Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3232382e302f32322d3234203d3e203535363939.roa
File:                     3130332e38342e3232382e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          cWG7y2CcbGYj0YYizzzHwJEWnlyi8O4/2t7G9M92VQ8=
Subject key identifier:   04:26:34:E9:CC:64:E2:C0:FB:47:8E:C5:4B:48:B1:2A:EA:60:4D:1D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3266D1BA5D0699411E73FC7671D3DC18D6F71FE0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3232382e302f32322d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:00 +0000
ROA not before:           Wed 27 Oct 2021 08:55:00 +0000
ROA not after:            Thu 27 Oct 2022 09:00:00 +0000
asID:                     55699
IP address blocks:        103.84.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:d1:ba:5d:06:99:41:1e:73:fc:76:71:d3:dc:18:d6:f7:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:00 2021 GMT
            Not After : Oct 27 09:00:00 2022 GMT
        Subject: CN=3082010A0282010100BE4AFE27F1FB802412E263039FF042E060DACA0E1AA33A3704E485D56388F991A4A10E0F9728A6C884484D9943D2D45BCFEF0FFE8127BD27F2502C65FD2FAAEE1301401AD5558484FD41A11BB05A4EFC2B60EABDAA50F6A98631E4A4000B8EA9CA696B71D5E96F30C88238D1BA5EECFC893CC7683E7FAFAD1EFEE73C53C2077F896FCF3B276B70534CAE4C62C597DB6BE5FCC8307DDFBC5A5D78EC78873AEBDD87A547E3DB348374484FF7AF2AB2FEBF3F0EC906EC826D256BB35B83E8159FC93FBE7A2E5A5643AAC334AD7F4FE054E49191DFD17992AFC9BFF52E7CC9B680F755E1ACB1A1F24B6B0B1C5293A8141A5A010FA66410291830E923EF653FD66EF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:fe:27:f1:fb:80:24:12:e2:63:03:9f:f0:
                    42:e0:60:da:ca:0e:1a:a3:3a:37:04:e4:85:d5:63:
                    88:f9:91:a4:a1:0e:0f:97:28:a6:c8:84:48:4d:99:
                    43:d2:d4:5b:cf:ef:0f:fe:81:27:bd:27:f2:50:2c:
                    65:fd:2f:aa:ee:13:01:40:1a:d5:55:84:84:fd:41:
                    a1:1b:b0:5a:4e:fc:2b:60:ea:bd:aa:50:f6:a9:86:
                    31:e4:a4:00:0b:8e:a9:ca:69:6b:71:d5:e9:6f:30:
                    c8:82:38:d1:ba:5e:ec:fc:89:3c:c7:68:3e:7f:af:
                    ad:1e:fe:e7:3c:53:c2:07:7f:89:6f:cf:3b:27:6b:
                    70:53:4c:ae:4c:62:c5:97:db:6b:e5:fc:c8:30:7d:
                    df:bc:5a:5d:78:ec:78:87:3a:eb:dd:87:a5:47:e3:
                    db:34:83:74:48:4f:f7:af:2a:b2:fe:bf:3f:0e:c9:
                    06:ec:82:6d:25:6b:b3:5b:83:e8:15:9f:c9:3f:be:
                    7a:2e:5a:56:43:aa:c3:34:ad:7f:4f:e0:54:e4:91:
                    91:df:d1:79:92:af:c9:bf:f5:2e:7c:c9:b6:80:f7:
                    55:e1:ac:b1:a1:f2:4b:6b:0b:1c:52:93:a8:14:1a:
                    5a:01:0f:a6:64:10:29:18:30:e9:23:ef:65:3f:d6:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:34:E9:CC:64:E2:C0:FB:47:8E:C5:4B:48:B1:2A:EA:60:4D:1D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38342e3232382e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:50:fc:fc:90:94:b3:93:91:60:42:9b:56:a8:cd:eb:d2:4a:
         27:f2:31:a8:68:b8:82:5f:14:8a:01:29:c4:e2:89:4e:7d:8a:
         7f:04:ec:2a:aa:f8:2b:a2:15:38:73:c1:c7:f8:23:6a:65:1e:
         67:84:5d:9f:f5:82:4b:f5:3b:cf:1c:f8:15:31:ad:44:9b:97:
         b3:36:77:d7:d4:bf:8e:04:94:45:e9:ff:4f:fe:4c:79:fa:66:
         73:42:f7:a5:1a:67:40:7a:a4:98:4f:d3:6b:76:b4:d9:af:86:
         69:4b:f9:29:25:1c:93:28:5c:e5:db:7b:c4:98:83:1b:3f:6f:
         29:e9:3c:d0:cf:43:e1:98:a9:41:19:5b:d2:a8:8e:6b:e0:f2:
         ab:f0:5a:9d:19:15:8a:ab:85:2b:eb:1a:63:5a:5b:07:fc:c5:
         91:7a:3a:15:78:0c:52:4d:f7:eb:b7:46:26:d2:dd:2c:91:6c:
         4c:1f:c4:8c:26:95:24:80:65:03:78:1b:56:06:fc:6a:aa:86:
         c8:1b:8d:7e:00:e4:60:fa:66:6f:a9:bf:81:3a:16:1f:7a:83:
         42:43:c8:2c:95:9b:42:55:b9:7f:84:3d:08:aa:38:c3:b5:a3:
         22:14:bf:37:64:0d:ab:10:e3:73:bf:a0:10:6a:a2:80:ee:c1:
         8a:86:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----