Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3137352e302f32342d3234203d3e203539323732.roa
File:                     3130332e3232352e3137352e302f32342d3234203d3e203539323732.roa (raw, json)
Hash identifier:          A6cWq/N9a/5iraO2Xk2KqEB+yHhy6fPFvakawMI0gW4=
Subject key identifier:   C4:D7:D7:2A:63:13:9B:2D:48:47:BA:2D:7C:1A:0A:9D:F2:42:5B:EA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       332FF174C41EDFD88A8A120A7009FFEA3F8D784F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3137352e302f32342d3234203d3e203539323732.roa
Signing time:             Tue 15 Feb 2022 10:00:00 +0000
ROA not before:           Tue 15 Feb 2022 09:55:00 +0000
ROA not after:            Wed 15 Feb 2023 10:00:00 +0000
asID:                     59272
IP address blocks:        103.225.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2f:f1:74:c4:1e:df:d8:8a:8a:12:0a:70:09:ff:ea:3f:8d:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 15 09:55:00 2022 GMT
            Not After : Feb 15 10:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:1b:fa:6a:ab:cb:0e:11:47:cb:8a:4b:8a:
                    7d:f2:e6:8d:58:7a:9c:82:8f:7b:8b:41:26:fc:c2:
                    79:e7:1c:b1:1b:1b:16:47:b1:65:4c:8f:3e:1a:4c:
                    03:05:89:d1:32:58:a4:36:07:5a:ae:ab:f9:43:19:
                    0d:d5:12:17:bc:eb:f0:5c:74:57:43:2c:33:6f:0d:
                    09:53:fe:f4:10:fb:70:38:bc:5a:12:9e:dc:38:73:
                    3b:3f:49:75:5f:3f:72:a6:43:89:f5:9e:74:ee:de:
                    be:a6:ec:36:84:47:80:3a:fb:15:e8:cc:1b:1b:11:
                    9d:87:ab:d7:99:5a:be:0c:6d:53:51:90:14:e3:7d:
                    c2:c7:73:c2:52:25:f7:21:3c:47:59:69:11:d6:9c:
                    3b:68:41:85:34:36:0f:41:9c:4c:f6:41:cc:e5:d8:
                    c0:1b:1e:ce:6a:1f:e8:4c:21:c1:74:bf:28:7d:bd:
                    70:4b:bc:58:a9:6f:49:96:cc:da:85:7c:96:da:60:
                    63:40:53:2a:ea:3d:7c:05:28:35:f5:5a:95:3a:94:
                    33:e9:79:37:1a:7d:e4:71:bd:ac:0a:6c:e6:b5:94:
                    6c:70:f5:fa:f1:b4:24:fb:f9:12:8a:88:04:51:46:
                    6d:0c:bd:3c:86:16:14:50:bb:d4:db:17:dd:1a:a8:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D7:D7:2A:63:13:9B:2D:48:47:BA:2D:7C:1A:0A:9D:F2:42:5B:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3137352e302f32342d3234203d3e203539323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:21:6f:22:92:10:8c:65:50:43:d1:bf:3b:b2:41:01:5c:f8:
         f1:d1:8b:b1:70:e2:a0:da:ec:0d:71:6b:f0:04:dc:b1:04:31:
         11:bb:1d:ea:db:6d:d9:18:c3:56:d7:bf:06:19:86:37:a7:ce:
         b4:22:3a:3a:7d:15:b6:53:f6:d2:fe:a8:9e:28:d4:4b:90:61:
         9d:6d:73:9d:95:6f:ae:ed:b5:23:bd:3f:32:d9:66:68:ec:a7:
         9f:64:b3:3d:01:5d:5a:9a:77:2f:4b:0d:d3:15:1b:13:da:7b:
         56:3d:64:ed:ae:59:44:7f:2e:a1:d3:c3:a9:fb:90:f5:1d:0c:
         1d:2e:83:d7:46:b3:00:65:34:fc:f1:ea:15:87:e0:55:74:c7:
         e2:94:8a:40:fb:5d:20:23:7a:d2:f8:d1:83:64:6d:f0:59:95:
         1c:6d:9b:5c:15:40:59:b7:a4:bf:87:01:d6:b2:a6:fd:3f:36:
         f1:d4:8b:5e:7b:66:1a:3d:22:f0:d9:7f:02:09:df:44:d6:1c:
         dd:df:73:e8:c6:50:65:77:f3:7b:0f:23:52:ba:88:fb:c8:63:
         3c:9e:b4:65:11:09:3c:da:e4:ff:51:d3:63:60:74:c8:bf:42:
         41:36:ac:1d:db:e3:ec:34:0d:df:be:a8:3b:55:4b:2e:1d:b3:
         f8:14:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----