Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137332e302f32342d3234203d3e203538353532.roa
File:                     3131362e36382e3137332e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          DWdYBBdSP37m4lpDnM7nIDR9ckLUdQR2f0jd3z5WJYE=
Subject key identifier:   B2:B2:D4:5B:1C:D8:D2:E1:99:9C:DE:CF:B1:11:F1:A0:12:4C:F1:74
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A495E434C278BEB2A7E2C39B939F7390C2616EE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137332e302f32342d3234203d3e203538353532.roa
Signing time:             Thu 24 Feb 2022 09:00:01 +0000
ROA not before:           Thu 24 Feb 2022 08:55:01 +0000
ROA not after:            Fri 24 Feb 2023 09:00:01 +0000
asID:                     58552
IP address blocks:        116.68.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:49:5e:43:4c:27:8b:eb:2a:7e:2c:39:b9:39:f7:39:0c:26:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 24 08:55:01 2022 GMT
            Not After : Feb 24 09:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:10:02:0a:1d:2d:cd:c5:56:fb:1e:1c:37:
                    d8:9c:06:bf:63:2b:35:b5:d5:9c:44:a1:26:ba:ad:
                    a9:16:f0:40:66:97:ed:90:15:52:6e:a9:69:38:2e:
                    62:a8:82:b3:df:01:42:97:64:39:ef:97:26:63:62:
                    ef:ec:ed:e1:e8:c5:3d:37:85:78:5b:25:12:24:f7:
                    39:a5:e5:f2:77:4c:54:85:58:0b:a2:8b:c6:d4:a8:
                    2f:45:9d:36:ff:3f:79:e1:1c:2a:f7:f3:70:b5:60:
                    aa:7a:70:ed:7f:69:98:79:ec:fd:52:fe:a1:ea:b7:
                    7d:b6:5d:b6:c4:fe:bc:f3:80:d4:fd:f4:01:0f:16:
                    8e:b5:f3:71:4f:cc:f5:ca:f6:e2:a3:72:a3:13:99:
                    d5:04:ba:bb:74:03:87:29:f1:6d:7e:68:f1:97:73:
                    be:22:3e:a6:a7:27:6c:00:c5:df:0a:13:38:8f:69:
                    57:27:fa:03:29:12:82:d3:b6:f6:ed:14:ee:fa:c3:
                    e6:18:7e:f6:49:29:de:73:e7:42:a1:c0:17:60:a0:
                    d5:db:30:15:99:ce:6d:d2:42:cd:b7:6b:52:a8:2b:
                    6f:23:52:a4:54:18:dd:d5:bb:e9:0f:1f:6f:a7:5d:
                    00:e7:33:b9:ae:01:9e:a8:ec:5e:38:58:d5:6b:35:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:D4:5B:1C:D8:D2:E1:99:9C:DE:CF:B1:11:F1:A0:12:4C:F1:74
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137332e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:c8:ad:ea:58:4d:f9:4a:e5:96:90:12:60:8c:bf:e8:9c:
         a9:1b:6f:e9:1e:a5:8a:32:b0:48:20:28:76:50:b6:46:8c:e5:
         a9:86:bd:e3:ec:15:ec:2f:d6:35:85:6c:5b:7d:2e:a5:7c:64:
         df:94:04:db:cd:5e:27:6f:c2:ef:52:1c:e3:4e:a7:53:9d:eb:
         90:e1:9b:b8:93:0f:37:e6:dd:e9:e7:05:17:0d:0e:f4:e8:3f:
         e3:bd:fe:2a:61:bc:99:b7:44:7c:c3:f0:26:be:07:f5:9d:bd:
         bd:10:15:05:ce:24:17:28:a1:de:af:5f:0d:68:f0:fc:3e:82:
         82:ab:0c:4a:ec:5e:61:28:23:3c:2b:3e:5e:48:2a:40:a9:30:
         31:79:e9:b4:2b:bf:27:97:cd:a8:6e:fb:4b:ce:5b:ed:bc:fb:
         43:29:08:c9:0d:e9:d6:86:7d:2f:2e:a8:d2:c4:55:7f:61:96:
         f3:a0:0b:fc:7b:a7:9d:ae:54:90:eb:14:76:34:b4:ac:cd:73:
         97:ac:1c:d3:1f:0f:fe:ab:08:83:74:e0:9b:02:85:be:f7:8a:
         b2:b9:43:40:fb:fb:44:ec:14:13:41:85:8a:84:a7:c1:e2:51:
         a5:4e:08:25:8c:5f:f6:9d:21:22:eb:7a:40:a3:89:83:26:db:
         0d:27:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----