Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234382e302f32332d3234203d3e203539323732.roa
File:                     3130332e38312e3234382e302f32332d3234203d3e203539323732.roa (raw, json)
Hash identifier:          g1+NtbX34LRA3u2+AhHFzej00iFk7TxzeJEoGDRkcQM=
Subject key identifier:   C7:A5:77:F5:5A:82:21:C6:EA:C8:1B:0E:6D:C7:1F:23:7A:FF:24:E9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5627EBCCFF733C16598E9C8F89A7D58F209A7BA9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234382e302f32332d3234203d3e203539323732.roa
Signing time:             Tue 15 Feb 2022 10:00:00 +0000
ROA not before:           Tue 15 Feb 2022 09:55:00 +0000
ROA not after:            Wed 15 Feb 2023 10:00:00 +0000
asID:                     59272
IP address blocks:        103.81.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:27:eb:cc:ff:73:3c:16:59:8e:9c:8f:89:a7:d5:8f:20:9a:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 15 09:55:00 2022 GMT
            Not After : Feb 15 10:00:00 2023 GMT
        Subject: CN=3082010A0282010100CC5B469577F3A8D47843CF80FB518C4CD9D02D0AA0E035A28935F9D1662596CAF85E40AA988AC211B8325D87B1008F280BB8E504955F3F4B496285BACFB861E30DCB4AD11E6DF8139C708C6B9F864E083336703B18ACAC131223B7E0B25889C8E116568538C19FB631C7E897E2514C16617AEAF5898E19CA72D9B1EEB1DC79888BF2FD47C74CDCDF6852E6D8B636B97F8C30EE2971716E104398ECC0D87E884E950A4D2D8A2F6351BA504647255BEFD862D53764AC0A65157FFEFF1EFB8126EC21ECEC89A76CB981FAE1E9CE784154FF9F23FAD2ABA13C5602F54A0211666F748914D4E08D52E56F50619D0EC96CF9DB975F5B5CE0B09B45ADC19CB2AAA97C630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:46:95:77:f3:a8:d4:78:43:cf:80:fb:51:
                    8c:4c:d9:d0:2d:0a:a0:e0:35:a2:89:35:f9:d1:66:
                    25:96:ca:f8:5e:40:aa:98:8a:c2:11:b8:32:5d:87:
                    b1:00:8f:28:0b:b8:e5:04:95:5f:3f:4b:49:62:85:
                    ba:cf:b8:61:e3:0d:cb:4a:d1:1e:6d:f8:13:9c:70:
                    8c:6b:9f:86:4e:08:33:36:70:3b:18:ac:ac:13:12:
                    23:b7:e0:b2:58:89:c8:e1:16:56:85:38:c1:9f:b6:
                    31:c7:e8:97:e2:51:4c:16:61:7a:ea:f5:89:8e:19:
                    ca:72:d9:b1:ee:b1:dc:79:88:8b:f2:fd:47:c7:4c:
                    dc:df:68:52:e6:d8:b6:36:b9:7f:8c:30:ee:29:71:
                    71:6e:10:43:98:ec:c0:d8:7e:88:4e:95:0a:4d:2d:
                    8a:2f:63:51:ba:50:46:47:25:5b:ef:d8:62:d5:37:
                    64:ac:0a:65:15:7f:fe:ff:1e:fb:81:26:ec:21:ec:
                    ec:89:a7:6c:b9:81:fa:e1:e9:ce:78:41:54:ff:9f:
                    23:fa:d2:ab:a1:3c:56:02:f5:4a:02:11:66:6f:74:
                    89:14:d4:e0:8d:52:e5:6f:50:61:9d:0e:c9:6c:f9:
                    db:97:5f:5b:5c:e0:b0:9b:45:ad:c1:9c:b2:aa:a9:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A5:77:F5:5A:82:21:C6:EA:C8:1B:0E:6D:C7:1F:23:7A:FF:24:E9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3234382e302f32332d3234203d3e203539323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:82:36:6e:2a:c1:ad:f3:30:7d:d9:2f:ea:6d:c3:75:e8:
         18:37:fd:f0:6c:7a:b5:a1:3c:27:26:13:dd:50:91:81:40:52:
         41:3d:ac:9f:7e:95:1b:2d:f6:dd:2f:04:f1:24:20:7e:3d:0f:
         dd:84:78:aa:ec:44:0d:33:58:72:17:60:36:f4:ba:b0:04:81:
         23:b4:87:e6:48:0e:99:5b:31:e3:ec:4c:03:15:fe:2e:9e:15:
         bf:82:72:49:e8:5c:67:7b:f1:e4:d9:3f:70:7c:25:91:58:7c:
         a4:62:51:4a:7e:22:74:c7:c9:10:b2:db:cb:9c:ca:51:36:e1:
         04:c8:f6:d4:92:3f:5f:ff:a6:38:bb:27:58:48:91:30:88:6b:
         e5:34:46:b5:8b:c6:1c:f0:b4:4c:59:7b:2b:e0:13:17:95:b8:
         27:f9:94:9e:9f:f3:df:2b:25:e2:c4:c6:3c:a0:59:92:a9:2a:
         75:ae:c6:6e:9b:a3:be:aa:ac:40:04:cc:d4:78:34:81:44:c3:
         f0:56:69:fb:11:3a:a3:03:be:44:8b:31:84:0f:cc:bb:93:f5:
         47:e0:87:4c:70:13:17:ac:8f:46:81:01:38:c3:2f:00:0b:65:
         8b:36:51:f7:f0:d4:9d:1a:53:bf:d6:7a:59:0e:cd:30:3c:05:
         66:3d:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----