Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e36312e302f32342d3234203d3e20313336313233.roa
File:                     3130332e39382e36312e302f32342d3234203d3e20313336313233.roa (raw, json)
Hash identifier:          yngRu6BxwRUgID0IYA4L1gAi1vYqYPvr7U65kpEhQU4=
Subject key identifier:   80:4E:4A:7E:63:2A:5B:A6:C0:37:30:F8:29:1C:8C:0D:D1:F3:5E:67
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       462413C375BBDC698E871217FE886F348D434727
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e36312e302f32342d3234203d3e20313336313233.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     136123
IP address blocks:        103.98.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:13:c3:75:bb:dc:69:8e:87:12:17:fe:88:6f:34:8d:43:47:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:f3:3e:1e:7a:8c:c8:3b:e9:57:53:45:2c:
                    a7:43:22:8d:d3:2a:e8:91:1c:38:f0:39:9a:6b:67:
                    71:30:a2:fb:5d:2a:fb:24:43:66:41:14:ef:a5:fa:
                    9a:3a:8d:06:41:af:a5:84:ba:40:04:56:17:9a:46:
                    38:8f:a8:69:0b:c5:00:78:e4:58:79:37:a6:5d:75:
                    60:80:df:29:04:73:98:6a:05:8e:0c:1d:b4:e2:73:
                    b7:d2:51:10:92:68:53:71:12:71:eb:81:01:f7:d6:
                    8d:e1:ff:78:6d:9f:5d:f5:9e:a1:5d:35:7e:bf:78:
                    cb:b4:74:1d:39:d9:62:99:f9:b5:88:ca:04:e7:3e:
                    01:21:f2:2a:e4:4e:47:be:34:62:b0:d9:bd:1d:7f:
                    fd:72:d8:7b:5a:26:8b:aa:e4:df:6d:04:4d:b7:13:
                    24:7a:06:a4:6f:90:1d:96:bc:fc:3e:87:93:05:bd:
                    af:87:0e:18:60:86:06:2b:22:1e:79:f1:9e:60:35:
                    c6:29:e6:ce:7c:45:4e:cc:4a:a5:e3:44:c6:f6:a0:
                    62:35:c6:7b:af:f7:19:bd:88:6c:6a:4e:f4:0f:fb:
                    90:66:32:2d:22:25:cd:a1:fb:36:6b:f0:3a:49:e7:
                    ef:de:cd:18:89:17:2a:16:c9:f7:d1:e8:99:85:35:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:4A:7E:63:2A:5B:A6:C0:37:30:F8:29:1C:8C:0D:D1:F3:5E:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39382e36312e302f32342d3234203d3e20313336313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:74:1d:04:4e:23:eb:36:70:cb:2b:e1:65:10:3c:84:e4:
         84:d8:16:c7:b9:c2:f3:aa:77:4c:01:98:d7:92:1d:91:90:82:
         d4:5c:b3:5b:9c:26:26:cb:67:e8:44:ea:fe:2c:24:18:af:8a:
         b8:04:80:79:83:a4:fa:a1:35:22:a9:f4:cd:14:cc:87:f1:48:
         14:f7:63:14:10:54:96:96:8c:4e:45:0f:a0:53:1c:30:34:db:
         dc:56:02:b7:63:30:4b:af:d9:f0:0f:9d:35:df:5b:e8:8e:cb:
         19:2b:80:85:5d:0f:37:d3:33:cc:85:82:f8:26:85:4f:94:c9:
         ca:f9:1e:0b:d4:9c:80:9f:77:3f:ab:08:9b:e7:80:ee:f5:63:
         93:29:5c:79:cd:5a:de:be:a7:46:2a:03:c3:55:dd:c4:a0:f6:
         33:a2:7a:24:36:b4:28:0b:de:a1:83:70:5f:4d:fa:ea:38:62:
         bb:d5:19:fd:bc:54:c5:78:bd:56:1e:95:28:33:ec:d0:be:c7:
         9e:bd:b0:23:1b:52:ea:92:2c:ef:17:b9:c3:f6:c5:5f:6e:40:
         5c:72:07:2e:f4:60:c9:d6:7b:02:b4:9f:aa:cc:bd:66:b5:f5:
         97:68:18:67:d8:10:00:71:8b:49:7f:b2:53:cf:ab:da:78:b5:
         6e:12:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----