Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134342e302f32322d3234203d3e203535363939.roa
File:                     3130332e38342e3134342e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          3r02awSucEldzPKvQ67Vtu00npC7U7ZIcHchDvain5Q=
Subject key identifier:   91:D6:F8:0C:56:81:55:43:B5:29:BC:61:45:1C:84:85:6C:3E:0F:69
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2CC31510DE22C9D3F02E439EC00FBC11DB0B267D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134342e302f32322d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:01 +0000
ROA not before:           Wed 27 Oct 2021 08:55:01 +0000
ROA not after:            Thu 27 Oct 2022 09:00:01 +0000
asID:                     55699
IP address blocks:        103.84.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c3:15:10:de:22:c9:d3:f0:2e:43:9e:c0:0f:bc:11:db:0b:26:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:01 2021 GMT
            Not After : Oct 27 09:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:5b:56:c3:22:77:7f:7c:6d:5a:84:ba:26:
                    72:a9:cc:7b:09:e0:1e:72:f6:90:28:50:b7:95:57:
                    67:2b:c8:b1:47:bf:94:69:cc:80:f4:7e:d2:c4:2d:
                    bd:aa:3b:00:0d:d5:7b:2b:d8:ea:9a:43:95:46:9e:
                    dd:db:af:2b:01:15:ec:e8:a1:a2:a9:d8:14:eb:f9:
                    79:c0:d1:22:d0:7d:a0:8e:84:f6:8a:cc:75:ad:96:
                    a1:c3:4c:9b:68:ea:e0:ff:1a:ac:86:1b:13:0e:7c:
                    7c:13:f3:7c:80:10:c0:38:60:64:d0:fc:fb:87:73:
                    ed:de:26:db:4e:70:ff:a0:cf:5d:67:32:0f:47:f7:
                    e5:d9:01:c2:4d:4b:2e:fd:e3:fe:79:8b:1b:6c:60:
                    c8:06:65:63:e1:50:f7:c5:9d:fa:40:40:73:d2:16:
                    22:bc:b7:20:6e:13:6c:d5:ea:5d:8e:fd:77:35:92:
                    9c:f1:b6:4e:34:ab:95:eb:46:0f:9e:81:24:92:ed:
                    b5:ef:dd:1b:4b:2b:56:3d:61:87:7e:51:30:14:c5:
                    02:60:07:23:0d:26:7b:8c:23:92:58:1e:88:42:d3:
                    05:9a:f2:b8:59:a9:b8:15:bb:bc:2a:d4:a6:47:7b:
                    02:00:9b:9c:ee:19:9f:55:ed:0d:8b:fb:b7:11:83:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:F8:0C:56:81:55:43:B5:29:BC:61:45:1C:84:85:6C:3E:0F:69
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3134342e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:7b:b3:26:39:b0:a1:ab:3b:c5:b8:8d:ff:e3:2a:39:6c:
         35:87:32:c4:a0:47:e1:14:02:7a:78:79:d9:f0:27:8f:21:ab:
         c6:3c:89:07:bb:fd:fd:0d:0e:d0:d0:27:42:63:81:6c:2c:a2:
         91:91:18:a5:10:b9:f4:ca:0e:93:bb:a3:96:ea:30:c8:c3:f8:
         e3:29:1f:dc:fd:fd:f0:7e:99:b4:92:d9:30:d0:fa:05:6e:0e:
         98:c3:19:75:e7:77:f1:ec:6c:36:40:3c:56:1e:f5:7c:c5:0f:
         0e:10:f7:25:41:60:ca:af:b7:3b:b6:f0:84:28:e9:5d:df:64:
         21:d9:56:1b:3a:30:fc:36:b7:ff:bd:64:25:cb:e9:07:c5:bd:
         41:1b:2d:a3:60:f5:cc:a1:dc:f0:41:ac:fe:ed:46:20:cb:1d:
         b2:d9:ff:2c:fe:56:fb:a9:4e:97:6b:7f:3f:44:ae:ff:3d:74:
         b7:10:3e:02:b6:7a:50:e6:7f:12:93:40:39:c6:1d:08:c5:2d:
         96:75:13:32:fb:dd:d1:1e:8a:8b:ef:93:be:ad:82:d1:e5:77:
         74:07:e1:f3:83:cb:d3:ab:67:ef:19:8b:0c:23:9e:3b:29:92:
         35:ae:87:9f:01:c7:d3:dd:80:c8:b4:b9:a5:1b:2c:33:ba:b9:
         5b:df:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----