Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231382e3136352e302f32342d3234203d3e20313338303931.roa
File:                     3130332e3231382e3136352e302f32342d3234203d3e20313338303931.roa (raw, json)
Hash identifier:          vUoHQAMLg28mD17lhbT5/Gi7sYGTVVn2cuocU9IywGg=
Subject key identifier:   F1:58:FA:83:A5:26:5E:63:9F:A5:6C:46:40:0E:8A:40:87:C7:C4:06
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1F6E1F780B1E05A07396A26A463C9B1089F1FCAB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231382e3136352e302f32342d3234203d3e20313338303931.roa
Signing time:             Fri 18 Feb 2022 08:00:00 +0000
ROA not before:           Fri 18 Feb 2022 07:55:00 +0000
ROA not after:            Sat 18 Feb 2023 08:00:00 +0000
asID:                     138091
IP address blocks:        103.218.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6e:1f:78:0b:1e:05:a0:73:96:a2:6a:46:3c:9b:10:89:f1:fc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 18 07:55:00 2022 GMT
            Not After : Feb 18 08:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:68:d5:fb:9b:a2:0d:9c:5d:73:d6:0e:b1:
                    b1:95:3b:68:e7:dc:07:45:32:a9:c3:9a:5e:75:a0:
                    7a:06:5e:9b:ae:cd:47:0b:bb:ca:2a:df:7a:29:2c:
                    4d:ae:b3:83:83:cf:90:ff:eb:d9:39:f1:18:9e:a5:
                    c4:28:1f:e6:fb:3e:2b:4f:83:1a:0e:af:84:bc:22:
                    71:e4:a4:0d:ea:74:72:62:51:1d:b9:d6:99:d3:88:
                    dd:88:c0:90:46:19:93:03:aa:fc:12:ae:82:a4:28:
                    d5:64:80:90:01:53:b5:80:1f:56:a5:36:f4:5b:84:
                    bb:ea:8b:76:fb:5d:63:7c:d9:fd:3e:7d:55:e4:b6:
                    20:1e:5d:ee:eb:37:57:bf:70:a0:dd:29:48:3e:72:
                    2a:a4:c8:d3:09:c5:9a:cf:80:20:4d:22:16:f7:dc:
                    3c:56:46:3e:8b:70:0d:3e:e6:aa:56:ab:e8:16:f6:
                    d6:56:d8:61:04:e9:d6:01:c4:48:f6:18:98:a6:43:
                    5e:94:46:09:72:90:ea:12:d1:17:a6:8a:22:33:8a:
                    f0:93:84:f0:24:5f:ab:08:71:b6:fc:0f:a7:e1:68:
                    e7:85:3f:74:4f:6d:3b:79:ee:bb:56:32:b4:17:96:
                    92:cb:9e:ea:f3:69:74:95:ad:9c:b1:50:9e:47:19:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:FA:83:A5:26:5E:63:9F:A5:6C:46:40:0E:8A:40:87:C7:C4:06
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3231382e3136352e302f32342d3234203d3e20313338303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f6:62:c5:f7:cf:fb:55:40:28:07:df:ca:76:2e:85:35:69:
         b7:c2:8f:e1:36:c3:41:84:62:e1:f4:04:1f:76:0c:e5:1b:ad:
         97:e3:69:f8:c8:53:ea:e1:cf:63:d5:63:e2:38:b4:b4:fe:d4:
         a4:25:b0:5a:5f:97:99:b6:0f:43:a1:70:6d:f6:72:ca:30:f5:
         40:f9:c7:41:6e:34:38:55:f8:d8:3d:63:ed:9c:2c:f5:fc:36:
         02:60:eb:e7:1b:17:5b:29:b7:33:ca:8f:5a:83:e8:45:f4:36:
         90:de:77:00:5b:77:8e:e7:d3:17:08:2d:4c:d9:13:c1:a9:34:
         b6:4f:00:53:2e:5d:7a:74:a3:4c:ed:a0:46:30:e2:43:4a:e9:
         f4:ec:45:23:e6:52:6e:b5:44:8a:8a:a9:8c:6b:26:2d:71:a0:
         01:6b:a3:c0:b2:e5:c5:65:5b:63:ed:71:3d:b8:63:1c:50:ee:
         b0:17:d7:14:bb:f6:08:09:2f:d9:c1:b5:4c:45:b6:4b:95:15:
         85:48:14:7b:b1:c9:fa:0f:62:99:ba:49:59:a1:8b:f8:51:64:
         85:75:0d:fa:a7:ea:b4:39:49:a5:29:a7:5c:15:49:b2:52:19:
         14:a8:7f:b1:e4:bc:4f:24:69:45:5c:5f:4f:fb:24:ae:f9:43:
         f4:17:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----