Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233302e302f32342d3234203d3e203234323033.roa
File:                     3131322e3231352e3233302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          pjuiLPXKdjtD+fShsi6TGpPqA+G6MWgPx/6rKjR+Kg8=
Subject key identifier:   01:0C:F8:50:8B:EC:57:DC:C9:02:75:5C:79:19:AE:3F:D8:1F:41:FC
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       3D3495BBCC36679C8F8DCFD3A38C1C15B0874634
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233302e302f32342d3234203d3e203234323033.roa
Signing time:             Tue 12 Apr 2022 09:00:02 +0000
ROA not before:           Tue 12 Apr 2022 08:55:02 +0000
ROA not after:            Tue 11 Apr 2023 09:00:02 +0000
asID:                     24203
IP address blocks:        112.215.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:34:95:bb:cc:36:67:9c:8f:8d:cf:d3:a3:8c:1c:15:b0:87:46:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Apr 12 08:55:02 2022 GMT
            Not After : Apr 11 09:00:02 2023 GMT
        Subject: CN=010CF8508BEC57DCC902755C7919AE3FD81F41FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:4f:2c:61:4b:f4:47:8a:34:49:81:56:5b:
                    97:de:a0:e6:50:c1:0a:47:22:4c:9f:f3:9b:12:9a:
                    c9:46:ba:4f:97:c7:8b:d5:42:28:bc:f1:ab:51:8e:
                    ad:e1:60:6c:8e:52:92:51:73:60:23:1b:fe:44:a7:
                    8f:f7:92:b2:c8:e1:63:5c:60:82:95:e7:b2:da:79:
                    f3:57:31:62:42:bc:b4:45:2d:c4:bf:ca:fe:50:d1:
                    8d:74:2d:64:d6:ff:91:1b:b1:ac:d8:88:67:c4:07:
                    20:dc:59:b8:d2:97:40:9f:f6:a1:94:38:ad:4f:01:
                    2a:6c:25:33:78:2d:77:57:44:0e:01:0d:39:aa:1a:
                    68:0e:64:ae:3d:9c:25:99:82:12:3d:33:94:a6:d7:
                    a5:e4:c8:cf:34:f4:9a:1e:3e:91:e3:3d:c4:d9:03:
                    4e:97:6b:c1:b2:fc:6e:0c:9d:4d:39:b7:4c:5b:2c:
                    1a:bc:57:59:70:de:3a:24:2e:0a:68:61:e9:60:bd:
                    55:ff:af:25:35:ea:42:82:83:e8:23:ff:bd:39:65:
                    12:99:60:fb:3f:51:07:7f:2b:e1:4b:aa:4a:3c:23:
                    40:84:d7:89:97:17:15:3e:bb:f9:f0:06:b4:ba:bf:
                    9c:00:b2:59:26:c8:95:b0:d2:b4:2a:52:40:a8:2f:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:F8:50:8B:EC:57:DC:C9:02:75:5C:79:19:AE:3F:D8:1F:41:FC
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3233302e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:8e:38:6d:8b:8b:7f:76:79:7b:e9:a8:aa:36:d9:7e:b8:
         83:24:23:e4:c7:62:83:56:bf:cc:85:84:4e:c0:e7:97:ed:18:
         ee:14:e0:15:3f:1f:2d:5a:65:47:54:ad:b4:01:e1:39:6b:ba:
         94:e2:01:ed:fd:73:9c:1e:ae:a1:79:bf:cf:c8:c4:17:49:40:
         de:f2:75:0a:73:34:17:1b:51:39:e7:0e:82:62:f7:73:a7:9d:
         e1:24:89:bb:97:a5:e7:14:68:2b:c8:43:63:a3:fa:b5:a0:9c:
         99:f2:f4:16:bb:71:a4:d4:8e:59:4e:53:17:24:ea:01:a3:72:
         9c:5a:db:a3:d3:3e:e2:f6:f5:f0:87:30:46:a7:f5:0f:82:5b:
         dd:8a:8f:02:6f:d6:0c:44:af:7e:59:05:34:05:56:6f:65:d5:
         43:ef:b2:2a:37:b3:91:e0:96:41:d3:0a:72:7b:fb:3a:24:1c:
         f4:10:a5:64:ee:fa:86:e3:6c:2c:5c:77:26:43:b5:09:f0:d7:
         f0:bb:02:1c:09:8a:68:ac:96:7f:0e:2c:52:8f:8c:f2:46:52:
         89:be:e9:6b:1c:9f:30:f2:5e:3e:7a:06:1d:f6:c1:e6:d8:ca:
         70:83:5d:35:c8:1b:6e:4d:bc:be:c4:ae:88:2b:b1:2b:e0:97:
         7f:4f:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----