Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3235342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          l1+e/mUbBaquIPKXFNukF2EpuQjQ0SzFz+k5DH3U654=
Subject key identifier:   74:A8:16:5C:89:5D:B3:FB:F6:94:67:AB:7D:AF:E6:E1:E9:AB:B9:EA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       17292C9D49389B4283211B4B1F1009394ADEFA8D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:2c:9d:49:38:9b:42:83:21:1b:4b:1f:10:09:39:4a:de:fa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:a1:94:25:8c:9f:78:b5:82:cb:01:bc:db:
                    fe:0b:8a:b8:19:b1:c5:87:21:e7:bb:4d:ff:9d:ae:
                    02:4c:5c:45:2b:42:d1:e7:4c:3e:10:60:d8:6e:1b:
                    85:f8:ee:28:5b:9b:6c:1f:16:b1:77:31:51:2e:b7:
                    7d:68:96:3c:8d:12:56:0d:43:37:f1:bf:1d:52:55:
                    6d:69:4a:6f:74:ca:07:34:5b:06:73:9b:a7:1c:32:
                    0b:6e:b4:00:af:d3:13:c9:62:0d:da:40:47:03:ce:
                    fa:0c:71:f7:3f:28:5d:65:41:9f:bb:60:7e:8c:b2:
                    1f:89:03:6d:3e:99:b8:81:28:d9:8e:03:f2:3d:62:
                    bd:81:4d:8e:c1:8c:8e:c6:08:4f:04:1c:3b:85:56:
                    0a:a3:70:c7:06:58:13:21:d1:85:20:1d:2b:58:36:
                    76:72:ca:cb:1a:76:36:5e:6b:5d:ee:e3:20:05:c8:
                    6c:dc:3d:ee:eb:a9:66:67:fc:af:d0:da:6c:d5:19:
                    58:d6:8a:c9:86:c5:36:d6:22:ed:5a:75:58:fa:73:
                    f6:bc:2d:e1:e3:53:20:0f:bc:79:0e:d0:2b:ba:65:
                    16:49:94:72:93:24:2b:f8:bf:93:e2:20:ed:28:41:
                    f1:ef:2c:d2:1d:bf:e1:e4:09:81:34:69:01:0b:0e:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:16:5C:89:5D:B3:FB:F6:94:67:AB:7D:AF:E6:E1:E9:AB:B9:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3235342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:63:bc:8c:62:c1:94:14:8f:e5:4b:fe:69:ad:96:6d:fc:
         46:a4:9f:ba:3e:bc:5d:de:35:1e:07:b8:ab:8c:17:4e:45:1d:
         59:3d:16:7e:2e:e0:c1:35:de:22:bd:83:c1:25:2d:3a:2c:3c:
         47:69:fc:8d:c4:a3:66:ee:8b:99:dc:87:93:bc:19:70:e9:91:
         49:dc:f5:5f:22:a8:97:fc:90:4e:ee:76:d2:1b:3a:f4:b4:26:
         d6:bc:34:14:2f:8b:90:e4:9c:81:da:6c:7f:47:0f:14:37:4e:
         cc:17:5c:31:7c:cb:94:81:12:13:ea:4f:dc:52:a2:ec:ee:38:
         f5:4c:c1:91:5c:ee:24:43:65:bc:7c:42:55:ed:5c:e7:38:1c:
         21:53:7e:10:20:4d:49:84:eb:e7:0d:f3:39:2e:36:8b:b4:fd:
         53:22:b5:1d:81:29:43:85:48:6a:7c:b6:5a:db:67:60:59:87:
         66:cc:e6:44:9a:a6:28:07:27:e6:39:31:48:08:39:6c:51:4e:
         dd:a2:da:9f:88:5a:de:de:b7:af:94:bd:fa:3b:e5:34:d3:87:
         d9:ba:8c:bf:52:90:af:b9:58:fc:3d:e4:dd:1a:b0:88:05:29:
         53:ba:92:c7:9b:aa:cf:6b:d4:d6:d2:c7:7f:f7:9c:1c:06:51:
         65:f3:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----