:6a:fa:99:4e:
         db:89:b1:f4:0b:41:12:be:fb:a8:5a:4d:cb:e4:10:8a:62:ae:
         21:9f:86:a5:84:88:d9:17:e1:70:a2:32:c2:33:fc:7e:0b:33:
         6e:ea:c5:f1:c1:50:7d:27:05:1f:ed:6d:ca:89:f3:fa:02:aa:
         ab:73:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----