Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa
File:                     3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (raw, json)
Hash identifier:          ijglPxRWqZQHn3Y82t7BGEgQ74rrJCTzWNj6mTr/ffc=
Subject key identifier:   22:6A:43:31:FA:9F:D9:CB:4A:23:F4:85:AD:AC:27:1C:22:D7:21:16
Certificate issuer:       /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Certificate serial:       7642BCCD8C5E44764002D95686A9BC11679FD541
Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa
Signing time:             Mon 24 Oct 2022 07:28:46 +0000
ROA not before:           Mon 24 Oct 2022 07:23:46 +0000
ROA not after:            Mon 23 Oct 2023 07:28:46 +0000
asID:                     150238
IP address blocks:        103.20.108.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:bc:cd:8c:5e:44:76:40:02:d9:56:86:a9:bc:11:67:9f:d5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
        Validity
            Not Before: Oct 24 07:23:46 2022 GMT
            Not After : Oct 23 07:28:46 2023 GMT
        Subject: CN=226A4331FA9FD9CB4A23F485ADAC271C22D72116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:6f:34:22:27:50:2a:98:71:17:3c:55:40:
                    3b:5e:14:90:12:ea:99:74:90:79:b4:7e:67:43:45:
                    34:13:bb:b7:ba:fd:b4:36:dc:63:10:87:2d:ed:ca:
                    a3:71:c0:c9:2d:be:d3:71:58:8c:6d:d5:2e:32:11:
                    5e:03:e1:a0:7b:12:e6:93:15:d5:c7:77:d0:21:cd:
                    11:51:31:75:1f:b9:a4:d3:dc:8a:72:e9:18:b3:67:
                    db:0c:ff:dd:b5:dc:c5:31:5f:65:37:19:03:9d:26:
                    e1:35:ef:99:07:9a:a5:1c:82:a9:fc:1f:97:dd:91:
                    83:ae:5d:d5:02:34:20:43:ec:1d:7e:a9:68:3a:c8:
                    56:a3:c7:2d:da:62:f6:3b:2e:b7:93:c4:1b:76:2a:
                    0d:f4:5a:3f:9c:4a:3b:cc:9a:72:41:b7:bd:ad:16:
                    17:0b:a0:55:69:50:65:cf:75:95:9a:27:39:22:46:
                    d4:41:3e:49:b3:87:9d:d0:bc:5a:2b:1e:c7:71:dd:
                    ed:bc:ca:4d:2d:f7:4f:24:1b:51:6c:17:17:46:1f:
                    66:fb:98:84:12:37:13:7e:91:77:ee:cf:c1:15:5b:
                    ff:98:ba:3e:30:df:01:e8:2a:92:05:6d:e4:01:e5:
                    69:0d:af:59:25:06:46:9b:7f:77:65:03:30:66:7c:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:43:31:FA:9F:D9:CB:4A:23:F4:85:AD:AC:27:1C:22:D7:21:16
            X509v3 Authority Key Identifier:
                keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:54:b6:a4:04:ba:56:4d:e4:c5:2a:26:db:84:80:33:bd:fd:
         16:27:a7:4a:03:43:0d:8b:ce:27:aa:29:57:e5:59:46:ca:a4:
         9d:6e:f0:f2:f0:b6:0d:dc:b9:86:a9:b2:17:da:d9:81:06:aa:
         b8:92:8c:bb:92:b8:28:2c:1d:58:8b:33:be:91:c8:b8:e3:f3:
         0a:11:4b:a1:d4:d5:4b:a8:c2:b8:e7:b9:20:7b:d1:c9:9e:0d:
         f4:77:fb:5c:70:80:53:34:4b:ca:04:55:e2:17:66:d0:3b:85:
         37:78:47:da:8d:6b:4a:d3:51:f5:8d:9f:ba:ee:86:b2:9a:07:
         1f:06:b6:92:1e:0d:c1:a2:21:bd:c8:e3:ac:b7:9c:6f:96:67:
         18:0c:10:f5:1a:54:58:f2:55:18:e6:a0:e6:aa:f3:82:dc:5c:
         00:7c:7f:da:ec:a7:35:6d:3e:b4:1e:74:11:e0:15:66:2c:ee:
         58:a8:4e:80:6b:77:70:44:b6:cb:60:41:58:75:01:15:fc:cb:
         54:8d:cd:48:61:a5:aa:b2:4b:b2:40:af:71:8d:f3:4e:72:32:
         82:a3:41:f6:cf:f8:6c:54:dc:aa:2b:73:ec:3f:b4:8c:7a:04:
         1c:f8:90:06:8a:3a:8e:d6:5a:df:f8:8f:e8:b7:00:16:29:eb:
         a9:ff:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----