Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138302e3132342e302f32332d3234203d3e20313431393638.roa
File:                     3130332e3138302e3132342e302f32332d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          k7cwZcUStBGnTL8Ut+Xg27PWGxcZZQLiOolUsoihlk8=
Subject key identifier:   84:E0:AB:D9:8D:EF:5B:F0:C2:30:52:58:8E:86:30:47:33:9D:BA:4F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C00519B011C78707704A25EA0C4A82611A439CF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138302e3132342e302f32332d3234203d3e20313431393638.roa
Signing time:             Fri 28 Jan 2022 03:29:23 +0000
ROA not before:           Fri 28 Jan 2022 03:24:23 +0000
ROA not after:            Sat 28 Jan 2023 03:29:23 +0000
asID:                     141968
IP address blocks:        103.180.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:00:51:9b:01:1c:78:70:77:04:a2:5e:a0:c4:a8:26:11:a4:39:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 28 03:24:23 2022 GMT
            Not After : Jan 28 03:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:97:b1:82:c6:9c:f5:bb:40:43:f6:29:f7:
                    a2:a6:95:4a:ab:99:ab:63:a4:fb:67:78:23:01:6b:
                    fb:a4:5e:3e:b2:9e:b1:c4:bc:8d:21:14:4c:f3:21:
                    5d:17:52:1b:16:c8:bd:5f:a0:63:fb:2f:76:17:72:
                    70:09:43:8f:a2:d6:e1:41:d3:72:03:07:c0:74:4e:
                    82:41:d2:e6:d2:8c:7b:b0:a6:4a:a3:d2:82:77:ac:
                    d6:37:17:d7:c8:d1:cc:58:61:11:cf:ae:6c:61:46:
                    51:4c:72:33:69:35:60:bb:b7:ae:1e:cf:e5:21:47:
                    27:34:c2:92:98:8c:4a:cf:97:87:eb:eb:e1:02:54:
                    7b:f6:fc:c9:29:c1:36:69:35:cf:05:ee:ce:19:2b:
                    c2:0d:84:69:31:ac:6b:16:0e:d0:8b:54:9f:58:9c:
                    e2:f4:36:00:d0:a9:5e:07:52:f2:23:b4:66:32:b7:
                    30:81:13:26:bd:b4:6e:79:c0:36:f9:ed:d3:87:7b:
                    57:fc:56:c4:45:e4:45:31:9e:37:1a:b7:4e:5d:04:
                    2b:30:5f:01:96:f4:d4:d8:a0:35:8b:78:22:cf:4f:
                    17:d9:7c:7e:b0:f5:89:86:b2:a0:e1:29:bd:bd:2b:
                    a0:a6:f8:0c:a4:0d:3f:e2:36:37:50:a7:5e:6e:5d:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:AB:D9:8D:EF:5B:F0:C2:30:52:58:8E:86:30:47:33:9D:BA:4F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138302e3132342e302f32332d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:24:6a:6b:e1:8b:28:11:91:b6:ba:c5:84:a7:71:3c:c9:
         89:85:85:d2:39:36:43:80:b7:14:41:fb:44:42:ee:0e:fe:f9:
         3e:9d:ed:e9:79:43:a0:6d:fa:f4:2e:57:03:ee:89:cc:4f:04:
         38:b7:74:c6:23:8b:42:4d:a6:f9:60:a3:e0:64:c7:40:d6:b5:
         49:fd:b3:f6:9c:95:e8:ca:35:0a:6a:1d:ba:20:bf:e4:97:7e:
         bb:9d:1c:de:56:f9:48:89:94:ee:57:a6:0c:5c:6f:5a:ab:f7:
         9f:0f:70:a8:7f:a2:a2:7b:75:51:eb:a3:bd:9c:8b:a0:7b:10:
         ea:4b:78:56:31:44:cc:52:31:74:ac:69:55:0d:65:0c:a7:4e:
         26:1e:e8:34:c6:78:e8:86:58:2c:41:7b:83:61:33:20:5b:13:
         c4:91:da:11:db:da:73:b6:cb:41:86:78:1a:fc:8b:24:4b:51:
         ea:f0:0f:27:b8:4e:2f:0a:ba:f1:da:d2:e4:55:cc:ca:7e:02:
         7a:a7:b5:40:13:48:54:53:aa:f7:02:9a:82:75:fa:7a:b0:38:
         e0:79:0b:25:92:fc:f6:f3:b1:92:31:f9:3c:1f:ba:9b:3e:aa:
         01:61:00:dc:1d:66:cb:5b:96:8b:e4:2e:71:9a:e0:85:1a:f4:
         a4:01:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----