Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234302e302f32342d3234203d3e203234323033.roa
File:                     3131322e3231352e3234302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          8YX1HrEf/l+DfKEMhalga87GtLHZSaHCiPJbQ1LfqjU=
Subject key identifier:   BB:4C:E0:5A:1B:B9:B2:89:C4:DB:59:FA:06:7B:52:A2:0C:62:38:DC
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       18CAD7D466322AC8ACD8A47F9CF3BEC4DA4FC791
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234302e302f32342d3234203d3e203234323033.roa
Signing time:             Tue 12 Apr 2022 09:00:05 +0000
ROA not before:           Tue 12 Apr 2022 08:55:05 +0000
ROA not after:            Tue 11 Apr 2023 09:00:05 +0000
asID:                     24203
IP address blocks:        112.215.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ca:d7:d4:66:32:2a:c8:ac:d8:a4:7f:9c:f3:be:c4:da:4f:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Apr 12 08:55:05 2022 GMT
            Not After : Apr 11 09:00:05 2023 GMT
        Subject: CN=BB4CE05A1BB9B289C4DB59FA067B52A20C6238DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:3a:ca:a9:67:22:1f:e1:a9:93:5e:f0:37:
                    be:cd:8f:43:5c:a3:da:74:94:5f:12:74:f5:da:b2:
                    84:c6:14:ba:64:91:3b:7a:32:23:06:a5:55:f6:9c:
                    ef:cf:2b:6f:c6:36:52:27:a3:a6:f3:10:37:d8:91:
                    1e:f6:34:e6:5b:62:47:16:87:f3:34:5c:52:48:24:
                    8e:0b:b8:e9:ba:c1:58:06:17:d5:b8:ee:1d:d0:18:
                    d6:a3:84:3f:cc:63:13:3f:7e:52:09:a8:d3:78:45:
                    6c:ba:27:f7:29:96:f2:8d:31:cd:0e:2d:da:67:86:
                    f6:dc:07:28:c4:f5:23:d3:1b:eb:1b:b1:ca:2a:bf:
                    2a:04:9f:b0:f8:6f:0a:6c:36:b7:15:46:a3:61:74:
                    9f:1c:22:98:b6:56:8a:83:52:96:8a:93:a7:42:ea:
                    2a:a3:92:81:b7:cf:d2:74:49:01:b2:eb:c1:bf:e5:
                    28:94:3a:6f:68:7f:51:2a:06:f5:8f:86:62:e5:93:
                    dc:d5:eb:9d:c8:35:b8:b9:15:b0:e8:79:06:c6:8d:
                    83:23:73:b4:69:1c:b7:44:be:ab:99:88:5f:e0:8b:
                    28:36:03:ad:ed:08:5d:a9:26:f6:33:b2:c6:e3:9a:
                    59:a7:2e:03:16:b2:d7:90:81:23:2a:0e:d4:a1:2f:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4C:E0:5A:1B:B9:B2:89:C4:DB:59:FA:06:7B:52:A2:0C:62:38:DC
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3234302e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:22:aa:a4:8f:08:2f:d6:cc:66:5f:d6:2e:44:68:2c:e7:d2:
         5d:fa:d2:ae:b6:5e:44:c4:60:fa:ea:05:9a:a1:a8:86:81:42:
         c8:47:61:06:21:95:2b:2c:2d:e1:28:bb:e8:dd:39:d9:8b:df:
         db:b8:8d:89:75:0d:99:d8:84:4c:9b:bb:8a:a3:46:3b:3d:68:
         29:5c:a1:f2:27:e2:97:1d:60:25:57:15:3d:f7:2c:ca:de:d4:
         e7:bf:c0:b6:13:90:4e:4d:f1:d2:a4:47:f8:45:eb:64:81:4d:
         60:6d:fe:05:ed:ab:4a:ea:4e:3e:27:76:13:18:e6:a5:1f:55:
         07:0d:53:82:fc:be:68:55:20:40:5a:11:2e:3e:3c:63:31:be:
         63:d3:00:82:e1:60:0e:8b:49:53:18:6b:68:00:22:28:8e:b9:
         d7:a3:52:69:34:70:e5:5e:ea:2b:0e:3d:91:f3:72:39:6f:8a:
         01:a6:ba:8e:07:5d:12:9c:14:a0:5b:ee:0d:26:85:13:45:66:
         b5:85:15:3b:c7:f6:0d:23:d6:f0:ed:7f:fb:b0:22:60:f2:7e:
         db:aa:27:4c:28:dd:0c:25:12:f6:c0:4b:b7:32:fa:7c:bf:4b:
         73:39:c9:95:c8:65:4f:e9:01:de:4a:17:8d:48:81:e0:c0:b6:
         f8:11:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----