Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3139302e302f32332d3234203d3e20313336303532.roa
File:                     3131362e3139332e3139302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          cyDt+eVUgnaIhgGUIkmLz4+l/KGKYpznxc7t0AVMejE=
Subject key identifier:   58:89:04:62:63:33:4E:4C:EB:83:B9:96:CA:69:45:30:0A:C5:2B:FB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       FA41DC1C20E6618FC888E50B68941EFCBD978E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3139302e302f32332d3234203d3e20313336303532.roa
Signing time:             Sat 18 Dec 2021 10:00:00 +0000
ROA not before:           Sat 18 Dec 2021 09:55:00 +0000
ROA not after:            Sun 18 Dec 2022 10:00:00 +0000
asID:                     136052
IP address blocks:        116.193.190.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:41:dc:1c:20:e6:61:8f:c8:88:e5:0b:68:94:1e:fc:bd:97:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 18 09:55:00 2021 GMT
            Not After : Dec 18 10:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:30:99:0f:cf:5b:95:d5:d3:1a:f4:f5:30:
                    e6:33:b5:c2:c5:e9:7a:e3:b5:6a:c8:7d:73:24:b7:
                    f0:18:a7:f5:a0:2d:8b:c3:dd:ca:8a:6f:b0:f2:da:
                    03:41:7f:5e:c0:bf:b6:01:ae:1a:6e:83:75:fb:4c:
                    d3:bc:b3:f5:b0:74:6c:28:54:d2:31:c7:fc:f4:57:
                    77:ef:f7:6a:79:a5:dd:7c:6a:c8:4c:9b:88:2f:17:
                    80:34:2d:06:4b:92:d0:d4:53:bc:50:c2:41:19:8c:
                    19:11:cc:61:9a:51:06:87:30:5c:d0:d8:93:ca:fe:
                    b9:54:52:79:42:f8:37:c7:6d:75:e3:9d:0d:28:07:
                    a1:62:de:99:fc:d8:d6:96:4d:c4:4e:3a:69:2f:08:
                    68:f2:c4:a1:d8:0b:cd:3b:de:62:70:11:eb:88:07:
                    1b:50:7f:25:b3:c9:c8:e3:05:61:a0:09:e4:69:e0:
                    40:25:8f:16:17:88:69:f4:06:83:c2:6c:8f:d2:31:
                    6d:ee:c1:75:92:87:1e:6f:7c:60:5f:11:74:67:19:
                    48:59:af:fb:74:86:19:c5:81:56:5f:f8:2c:ed:b8:
                    82:bd:aa:40:09:64:77:21:26:eb:7c:df:74:54:15:
                    85:61:1c:d9:65:4e:bd:61:f8:a0:0e:60:b1:05:69:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:04:62:63:33:4E:4C:EB:83:B9:96:CA:69:45:30:0A:C5:2B:FB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3139302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:70:21:b1:13:56:3f:a8:9e:18:f1:9c:40:89:14:5d:e2:
         ce:7c:0b:79:ec:11:f3:68:a9:07:5a:bb:db:54:3a:12:77:6d:
         02:74:af:df:72:03:b4:7f:39:b1:8d:1a:6d:0f:74:38:02:f1:
         b9:1c:fb:b2:4b:b4:74:92:6d:83:0d:86:38:8e:b8:e6:cb:c4:
         ed:9e:d8:04:d3:47:7b:78:af:7e:0a:d6:6f:d3:fd:5b:32:f5:
         e1:9e:87:83:ec:31:40:10:08:a3:bf:8b:85:c9:0c:9c:13:94:
         5a:50:3c:7a:39:10:d3:f1:76:8c:1b:a0:18:66:bf:41:50:7b:
         4e:13:e8:5f:45:1c:c7:61:81:6e:90:2c:23:4d:41:c2:1a:c2:
         b5:17:be:ab:5b:2f:57:63:c9:2e:21:e1:f9:ed:e1:4c:28:bb:
         56:9b:0f:25:d5:74:4d:90:f5:71:01:a2:08:ca:55:38:33:df:
         02:5a:fd:a0:b5:64:dc:f5:d2:47:9a:3d:a3:bd:70:11:09:4c:
         ab:76:f2:1e:ef:8c:3b:ec:67:fa:40:0f:03:0e:ab:24:dd:e6:
         de:02:4d:ad:0b:7a:64:a6:c9:a0:c6:e7:4f:25:ea:78:16:21:
         7a:14:67:c3:fc:e3:41:7d:6b:fc:97:fd:aa:17:06:73:12:28:
         7f:cf:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----