Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137352e302f32342d3234203d3e203536323436.roa
File:                     3131362e36382e3137352e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          8DmZKhI+2te1yU5feYSzr9R5JK+QBMrp0l6hWxQAoCg=
Subject key identifier:   21:9E:21:86:4E:2E:6B:D8:03:1D:09:FA:96:93:A4:F9:D3:34:ED:CB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0BC433615C99BA73C86A14868A0DA01A343133EC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137352e302f32342d3234203d3e203536323436.roa
Signing time:             Thu 24 Feb 2022 09:00:01 +0000
ROA not before:           Thu 24 Feb 2022 08:55:01 +0000
ROA not after:            Fri 24 Feb 2023 09:00:01 +0000
asID:                     56246
IP address blocks:        116.68.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c4:33:61:5c:99:ba:73:c8:6a:14:86:8a:0d:a0:1a:34:31:33:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 24 08:55:01 2022 GMT
            Not After : Feb 24 09:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:73:fd:43:66:17:5f:90:4c:21:d7:7c:67:
                    54:c6:db:25:c9:0a:bb:cc:cd:19:40:c4:f2:09:8c:
                    83:dc:72:97:80:1a:58:41:8a:50:07:bf:54:de:52:
                    51:f2:8f:9c:6f:5b:07:6a:2d:37:c5:f0:fe:23:d3:
                    13:e1:81:b7:20:90:3c:ea:7a:da:d1:4e:c6:57:b7:
                    86:37:bf:58:6a:82:fc:0c:e6:75:15:0d:a4:11:95:
                    fc:47:d8:d5:77:cd:97:c4:71:21:92:2b:ca:27:f2:
                    8c:23:6a:bb:c6:a0:19:f7:7c:e2:d9:ec:38:dc:61:
                    a4:fa:1a:57:95:4c:1f:c5:db:e0:b5:37:2d:54:e4:
                    84:34:ec:f5:08:d6:05:10:27:34:6b:ff:dd:b9:62:
                    8f:c7:78:95:9a:41:bd:a7:7c:fb:47:5e:63:46:5b:
                    f1:ea:19:15:f6:25:e0:8e:18:6f:d7:d7:28:1e:e3:
                    87:bb:51:69:36:b4:f5:d6:d9:be:f9:74:71:b7:bb:
                    40:e6:c2:a8:24:6f:5d:b6:54:1e:c1:56:fd:e3:6b:
                    a3:16:bf:c1:10:66:94:a9:9a:ac:24:98:ad:b0:4f:
                    16:0d:83:26:7f:ce:07:4d:f1:ac:cd:5e:10:1f:ba:
                    a7:71:f6:a7:ca:51:31:15:8f:31:e5:fb:57:f1:dc:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:21:86:4E:2E:6B:D8:03:1D:09:FA:96:93:A4:F9:D3:34:ED:CB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e36382e3137352e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:43:b6:23:7f:da:46:5b:b0:8a:e2:f1:88:48:b6:64:ff:
         0f:de:a5:60:6b:88:1f:a4:e1:f6:12:f8:d4:2e:9e:28:03:10:
         1e:ca:cd:27:37:bf:a8:67:bd:e1:1f:df:30:f8:94:0c:91:40:
         88:d8:4d:ef:3a:15:e8:0c:68:f7:ae:04:46:1f:bc:28:bf:2a:
         15:83:e7:61:96:df:a9:05:fc:4a:9a:a1:bf:e7:fd:30:e9:a8:
         2c:c1:8d:b8:85:f5:07:78:40:a3:3b:29:20:22:5a:87:27:1b:
         b8:d6:a8:bd:0c:5e:fa:cb:f5:26:52:ab:f7:c5:a7:59:98:13:
         38:e7:d2:2e:86:0d:bc:c0:bb:d0:34:1a:8c:e7:b5:86:6d:f0:
         b4:69:f9:c4:14:e5:af:5c:3a:56:a9:12:1a:63:c6:ba:93:78:
         1f:9e:1d:0d:44:85:c3:47:20:c2:5b:2d:61:a1:95:3c:b6:5d:
         3c:1c:95:ec:b7:3a:9f:e9:1b:72:65:0b:80:4a:38:3a:2a:58:
         a9:82:1b:ab:70:5f:95:88:83:df:1e:bc:46:e7:4a:1c:0f:d1:
         5c:c4:fc:f6:56:d5:8e:c8:3b:04:91:e9:d9:f6:2b:8e:fb:d1:
         ad:24:d8:2e:06:fc:58:33:35:0a:ff:1c:2c:1e:b1:e3:e8:a2:
         d4:f3:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----