Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37382e3131302e302f32342d3234203d3e2030.roa
File:                     3130332e37382e3131302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          z/D6h77/SBAMdSpckCLOIradG12Ghrg1mv3NjVOewfM=
Subject key identifier:   10:CB:AB:4B:65:3F:03:4B:5C:29:68:69:21:08:C3:CB:34:08:E2:89
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       228BCEC0C984CECF87ED032E84E9493C6648FF61
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37382e3131302e302f32342d3234203d3e2030.roa
Signing time:             Thu 20 Jan 2022 10:35:00 +0000
ROA not before:           Thu 20 Jan 2022 10:30:00 +0000
ROA not after:            Fri 20 Jan 2023 10:35:00 +0000
asID:                     0
IP address blocks:        103.78.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8b:ce:c0:c9:84:ce:cf:87:ed:03:2e:84:e9:49:3c:66:48:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 20 10:30:00 2022 GMT
            Not After : Jan 20 10:35:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:8c:bb:a4:3e:0f:86:11:c1:8c:81:a0:a2:
                    b7:6f:1e:a3:4c:4e:68:69:a4:47:22:60:d8:bf:1a:
                    a9:23:93:f8:3b:16:9b:92:0a:7c:a2:b5:68:1b:6e:
                    9a:62:cb:d7:61:75:c9:78:63:96:5e:10:60:d7:e2:
                    8c:cb:19:f2:57:09:75:4e:36:16:20:9e:2a:85:b6:
                    81:d3:0d:4e:bf:be:3b:2f:9b:ef:2a:27:8e:66:a8:
                    34:a7:a9:c0:c5:87:30:bd:2b:e2:e6:e4:d6:12:1d:
                    26:04:31:96:9d:c8:f3:80:75:2b:25:86:f8:0f:c9:
                    f7:3a:b1:49:37:0c:37:a0:fa:d0:ae:d7:80:ee:d4:
                    9d:ed:bf:32:eb:82:dd:6d:f2:7a:6c:98:98:58:6d:
                    3f:b1:db:4f:87:02:12:99:93:04:42:30:25:59:67:
                    7f:fe:d7:4e:53:23:5b:1f:3c:42:89:b6:36:01:3a:
                    55:90:c1:35:11:b9:77:7c:da:95:03:8e:2b:4d:cc:
                    58:05:2b:b2:eb:1e:77:3c:ad:4c:23:e8:3c:86:6d:
                    69:77:45:52:cd:e2:5e:13:b1:10:7c:85:31:0e:7c:
                    37:30:29:7b:bb:3a:ac:42:3a:ab:6e:d9:4e:3e:85:
                    e8:4a:81:35:8a:03:3f:cc:6b:ad:bf:69:33:c8:d5:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:AB:4B:65:3F:03:4B:5C:29:68:69:21:08:C3:CB:34:08:E2:89
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37382e3131302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:e2:54:20:31:32:6f:13:71:b5:79:86:81:c2:04:ba:a0:
         b9:b3:c5:aa:c1:d7:5d:6a:c9:da:46:a1:c0:87:7b:62:ce:68:
         27:11:4e:83:31:13:f4:b8:ba:89:12:db:09:96:1c:80:64:27:
         8d:06:3d:1a:59:ee:ca:ee:78:e5:fd:98:ad:63:07:3b:b7:57:
         55:85:a7:2b:54:32:26:70:e0:c7:cb:6f:06:76:0a:4e:86:38:
         dd:da:4c:62:47:8b:e3:5b:22:34:ed:f0:9f:b7:6c:14:e1:ec:
         53:aa:e3:db:49:16:8d:00:d5:98:c1:66:58:5f:20:97:18:b0:
         9e:38:16:0e:81:9f:06:3e:e4:60:a1:59:6b:e1:88:ea:ef:3b:
         a5:64:d5:02:5a:a9:0b:b6:36:db:d6:68:6f:f6:f6:de:95:ba:
         eb:54:05:ca:6c:91:91:ef:81:8f:92:a0:7d:e5:a5:e8:e8:b3:
         7e:bf:a0:5a:f2:c0:84:f0:71:08:0e:24:f3:66:64:a6:e0:7d:
         5f:ac:85:2a:fc:df:5b:73:fd:05:25:a4:57:11:4e:7e:38:3a:
         63:92:2d:da:ab:8a:8c:bc:4e:bb:43:68:57:40:51:81:8d:17:
         98:1a:99:cf:01:cc:05:f9:4b:5b:28:6a:41:d8:f2:8d:7b:13:
         af:a0:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----