Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37372e3130342e302f32332d3234203d3e20313333383030.roa
File:                     3130332e37372e3130342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          q38VIRIRwxMyuqCrtCc/Scr9Rv3QlkPd6PiI8H41SQU=
Subject key identifier:   5E:48:54:13:F0:86:33:7A:13:DE:C2:ED:82:DE:77:F3:E3:D3:8E:2E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       69E9F204749D0FF67ED3F48E3CAD5C3FD838BA7E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37372e3130342e302f32332d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 07:00:01 +0000
ROA not before:           Sat 09 Oct 2021 06:55:01 +0000
ROA not after:            Sun 09 Oct 2022 07:00:01 +0000
asID:                     133800
IP address blocks:        103.77.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e9:f2:04:74:9d:0f:f6:7e:d3:f4:8e:3c:ad:5c:3f:d8:38:ba:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 06:55:01 2021 GMT
            Not After : Oct  9 07:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:6c:74:2f:18:a5:0b:19:f9:fb:7e:1e:1c:
                    4e:48:09:98:86:f9:48:15:8c:6a:28:2d:c2:07:58:
                    88:d4:1c:1e:8f:f1:31:3a:ef:ba:bc:16:45:92:fc:
                    4f:01:ea:90:d4:98:77:9c:12:59:12:9e:02:6a:6d:
                    24:0a:ea:31:66:80:e2:90:ee:1e:57:d7:19:81:23:
                    49:c9:1b:05:a5:3b:26:45:2f:00:66:c9:b1:3f:13:
                    23:d2:fa:73:a8:fb:5a:cb:6a:f3:e5:92:ad:53:82:
                    94:00:ef:c2:d5:66:38:06:89:54:bc:3d:3d:4e:ba:
                    fe:28:28:db:41:3a:34:ea:a3:0b:74:bf:a7:0d:f4:
                    14:ce:fa:02:05:ae:19:0a:9a:ad:f4:0f:91:4d:2e:
                    cc:10:49:50:16:3a:1e:1e:d1:19:0a:ee:89:4e:e7:
                    5f:60:e7:10:83:91:ef:91:d0:03:3e:fd:87:d8:ed:
                    22:a1:66:7b:b1:2a:f9:31:23:33:24:6e:38:61:ce:
                    28:46:b6:af:7a:4d:b3:80:0f:be:ab:27:d8:90:d5:
                    f7:32:a2:45:0b:ae:13:a4:16:2c:db:23:ad:ec:34:
                    1b:a3:8f:8a:7a:bc:03:cf:31:d1:35:3f:ed:43:b5:
                    40:7a:01:56:6f:5b:16:bd:4b:b9:b1:94:4f:0b:56:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:48:54:13:F0:86:33:7A:13:DE:C2:ED:82:DE:77:F3:E3:D3:8E:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37372e3130342e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:c4:b1:16:22:99:e1:50:2d:b2:d7:7c:56:f1:79:d5:0e:
         af:63:02:69:97:de:ce:67:9d:f4:4b:f2:b4:55:3b:41:fe:55:
         b9:7d:6a:66:13:b5:26:09:db:04:91:b7:41:88:46:91:b5:e8:
         67:11:60:5b:59:e4:75:b6:ce:5a:e6:78:33:09:8e:38:2b:49:
         3c:66:43:a7:fd:65:08:f0:d2:41:7d:43:7a:0a:bf:cd:2b:4c:
         75:90:2e:f7:cb:9d:81:22:30:12:81:78:4f:28:fe:ba:19:0f:
         97:e3:c2:18:46:a1:47:7b:19:28:0e:91:da:b7:6e:7a:c7:c5:
         9b:f0:de:71:3b:ec:9a:67:5b:6f:2c:ab:14:97:69:c8:fb:84:
         9e:10:00:e6:6e:88:8c:89:43:ec:85:9a:fa:b0:89:ee:fc:30:
         b7:53:10:a7:24:85:d0:2a:fd:98:a2:ee:99:11:8f:90:d7:51:
         c5:f7:ef:cb:e1:4e:ab:66:5d:8f:3c:69:3c:c0:84:18:01:97:
         07:ed:fe:0f:08:87:db:42:56:20:90:f0:d2:77:9c:6b:2f:74:
         da:96:0d:b2:61:00:18:5d:e0:db:83:f4:ec:e5:51:a5:ef:2c:
         72:20:62:c7:3f:f3:52:03:7f:fd:d4:0c:e3:55:e1:42:ca:1a:
         80:9b:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----