Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38362e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3135302e38362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          6VT6+Z0LSNZPE4+suqUCAGkSGHNlBNQijl1zUjp2lN8=
Subject key identifier:   7E:40:C7:25:5B:93:11:2F:81:79:76:35:15:C8:7D:E1:10:29:BA:2F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0BBC5570FB4CCB8E4770648F2ED0B987E3709DFC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38362e302f32332d3234203d3e20313333383030.roa
Signing time:             Thu 07 Oct 2021 14:00:00 +0000
ROA not before:           Thu 07 Oct 2021 13:55:00 +0000
ROA not after:            Fri 07 Oct 2022 14:00:00 +0000
asID:                     133800
IP address blocks:        103.150.86.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bc:55:70:fb:4c:cb:8e:47:70:64:8f:2e:d0:b9:87:e3:70:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  7 13:55:00 2021 GMT
            Not After : Oct  7 14:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:d5:33:80:16:46:e0:d9:6a:bd:70:bb:15:
                    39:f6:44:67:29:9c:de:65:d6:07:5c:6b:20:43:9d:
                    1a:64:97:b8:1d:97:f4:55:30:84:32:bb:2e:b4:1a:
                    ef:a3:9b:2f:0c:dc:b9:ef:9a:2c:5e:a2:38:11:11:
                    6d:6a:5a:ac:48:33:25:dd:2d:3d:f3:cf:15:bc:ba:
                    fd:7f:77:a3:2c:a8:15:ff:a4:d8:e7:37:8b:22:15:
                    d9:78:c2:eb:ec:4b:3e:6f:2d:e8:34:7e:99:b6:1b:
                    64:6b:75:88:f6:05:3e:92:db:aa:2d:1b:09:51:e0:
                    31:6f:a1:b2:e4:c5:49:54:0b:e3:1b:c9:dd:14:b0:
                    a2:66:3a:0c:2a:7d:80:33:9d:d4:76:aa:a7:f1:b6:
                    d7:10:de:40:f7:51:bb:c9:dc:c6:a5:0b:ba:77:49:
                    f3:22:64:3d:e3:7d:02:af:46:8d:94:78:63:b3:0b:
                    bc:0a:d4:0b:7e:14:2a:7f:8a:75:7e:06:dd:79:13:
                    40:51:50:06:be:93:1a:c1:a6:cc:88:d2:ec:2b:6e:
                    48:20:e7:37:7d:a5:67:e7:19:a7:68:34:23:3d:bb:
                    a2:d4:e7:d0:5d:79:b6:40:18:ea:1f:6b:de:68:ec:
                    05:b3:04:f7:ef:ac:b7:1e:05:fe:3b:e2:90:31:36:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:C7:25:5B:93:11:2F:81:79:76:35:15:C8:7D:E1:10:29:BA:2F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38362e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:dd:2d:8f:b5:5d:b7:68:55:80:fd:68:27:7f:18:fd:26:
         c9:ea:92:46:32:24:6c:ad:37:77:eb:87:6c:e7:4b:33:a0:79:
         2f:a0:f8:f7:42:f6:3d:a7:2b:c5:0e:b2:7c:30:2b:51:62:42:
         5a:ae:7a:bd:b8:80:1e:1a:f6:30:8d:3d:ee:ef:79:9e:b5:59:
         dd:ef:72:27:83:43:41:4d:a0:01:59:53:6e:61:7f:22:ce:ea:
         53:94:f7:8f:ee:a4:e5:5b:32:78:a0:38:ca:3c:18:03:05:47:
         cb:2c:63:a7:5a:40:b2:7c:ec:f4:6a:84:38:4c:c5:6d:1d:bb:
         cf:40:6e:6f:f2:33:15:00:28:cb:3d:21:89:c1:16:f8:2f:b1:
         f9:68:60:c8:15:b8:bd:e4:22:ab:dc:4a:10:69:d2:03:6d:e7:
         4b:60:6f:c6:e4:1a:fd:4b:2c:00:ae:2d:e1:80:0c:82:35:80:
         54:22:0f:3b:86:0f:55:bf:b1:3e:f2:9d:6f:7d:98:37:c3:09:
         0e:82:3f:ed:8a:41:d7:d1:1a:dc:31:c0:c2:94:fa:f6:dd:66:
         a5:93:f9:b1:9b:74:7f:a0:2e:a3:5f:89:d5:9c:56:4c:8a:55:
         77:b1:02:d9:8d:f0:6c:2f:9b:49:c0:b4:e1:4c:70:e2:9d:8b:
         08:ac:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----