Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31342e302f32332d3234203d3e203538333639.roa
File:                     3130332e3135312e31342e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          2mNFNyLhSR46bGmjqnEB+bUgIrOYozWkOwA1nmIb/Lg=
Subject key identifier:   D7:71:4A:7D:21:E5:7B:CC:6A:D2:26:2A:7D:20:0D:E8:CE:24:06:D8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1A9B89C5638CAE0F00E1BCC7226AFE8787CEC848
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31342e302f32332d3234203d3e203538333639.roa
Signing time:             Sat 16 Oct 2021 05:00:00 +0000
ROA not before:           Sat 16 Oct 2021 04:55:00 +0000
ROA not after:            Sun 16 Oct 2022 05:00:00 +0000
asID:                     58369
IP address blocks:        103.151.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:89:c5:63:8c:ae:0f:00:e1:bc:c7:22:6a:fe:87:87:ce:c8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 16 04:55:00 2021 GMT
            Not After : Oct 16 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:29:6f:a2:48:cf:64:fd:6a:15:1d:01:a1:
                    fb:ad:39:a4:be:7f:6f:1f:d1:2d:ab:59:15:04:1b:
                    b6:33:e4:0e:e6:ce:27:ae:34:7d:a3:6d:b4:7a:48:
                    21:15:c8:af:a0:10:1e:98:68:5e:ce:ec:53:e1:4b:
                    a7:2b:d9:b1:d4:d3:d1:81:5c:b3:33:87:57:f8:d2:
                    4f:ad:ea:13:28:5a:67:d6:b1:af:e2:b0:27:a0:50:
                    85:e8:ec:31:ed:21:2e:7c:e3:51:af:ac:39:40:57:
                    5c:bf:4b:ba:75:4c:be:85:f2:1e:f9:1f:fe:ce:c9:
                    d4:32:6b:8e:28:0b:c8:83:61:18:5e:78:46:71:cb:
                    da:b9:47:f1:5c:dc:f5:73:77:b0:10:85:7f:62:85:
                    72:b7:1f:2b:9b:0f:6e:ef:d9:8a:5a:29:42:c0:fd:
                    ea:a3:26:10:e4:73:cc:a9:3b:2c:14:67:7e:c5:8f:
                    f5:71:fe:a5:e2:c6:61:91:fe:97:68:36:e9:40:29:
                    e9:a4:23:5e:ed:1f:c2:21:98:e1:8e:b1:0b:b8:52:
                    1c:22:a0:b1:2f:0c:4c:e0:c0:2a:f1:bd:dc:b9:a6:
                    ac:8e:f1:8d:47:7d:12:3e:93:58:1d:cc:c0:ea:00:
                    d4:a7:45:3e:13:c7:72:85:f6:f9:a0:d2:36:6c:93:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:4A:7D:21:E5:7B:CC:6A:D2:26:2A:7D:20:0D:E8:CE:24:06:D8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e31342e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:1b:17:ea:f7:04:78:cb:d5:b1:3b:4f:a4:5b:13:9a:48:
         a6:40:f1:aa:2f:78:62:32:b1:8d:41:96:b6:03:17:50:7c:ec:
         e8:48:73:f8:b5:7e:9a:c5:8b:d1:00:a4:d3:0a:f3:61:0c:3e:
         8e:e5:8c:36:be:e3:cc:fb:e8:2b:a8:a7:a6:57:b4:c6:33:fd:
         77:bb:e5:38:25:94:5e:e6:3c:a3:16:ae:f3:2e:ec:7b:26:4f:
         78:dc:ae:15:73:ad:ac:53:da:fe:7e:ad:b6:01:4e:86:62:6f:
         c0:32:0b:05:d2:58:6b:08:50:c8:55:57:33:d2:f1:71:7e:8b:
         e8:2f:af:31:61:44:11:41:53:91:33:61:29:3e:1f:0a:b2:2a:
         fc:0a:cf:8b:61:46:1b:74:4c:9b:e6:88:99:8c:03:be:c9:6a:
         ce:e1:52:f5:83:8c:8b:56:ef:24:d1:64:4b:7a:69:31:96:52:
         d6:70:25:47:9d:8d:b0:59:18:83:e5:26:f5:d7:5a:c2:2d:f8:
         05:3f:a4:bd:ef:01:cb:93:6a:94:48:81:38:c3:87:01:69:9b:
         bb:14:dc:ec:2a:ec:8c:1e:9c:30:20:1d:24:27:25:0b:70:02:
         37:83:f6:2e:08:9f:90:23:42:61:18:bb:85:ce:01:ac:fe:d3:
         dd:af:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----