Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39302e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135322e39302e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          S63lsRtQQeiRfDo+Er0Q0bASqcw6YlkfzeWQCTNfYN8=
Subject key identifier:   76:06:98:54:83:D1:E3:E1:E7:FC:D6:4B:A9:23:B0:0D:5B:93:B3:07
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       31E520B97E468CF9A9C9C6201A382AD2BAC095B2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39302e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:00 +0000
ROA not before:           Fri 05 Nov 2021 16:55:00 +0000
ROA not after:            Sat 05 Nov 2022 17:00:00 +0000
asID:                     133815
IP address blocks:        103.152.90.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e5:20:b9:7e:46:8c:f9:a9:c9:c6:20:1a:38:2a:d2:ba:c0:95:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:00 2021 GMT
            Not After : Nov  5 17:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:e9:73:7c:76:b2:d8:8c:fb:ce:42:06:4f:
                    df:83:12:73:99:03:7e:c6:82:e7:3e:b8:45:d8:db:
                    12:25:29:17:44:b7:75:30:a4:b0:34:d0:15:77:18:
                    c9:5c:9a:87:37:dc:69:a0:11:2e:b2:cc:1d:48:96:
                    da:d1:d1:86:14:0b:ea:ff:a4:e7:bb:06:94:4e:02:
                    f7:09:45:17:7a:72:5c:a5:17:73:6c:29:a3:6c:64:
                    65:cb:ec:ea:c8:b8:39:95:9d:5c:fa:31:a3:6c:94:
                    e5:d7:c4:c4:24:c4:84:1b:19:eb:d7:6b:d6:68:b3:
                    c5:d1:91:20:90:d3:45:57:7d:56:eb:87:45:9e:ab:
                    b8:8a:b2:f0:2b:0a:f2:1a:15:91:9b:56:3d:bd:5a:
                    20:d9:cc:f3:ca:f4:93:63:a2:a5:ca:a4:dd:1a:ee:
                    f4:9d:5e:c8:89:0f:e2:02:59:06:2e:1b:77:4a:b0:
                    ae:5a:82:7d:f7:0f:ac:af:34:a0:e3:03:c1:aa:f1:
                    b5:79:c6:5a:0e:dc:9a:6d:1e:20:fe:b4:ab:87:99:
                    3f:50:df:08:3d:e4:9e:bc:8b:16:68:01:c7:9d:15:
                    a0:72:b3:aa:0b:6d:1d:09:70:1e:52:09:90:29:d4:
                    d7:7e:20:c5:20:03:fd:52:10:3c:83:19:81:fd:da:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:06:98:54:83:D1:E3:E1:E7:FC:D6:4B:A9:23:B0:0D:5B:93:B3:07
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39302e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:e6:d4:74:ea:ba:4e:94:7e:c8:2b:28:f4:f5:87:17:d6:
         65:28:c7:8f:f9:02:43:27:a7:40:b7:61:23:2d:09:be:a1:34:
         35:ba:ef:a2:77:c1:5a:65:e5:6b:90:2e:7e:1e:1a:57:ed:32:
         fb:6b:79:f6:43:2d:2a:44:a1:56:76:27:21:cc:84:7e:30:0d:
         6a:b6:ec:0e:9f:27:0f:f7:f9:a0:50:eb:10:b9:ba:9b:9a:4b:
         a2:47:dc:18:a9:44:e5:51:49:e5:9e:c9:5d:97:0d:dd:b5:f8:
         00:fa:c5:46:05:1e:24:2a:d5:3e:fc:59:33:60:d6:1c:61:47:
         d8:5e:97:02:2b:95:b9:9d:1a:c7:81:3a:f8:75:24:ac:8e:2f:
         f7:74:ec:16:13:2b:95:f9:44:bb:a3:ee:0b:27:2d:76:d1:13:
         bf:70:01:c2:0c:83:5c:2f:91:f7:a8:64:f8:bf:de:8f:dc:e8:
         f9:99:9c:4c:2e:47:82:24:29:e3:25:0f:67:25:b4:89:ea:58:
         6d:76:5a:05:7e:17:1c:a3:95:ff:0d:91:b6:7a:0d:a6:d7:35:
         02:a1:66:df:a4:0c:e2:8a:9e:94:1d:71:2b:c4:dd:66:ed:47:
         28:d7:ed:6a:bd:7e:6d:32:6b:e8:62:f8:ed:09:66:d8:6e:86:
         91:22:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----