Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32372e33362e302f32342d3234203d3e20313332363730.roa
File:                     3130332e32372e33362e302f32342d3234203d3e20313332363730.roa (raw, json)
Hash identifier:          yIGzyFtQV8d6VivSOIY9p2UqP7vSSN85pVRzc4JtlaI=
Subject key identifier:   32:BA:FF:AF:7E:4E:6F:5A:12:3A:FE:5D:28:CC:BF:ED:40:30:9D:0D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       78148A6BA8824391DAE26301635D6D938CF605E8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32372e33362e302f32342d3234203d3e20313332363730.roa
Signing time:             Fri 19 Nov 2021 05:00:01 +0000
ROA not before:           Fri 19 Nov 2021 04:55:01 +0000
ROA not after:            Sat 19 Nov 2022 05:00:01 +0000
asID:                     132670
IP address blocks:        103.27.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:8a:6b:a8:82:43:91:da:e2:63:01:63:5d:6d:93:8c:f6:05:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:01 2021 GMT
            Not After : Nov 19 05:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:73:45:61:13:7c:9a:07:59:89:b0:64:fc:
                    c9:4d:3b:24:b5:88:ca:4a:fb:fa:c6:da:4d:a2:b4:
                    65:46:39:81:83:6e:e8:30:34:bd:f0:83:5b:2f:17:
                    2d:a1:d8:8b:9c:5e:2a:ee:71:be:c9:da:c3:5b:c5:
                    a4:bd:c5:f8:d7:55:c0:4f:5f:3e:b3:47:82:aa:6e:
                    85:40:1e:b6:6f:5a:45:79:eb:6d:fe:a6:16:ea:2e:
                    ac:eb:e6:9f:61:9c:27:c0:0b:6b:b9:99:b1:2e:5b:
                    b7:b4:3b:d6:bb:00:07:a4:31:0b:30:41:e4:74:cd:
                    17:05:89:91:7d:2e:49:4b:37:c8:29:f4:ae:94:17:
                    fe:78:7c:fa:6c:77:af:cd:a8:ca:84:ff:9c:17:8e:
                    91:b0:df:3a:c8:63:7e:99:94:94:64:e1:60:91:74:
                    85:4f:95:35:89:32:71:08:16:54:d8:49:2d:a1:c2:
                    f7:5d:35:4b:49:63:01:74:e5:c3:e1:f0:f7:ff:23:
                    b9:aa:c7:cc:c8:25:09:3e:6b:e6:eb:11:0a:ac:59:
                    03:60:87:c7:00:1c:88:d5:13:7f:62:e1:36:8f:0d:
                    24:1e:31:86:29:41:a8:67:17:97:b9:e2:52:cd:32:
                    a0:cc:85:9e:e6:89:36:3d:88:a8:03:fc:d8:22:13:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:FF:AF:7E:4E:6F:5A:12:3A:FE:5D:28:CC:BF:ED:40:30:9D:0D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e32372e33362e302f32342d3234203d3e20313332363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:e9:3c:55:d4:6c:ed:9c:f1:b4:51:38:04:72:52:25:69:
         de:56:18:c3:0a:c4:a9:22:8f:27:28:4a:ad:b5:f7:3b:b3:1b:
         7e:ae:c2:d9:b2:28:59:ed:37:23:6e:14:7a:23:64:e6:a4:10:
         60:1d:ad:e1:27:e2:fa:69:ed:66:7b:4f:7e:1e:2c:57:09:06:
         ed:f6:60:78:63:2f:1f:55:64:6d:d0:05:4f:7e:c9:44:3a:83:
         fd:33:c6:a2:ed:2b:fc:03:93:12:af:ed:19:84:65:6b:e8:a8:
         d3:51:60:b4:a6:d3:de:43:ad:d1:3e:b7:a1:c0:02:56:40:dc:
         08:a4:3a:c5:cd:c1:11:2b:70:8c:0d:47:ae:d2:95:8c:31:1b:
         58:6f:1d:6f:7d:2e:67:94:70:af:bc:b3:67:4e:56:15:1a:ce:
         a8:8a:eb:b4:8c:43:dd:28:d9:59:1c:2b:d9:fa:84:e9:e2:e3:
         ce:b3:a6:78:96:16:dc:23:71:46:7a:4d:a2:63:22:ec:17:e2:
         bd:c6:5f:9e:cf:ed:c9:31:eb:82:e2:f4:93:66:d1:b2:2c:4e:
         cf:32:84:fc:d6:4f:72:44:90:81:cf:d8:01:70:eb:7d:7e:68:
         b2:c3:1c:7d:43:62:38:c1:18:8e:79:29:d2:3b:3e:09:16:ef:
         f2:9b:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----