Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3131392e31332e302f32342d3234203d3e2037353937.roa
File:                     3230332e3131392e31332e302f32342d3234203d3e2037353937.roa (raw, json)
Hash identifier:          A7+Csa8PS54cqlCRbcUEODDe7LJhmRwdcMBHNh/Zmw0=
Subject key identifier:   C9:F0:26:26:BB:95:DD:F5:89:F4:03:0C:D8:D6:00:BE:50:35:8E:E8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7C1DEA7F560DD51A8F1A654D29450C2D420DB68F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3131392e31332e302f32342d3234203d3e2037353937.roa
Signing time:             Wed 23 Feb 2022 04:00:03 +0000
ROA not before:           Wed 23 Feb 2022 03:55:03 +0000
ROA not after:            Thu 23 Feb 2023 04:00:03 +0000
asID:                     7597
IP address blocks:        203.119.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:ea:7f:56:0d:d5:1a:8f:1a:65:4d:29:45:0c:2d:42:0d:b6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 23 03:55:03 2022 GMT
            Not After : Feb 23 04:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:20:79:ac:f3:cb:76:2b:2a:b4:0a:dc:16:
                    70:ec:67:62:65:a6:98:62:b9:17:ea:63:8b:40:e1:
                    1b:d4:e1:aa:18:0d:f6:e8:a0:1b:d2:00:cb:7a:1d:
                    11:d3:9e:02:a5:b2:05:3a:1b:a3:e4:03:ca:95:2f:
                    2c:f6:e5:6c:89:5e:65:7d:f6:91:62:26:c4:18:99:
                    3a:b2:b7:7e:3a:18:88:67:06:9f:94:7f:2f:1b:f5:
                    5a:e7:c9:19:26:00:2a:5b:17:a7:e7:b1:d3:15:14:
                    98:d8:d0:17:9d:2f:34:23:7c:3b:00:90:cd:72:aa:
                    71:26:21:12:00:56:94:19:7d:c5:25:90:9e:d7:1e:
                    ff:73:ac:cb:c2:50:f7:4d:34:a2:cd:76:a2:4d:93:
                    6d:be:c5:0b:b4:be:22:d9:bc:59:fe:24:ac:10:40:
                    0d:d6:f4:4e:96:fb:d8:09:2d:88:42:14:bc:58:ea:
                    99:9b:87:bb:83:1d:fb:69:b2:dd:a1:8c:85:dd:c3:
                    22:8b:78:b2:db:53:9c:76:a4:15:76:2d:15:5e:5e:
                    c4:d2:63:b7:96:85:37:11:a9:99:af:49:b7:d7:2f:
                    66:8c:70:39:d4:ae:a1:7b:76:07:a3:af:cb:1f:58:
                    45:92:06:e3:1a:f9:fa:32:fb:cc:c0:a5:eb:80:bb:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:26:26:BB:95:DD:F5:89:F4:03:0C:D8:D6:00:BE:50:35:8E:E8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3131392e31332e302f32342d3234203d3e2037353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:20:75:f9:94:d0:a0:cd:28:2d:0f:74:c4:0a:95:d6:28:85:
         8d:f5:df:c8:f1:c8:75:c5:e2:40:fa:f2:64:54:79:19:1e:fa:
         b9:00:88:8a:b5:9a:02:00:fd:75:33:41:a0:88:bf:aa:6e:08:
         32:35:b2:c6:fd:a2:e5:24:76:50:e2:c2:c0:cf:9a:e9:32:94:
         03:c2:3f:3e:aa:6e:95:3d:9d:1f:7e:31:60:ff:1e:44:1d:01:
         05:8a:6a:7c:c9:ad:74:24:d9:3a:5d:11:bb:68:95:31:f7:3e:
         1e:a7:14:7c:5f:11:48:73:4f:1d:1c:b3:d8:76:43:1a:15:b3:
         3f:2f:5d:87:cd:df:e7:6e:3e:4e:f2:87:5c:64:b4:4e:d2:8c:
         0a:d7:22:42:67:6e:13:30:a8:de:74:c2:a1:b4:c9:8a:ec:e2:
         6a:67:87:34:cb:4b:f0:3f:34:28:b6:84:8c:e3:ba:ee:bc:bb:
         d6:18:d4:a7:40:a6:a4:8a:6b:2e:8b:7f:b2:65:30:02:78:a1:
         84:ea:18:ec:26:fd:05:4e:bc:99:23:75:7d:f3:ec:0a:30:6a:
         0a:28:5d:32:b4:8d:67:9f:42:f0:c8:f4:24:9e:f4:75:e3:04:
         08:03:91:6a:4c:65:a2:e0:7d:18:84:8e:30:18:74:20:7b:55:
         31:ed:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----