Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137322e302f32342d3234203d3e203536323436.roa
File:                     3131362e36382e3137322e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          P4e4wMaVp/Jj0NcRIoOFD4oNPGEfWeDssY8NSSFVKDs=
Subject key identifier:   53:3A:D9:F0:86:D0:7B:39:9F:20:CB:88:C1:96:C4:EB:F6:58:9E:E4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       016C6AB03995778B77AE3A15E1613BEC0F2FDE8A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137322e302f32342d3234203d3e203536323436.roa
Signing time:             Thu 24 Feb 2022 09:00:01 +0000
ROA not before:           Thu 24 Feb 2022 08:55:01 +0000
ROA not after:            Fri 24 Feb 2023 09:00:01 +0000
asID:                     56246
IP address blocks:        116.68.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:6a:b0:39:95:77:8b:77:ae:3a:15:e1:61:3b:ec:0f:2f:de:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 24 08:55:01 2022 GMT
            Not After : Feb 24 09:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:db:8f:02:0b:2c:60:ba:d1:f0:9b:ca:fb:
                    e6:d8:f2:b0:f6:16:5b:29:fa:25:df:c8:a9:2d:4f:
                    70:a7:4e:96:50:f2:c6:85:41:f0:47:64:c1:1f:f8:
                    ba:31:20:9a:3f:37:d8:8f:2f:6b:bb:ce:a7:ff:3d:
                    a5:9c:ad:ec:96:bc:13:6c:65:2c:56:e0:51:b3:c4:
                    f3:54:63:43:d1:77:98:23:cf:f9:88:54:2b:7b:a3:
                    15:52:09:d3:f1:8a:c4:a3:81:eb:22:91:5f:bd:fd:
                    4c:ad:e7:56:51:e3:71:da:ea:68:c5:69:c9:f4:8d:
                    dc:0b:36:3e:d0:24:d2:b7:1c:0b:b6:3c:fc:10:63:
                    96:42:38:b2:39:ec:16:b5:8d:bb:d9:e1:48:71:b5:
                    f0:7e:86:0e:fa:c3:ea:90:e9:d4:a9:8e:5c:43:1c:
                    90:1c:30:76:b8:7f:0d:95:fd:ad:c5:97:82:44:6c:
                    37:78:79:c2:7f:57:b0:f6:b6:e9:74:58:b4:e0:bf:
                    9e:62:13:08:e8:65:6e:67:5d:7a:75:15:78:2d:a1:
                    0c:a8:b6:9e:c4:82:4c:8b:5d:fa:9f:14:1d:97:e8:
                    0e:d2:23:15:fb:fe:9d:21:55:da:0e:47:b9:b4:3c:
                    03:05:e1:59:93:d1:c0:f4:40:99:87:d6:46:58:ca:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:D9:F0:86:D0:7B:39:9F:20:CB:88:C1:96:C4:EB:F6:58:9E:E4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137322e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:27:1f:e0:59:53:24:85:c6:e4:03:75:2b:b8:b6:57:a7:
         a2:ba:c9:16:a2:66:02:79:65:f7:ae:ab:f2:dc:e4:8f:a5:39:
         eb:2a:3d:77:6c:e5:6e:6e:fe:68:81:2c:84:ba:47:1d:f3:26:
         88:b5:8a:fc:15:f5:e4:6f:0f:7f:b4:3f:94:51:93:d2:07:af:
         be:2c:e6:22:45:8d:32:e9:05:c6:81:91:ea:14:bf:74:2d:12:
         f7:44:a4:a8:70:f4:ab:0a:84:2a:80:7d:a0:7c:50:47:51:f6:
         49:d9:59:1b:65:f5:d1:73:7e:2e:f6:b0:1f:75:01:54:c9:87:
         19:5d:af:5d:87:c8:5b:02:1d:89:b6:04:74:c8:4b:75:86:d8:
         7d:40:96:a0:ed:01:f2:cc:d1:60:26:fc:3a:e8:80:e0:e1:59:
         8b:be:20:d9:c9:10:0b:c5:c8:15:62:a6:d3:69:37:35:7c:fe:
         ce:0d:86:17:27:e0:35:2d:c1:1b:18:df:8b:91:a9:a2:62:58:
         8c:83:3f:c3:eb:7d:08:b0:47:8e:14:46:59:ed:db:05:e6:f7:
         89:ed:39:47:3b:09:82:11:25:5d:5d:ba:87:c0:58:0b:1a:66:
         46:99:d0:f5:58:5f:ee:3b:84:2c:c5:28:5a:dc:3b:ce:c4:33:
         83:0f:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----