Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3231372e3133322e302f32332d3234203d3e203338353035.roa
File:                     3230332e3231372e3133322e302f32332d3234203d3e203338353035.roa (raw, json)
Hash identifier:          yOgxDYgZVFrlfk7CFBq4tqoOA2x6rc8sGeFpoV6Im80=
Subject key identifier:   72:B3:FB:59:C8:F7:8D:28:B9:DF:21:9E:EE:AB:92:71:38:93:51:86
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       169C835E193C85679964C58E636EADCD4378CB9A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3231372e3133322e302f32332d3234203d3e203338353035.roa
Signing time:             Fri 10 Dec 2021 00:55:09 +0000
ROA not before:           Fri 10 Dec 2021 00:50:09 +0000
ROA not after:            Sat 10 Dec 2022 00:55:09 +0000
asID:                     38505
IP address blocks:        203.217.132.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9c:83:5e:19:3c:85:67:99:64:c5:8e:63:6e:ad:cd:43:78:cb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 10 00:50:09 2021 GMT
            Not After : Dec 10 00:55:09 2022 GMT
        Subject: CN=3082010A0282010100C4E622520BCF139B11FFDB31695F126AA7E553797E803CC9E17D1EF3BA87D2230474C56F8A448B02EAFCD43E541AA46CEE62BD8C02B708F3C2C25D06CBE707C65FC4F27AE926468CD7E5E36112AA22464090CF433F25DF3E0056640F37002F890E185FA21F8D0A14F185C2BA794A14DB1CC2676E81EEC74DFF8CE0CB125946E0CE86F1791AF1FEF1B98408DC9E30C73DA45FA9B947905FFBB6A20A509FC341A984AE08312F678B2FE5FE91CE82058CF62E504BDE2534B50E6634B0FF6F7A733CFB0AE251F94FE962BAD2AB7AA032E925CBC8957828D190F190E567D4D064D9B08EE8B72415CEF3259CEB0384FAD1E5E726250BC0B8E3DF3AA11C976BD90D89DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:22:52:0b:cf:13:9b:11:ff:db:31:69:5f:
                    12:6a:a7:e5:53:79:7e:80:3c:c9:e1:7d:1e:f3:ba:
                    87:d2:23:04:74:c5:6f:8a:44:8b:02:ea:fc:d4:3e:
                    54:1a:a4:6c:ee:62:bd:8c:02:b7:08:f3:c2:c2:5d:
                    06:cb:e7:07:c6:5f:c4:f2:7a:e9:26:46:8c:d7:e5:
                    e3:61:12:aa:22:46:40:90:cf:43:3f:25:df:3e:00:
                    56:64:0f:37:00:2f:89:0e:18:5f:a2:1f:8d:0a:14:
                    f1:85:c2:ba:79:4a:14:db:1c:c2:67:6e:81:ee:c7:
                    4d:ff:8c:e0:cb:12:59:46:e0:ce:86:f1:79:1a:f1:
                    fe:f1:b9:84:08:dc:9e:30:c7:3d:a4:5f:a9:b9:47:
                    90:5f:fb:b6:a2:0a:50:9f:c3:41:a9:84:ae:08:31:
                    2f:67:8b:2f:e5:fe:91:ce:82:05:8c:f6:2e:50:4b:
                    de:25:34:b5:0e:66:34:b0:ff:6f:7a:73:3c:fb:0a:
                    e2:51:f9:4f:e9:62:ba:d2:ab:7a:a0:32:e9:25:cb:
                    c8:95:78:28:d1:90:f1:90:e5:67:d4:d0:64:d9:b0:
                    8e:e8:b7:24:15:ce:f3:25:9c:eb:03:84:fa:d1:e5:
                    e7:26:25:0b:c0:b8:e3:df:3a:a1:1c:97:6b:d9:0d:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:FB:59:C8:F7:8D:28:B9:DF:21:9E:EE:AB:92:71:38:93:51:86
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3231372e3133322e302f32332d3234203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:af:49:b9:c5:1d:79:b2:88:d8:fb:9d:57:5a:a2:89:f3:
         56:7b:3d:4f:db:b6:4d:3c:9f:08:2d:66:68:21:37:aa:7d:a7:
         cd:fc:4d:9c:30:19:ed:f7:6e:62:ec:66:04:60:31:00:ef:2a:
         cc:74:d6:e2:ae:c1:1b:01:fb:85:83:e4:fd:92:3f:5b:92:e4:
         77:94:83:a9:63:33:c8:26:3e:25:62:59:5b:63:b7:44:42:7c:
         7c:5c:78:b9:be:6a:26:62:35:14:3d:12:85:09:3e:95:46:10:
         ac:6e:ab:7c:30:05:7d:47:f3:d0:c9:85:8a:24:89:70:2d:22:
         de:75:5f:e8:76:21:b6:aa:ef:b2:0d:44:af:f1:7e:fc:23:eb:
         48:0f:fd:f6:21:06:8d:2f:04:dc:ec:a2:91:49:4a:d6:05:f6:
         84:c8:9f:37:bd:c1:42:77:c2:b7:e6:f5:07:b0:aa:68:b7:cd:
         23:fe:83:e9:1a:2f:5d:1d:9f:75:bb:72:84:c1:b0:20:5c:1c:
         c2:a4:cf:18:42:f6:a5:8a:e1:04:19:6d:61:ee:97:ff:64:b3:
         62:77:5f:f1:8b:e8:51:50:56:fa:fc:21:61:75:92:b5:ca:62:
         e5:c2:6a:55:ec:6c:98:09:a2:45:f5:34:8d:53:73:db:52:e1:
         85:7e:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----