Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3138362e302f32332d3234203d3e203538333639.roa
File:                     3130332e3135332e3138362e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          NSwkw5P/mFi7Jp/wg3CKnYHiRTnTcsPBV7Pmcl4ZoAQ=
Subject key identifier:   4A:15:F1:8B:0A:23:EB:2D:5A:C8:15:FF:C9:E9:53:65:C8:FA:3F:52
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       75128485EDF653633D251F027AB45656EA0DDFED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3138362e302f32332d3234203d3e203538333639.roa
Signing time:             Sat 09 Oct 2021 10:00:01 +0000
ROA not before:           Sat 09 Oct 2021 09:55:01 +0000
ROA not after:            Sun 09 Oct 2022 10:00:01 +0000
asID:                     58369
IP address blocks:        103.153.186.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:12:84:85:ed:f6:53:63:3d:25:1f:02:7a:b4:56:56:ea:0d:df:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 09:55:01 2021 GMT
            Not After : Oct  9 10:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:ac:e9:7a:17:db:19:3e:6a:af:81:01:83:
                    b2:3d:89:f2:6c:fd:5e:70:26:82:7e:60:1c:eb:91:
                    64:b7:a7:2b:ad:a7:1c:6c:e5:12:fb:31:16:60:22:
                    4f:c7:f1:ca:02:12:04:bf:01:48:b5:2d:af:47:f4:
                    e8:62:04:c1:70:70:41:15:eb:f1:2e:d4:a0:b0:41:
                    35:a3:1a:5e:88:16:1b:62:ad:f1:23:10:18:72:65:
                    9d:58:0f:8c:94:b0:2d:60:07:2a:eb:76:59:11:45:
                    d6:99:cb:f9:9a:7a:bc:57:64:d5:07:ec:55:f0:d8:
                    94:93:23:fd:fe:20:d3:5c:b0:40:26:62:81:fb:0c:
                    9f:e5:6e:46:65:84:66:7e:1c:fc:7a:4a:45:97:39:
                    de:ba:6d:b9:39:f5:a8:d8:a2:60:f9:c6:fd:26:79:
                    ad:f5:19:d1:a4:07:bb:b3:cf:b6:11:8f:0e:c9:e2:
                    a2:cf:93:c8:79:c8:92:0b:d6:16:f8:f2:3d:c2:bc:
                    d3:02:e3:80:8f:f9:8d:e4:a4:99:02:90:bf:08:cf:
                    9e:02:da:0c:15:31:85:08:a1:1b:1a:2f:7d:50:76:
                    3f:b4:75:7f:c1:73:7c:fb:92:0e:2e:00:45:49:db:
                    96:64:cb:ef:6f:bf:20:17:8b:e8:5b:c8:3f:61:4b:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:F1:8B:0A:23:EB:2D:5A:C8:15:FF:C9:E9:53:65:C8:FA:3F:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3138362e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:4b:6c:0b:85:31:17:7c:f4:3f:f9:08:2c:20:a0:08:4f:
         af:ae:61:ef:21:0b:95:73:f4:be:19:11:ca:b0:e7:47:41:7c:
         11:3a:d9:ec:17:2c:41:f1:ff:83:50:4b:b7:60:a1:ee:c1:81:
         a6:61:db:7c:a0:25:c2:a1:6a:1d:91:aa:ee:26:8c:6e:1f:06:
         93:9a:46:6f:00:06:2d:f6:ea:7d:36:5d:d9:0e:7f:e5:68:41:
         63:e8:36:30:ae:cc:48:ce:17:b8:73:75:b7:45:b1:eb:b8:13:
         cd:ad:6c:2e:3e:8d:af:72:df:44:8c:22:ad:52:2b:66:06:0b:
         7e:c8:9c:ae:82:c1:13:be:40:5b:1d:60:5d:69:a8:6c:8a:86:
         f2:f9:16:f5:39:a7:4d:cb:1c:50:cc:6d:93:49:4c:c0:a8:9d:
         fc:84:22:90:47:7e:9d:88:ee:db:b4:d3:8d:38:0b:3d:14:98:
         03:19:c8:6c:34:3a:29:27:42:f1:89:85:fb:2e:53:75:3e:ca:
         f6:38:42:58:d5:f5:87:79:6c:eb:ab:6b:ef:e2:9d:ee:27:11:
         a2:45:90:9d:7f:08:7e:fd:38:f5:b5:f9:97:8a:1b:0f:91:e3:
         5d:b0:db:d0:e6:4e:48:e5:6a:9e:1e:6f:7d:6d:49:13:ca:ef:
         cc:58:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----