Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa
File:                     3130332e38392e342e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          A1WV2oPDqFDJKA249qwPNpinJSipP4QnmhMQwtnjp6E=
Subject key identifier:   B1:0C:3F:8A:62:17:05:6A:41:EC:15:3D:A0:19:7B:54:6B:7F:14:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4BA397222F12AD29F0225621330B5387B804C753
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:01 +0000
ROA not before:           Sat 09 Oct 2021 03:55:01 +0000
ROA not after:            Sun 09 Oct 2022 04:00:01 +0000
asID:                     133800
IP address blocks:        103.89.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a3:97:22:2f:12:ad:29:f0:22:56:21:33:0b:53:87:b8:04:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:01 2021 GMT
            Not After : Oct  9 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:5f:40:ac:3c:5a:21:be:69:32:9a:65:18:
                    60:41:7c:cf:c1:49:8c:74:97:80:f4:9e:dc:a3:65:
                    cb:7e:b8:34:06:fe:00:ba:dc:be:92:76:01:9f:f2:
                    6e:b2:39:6d:4e:c4:db:27:61:8f:84:a4:a7:2b:71:
                    a3:86:14:a3:1f:53:86:34:55:45:a6:0f:47:fd:25:
                    ad:c9:cd:11:57:7f:bc:fe:e4:96:cf:d7:63:57:b2:
                    ae:1b:d0:5a:c9:fa:2d:42:2e:c8:06:36:6c:94:60:
                    c5:b4:59:58:72:86:cd:31:27:23:5c:f8:b9:61:13:
                    ae:40:60:72:d4:2f:ec:c5:58:82:97:de:8f:46:b1:
                    d4:01:30:64:7a:bf:9d:3f:2f:ad:67:7e:39:d0:f0:
                    c7:90:b5:18:ea:f1:a8:54:c9:e8:a7:a0:d2:08:6b:
                    d9:ed:9c:a1:3b:e7:9d:b0:8b:fe:0b:92:4d:a4:eb:
                    73:fa:f2:42:1a:ba:cf:52:e0:f0:c8:fe:ad:e1:15:
                    92:84:f9:21:dd:a0:b6:eb:ab:a7:cd:b6:45:6a:50:
                    77:26:28:88:05:89:a5:7c:44:96:d3:79:87:9c:75:
                    c6:08:f8:47:fd:77:e5:e3:cf:fd:b3:06:33:9a:6e:
                    83:5c:d1:3c:54:a8:c0:8f:36:ed:e9:20:3b:26:fc:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0C:3F:8A:62:17:05:6A:41:EC:15:3D:A0:19:7B:54:6B:7F:14:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38392e342e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:49:6c:3a:0e:8b:94:5f:67:78:f8:43:8d:d1:5d:e0:db:
         eb:ee:23:21:8b:d0:03:99:57:ef:e2:e8:74:a2:e4:a9:a6:09:
         7f:91:53:e2:14:de:94:94:f4:63:ee:c5:0c:cf:82:00:e7:b7:
         be:7a:0a:30:1a:cf:e4:5d:84:2a:9f:5f:2f:12:5c:cb:a8:70:
         1b:2d:59:1f:e7:7c:af:8e:06:3f:08:e3:94:d3:7d:42:f9:5e:
         48:b7:4a:e2:12:ab:3c:5d:5a:e5:0f:56:45:89:41:23:43:87:
         3a:d8:af:f0:fa:9e:69:e2:04:8e:a2:a5:4e:89:aa:28:b4:7f:
         4f:f3:d9:03:94:0a:b5:30:e3:2c:60:66:2e:52:0f:59:e4:31:
         bb:cd:01:85:8d:54:bf:bf:72:6c:6d:e0:fa:fe:aa:af:d9:15:
         9a:3e:f6:bd:4d:68:d1:d8:ba:1e:2b:da:41:3f:2c:29:b2:6a:
         cd:0b:1f:8b:d2:da:ae:63:4a:56:66:9a:b4:8b:53:6f:5d:61:
         2c:c1:0b:11:e8:c4:1c:f0:5f:03:0a:53:03:ee:06:08:c3:8e:
         df:ca:f8:69:18:09:5e:9c:da:1b:98:9d:67:ca:bf:80:19:47:
         1f:9b:6a:e0:af:ae:cc:df:ff:f7:03:5e:d6:af:38:55:ee:68:
         8c:5e:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----