Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33382e302f32332d3234203d3e20313336303532.roa
File:                     3130332e33312e33382e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          M/qOpWnwC7TWhsBlKX4HIbdW2AwRNJARjjJRu3j3rD4=
Subject key identifier:   63:5A:23:93:0E:5E:45:78:64:D9:24:DD:CA:25:BA:A6:53:00:1F:B3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C8C3FFAD8EA5E707079A6C772DCE804A0AFC5BF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33382e302f32332d3234203d3e20313336303532.roa
Signing time:             Sat 18 Dec 2021 10:00:00 +0000
ROA not before:           Sat 18 Dec 2021 09:55:00 +0000
ROA not after:            Sun 18 Dec 2022 10:00:00 +0000
asID:                     136052
IP address blocks:        103.31.38.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:3f:fa:d8:ea:5e:70:70:79:a6:c7:72:dc:e8:04:a0:af:c5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 18 09:55:00 2021 GMT
            Not After : Dec 18 10:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:4a:76:45:23:b0:33:3f:6d:61:b9:d6:5f:
                    2f:ac:4d:81:95:59:bb:a6:d9:3c:0a:f6:9d:9b:55:
                    47:a8:79:33:7f:22:73:41:a7:14:ae:c7:2f:f2:5b:
                    06:d4:4e:4e:fb:4d:e4:8a:95:a2:03:f2:17:82:c2:
                    4a:fa:da:55:1e:e3:b4:9b:e6:5d:fe:a8:f9:14:4d:
                    52:aa:64:03:08:1d:99:32:41:88:ea:3d:6e:6e:ea:
                    d5:6b:22:3a:ab:05:78:96:ea:70:e1:7a:a4:29:29:
                    1b:68:6e:f1:76:b1:30:84:27:83:70:53:40:ae:e8:
                    23:43:bf:45:77:f7:ab:47:9c:32:9a:6f:75:de:2f:
                    dd:08:6e:6f:9d:71:98:67:dc:51:7b:b8:9c:b0:d6:
                    32:f2:da:05:b4:b4:c5:d7:a2:68:6d:47:2d:dd:88:
                    f4:24:77:8f:e6:13:8a:bd:2b:90:fa:47:c8:2e:a3:
                    df:7c:02:b1:43:ce:c2:ab:d5:cc:d5:ed:80:da:32:
                    40:e7:c2:d8:9d:b3:67:f9:44:b2:ec:ff:53:b2:6c:
                    82:a2:35:da:94:27:23:d0:95:3e:a5:9f:c4:4b:f3:
                    dc:33:af:e2:04:a9:23:96:1c:ce:f0:54:1c:ac:4f:
                    d7:58:a1:fa:f7:ae:fa:16:31:d6:7a:d3:be:a1:3b:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:23:93:0E:5E:45:78:64:D9:24:DD:CA:25:BA:A6:53:00:1F:B3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33312e33382e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:b9:93:db:ed:c2:63:ea:76:5f:fe:7c:32:1a:73:db:73:
         64:f2:ca:23:53:72:33:bf:b2:26:87:f2:e4:65:2d:87:27:5e:
         93:84:6a:77:d3:99:cd:28:e4:80:2f:20:84:d6:22:03:74:4e:
         63:5a:35:bb:9c:c5:fd:1a:2c:9d:c8:22:6f:4f:61:7b:7d:7b:
         c4:34:83:de:75:0d:83:22:ca:af:3e:e5:73:0c:6c:d6:d1:4c:
         0d:d1:d1:24:83:fd:94:9f:61:68:4b:b0:22:15:fe:61:f9:02:
         cc:d3:fa:78:45:cb:b3:d5:fa:00:73:1d:3c:87:c1:cd:f9:51:
         f7:a7:3f:be:5b:a6:ff:91:b1:31:f3:45:14:ab:dc:29:81:4f:
         f0:d4:73:75:6a:51:03:bb:36:0e:e3:e2:6b:cb:2b:6e:ae:9b:
         45:70:d9:08:54:3a:47:5e:26:d3:94:24:81:48:f4:37:c4:27:
         20:2b:14:8a:27:93:44:4e:96:98:16:55:2b:c6:17:9e:eb:36:
         95:a2:23:93:6b:96:7b:bf:26:64:93:53:27:74:b0:0a:27:c5:
         01:fb:cb:ce:4a:77:04:af:19:ab:b7:68:9a:f9:9a:39:0b:ce:
         cb:06:87:4a:19:57:72:ba:17:f7:97:10:ea:3d:b7:97:d3:8c:
         44:b8:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----