Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3136362e302f32342d3234203d3e203536323436.roa
File:                     3131362e36382e3136362e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          5XbFXN2gqv/CPtdLT6Zm3xQdAJ2brv2P3Vl7DV975a0=
Subject key identifier:   1A:40:0C:B7:19:CF:CD:C2:AE:FA:83:5E:62:7F:09:8B:D6:CE:24:F8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B505A6FA4F17D760615C7B76C5A3BAD96A80998
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3136362e302f32342d3234203d3e203536323436.roa
Signing time:             Thu 24 Feb 2022 09:00:02 +0000
ROA not before:           Thu 24 Feb 2022 08:55:02 +0000
ROA not after:            Fri 24 Feb 2023 09:00:02 +0000
asID:                     56246
IP address blocks:        116.68.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:50:5a:6f:a4:f1:7d:76:06:15:c7:b7:6c:5a:3b:ad:96:a8:09:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 24 08:55:02 2022 GMT
            Not After : Feb 24 09:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:3a:7b:b0:41:62:e5:5f:29:29:0f:a2:1b:
                    6a:bf:2d:f8:a9:bc:68:7c:3b:10:a6:95:de:fa:6c:
                    32:d8:67:b1:f7:a1:13:58:34:13:24:62:ba:2b:a0:
                    a7:90:5a:4e:16:e3:65:74:3b:17:b0:d7:18:5c:98:
                    f2:aa:aa:6d:e8:30:c9:77:1c:26:6b:be:53:95:be:
                    f8:4c:07:62:0c:7b:dc:2c:a3:73:80:22:0e:a4:9b:
                    65:dd:ec:48:89:5b:6c:42:23:4e:8f:50:77:dc:a0:
                    d7:f3:10:78:f0:c5:9c:1f:f9:1d:2c:20:e0:d7:56:
                    3b:eb:9c:3c:99:fe:cc:33:ae:58:65:f8:03:61:30:
                    51:7d:07:fd:4e:57:1f:e9:84:d2:8e:7b:b0:8b:bd:
                    e2:b3:50:e7:4b:cd:8c:ba:af:42:75:a1:5a:ab:d6:
                    4b:72:39:1f:67:37:41:b7:0b:58:51:f2:a4:23:06:
                    b2:66:4c:52:dd:8f:3d:b2:36:78:c9:41:2a:ea:f2:
                    79:10:38:7f:8e:84:2c:b4:ed:bd:4b:c3:dd:1b:d6:
                    22:ef:70:e4:5e:ad:60:fe:18:32:72:b5:7b:47:98:
                    f7:bb:fb:5c:62:2a:d7:40:87:7e:e3:f1:b8:72:e7:
                    e7:dc:a4:88:a2:9a:49:1f:3f:df:8b:c0:21:60:76:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:0C:B7:19:CF:CD:C2:AE:FA:83:5E:62:7F:09:8B:D6:CE:24:F8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3136362e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:6e:a5:6b:71:70:5f:ad:d4:b6:41:25:45:a9:87:e4:eb:
         20:38:c0:79:48:97:35:01:64:82:31:4f:b0:31:98:3e:08:55:
         7f:82:94:ec:73:8f:7d:55:22:00:84:08:76:27:3d:05:b1:39:
         44:2f:07:0c:7a:23:7a:e1:39:d6:59:c7:45:57:71:1d:41:4c:
         e4:77:65:ae:15:80:e8:20:59:86:3e:e4:a1:14:e3:ec:52:fd:
         57:53:4c:70:50:ba:64:a2:4a:fc:e6:71:16:fe:e6:f7:e6:db:
         e6:30:1a:e7:de:6e:32:d2:54:f7:38:c1:17:db:cd:e5:dd:4e:
         14:9a:ad:12:27:21:ac:73:95:6f:95:54:67:72:e0:97:69:f9:
         45:9f:85:32:2c:b2:a0:db:27:99:1b:dc:a3:e1:8f:9d:d6:98:
         ad:e9:45:87:54:35:ae:ef:af:19:76:76:84:e6:e7:09:f1:82:
         cc:fa:e6:58:7d:6b:09:60:c0:31:27:de:bb:7b:be:35:28:5b:
         9d:d1:31:ec:05:46:59:12:d4:0c:5c:01:e5:ad:4d:1f:a6:0a:
         5f:53:d6:26:c0:c5:55:9f:9d:70:58:fe:67:9b:bb:ff:f9:ee:
         af:78:f0:90:1f:3e:4d:ef:ce:0f:88:f1:9d:71:a4:6e:dc:31:
         6e:7f:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----