Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e35362e302f32322d3234203d3e20313333383030.roa
File:                     3130332e39332e35362e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          Cf4QVzetMpnZZrfZUOf1iIRDccTAQ949NQtFio2JxmA=
Subject key identifier:   C5:DA:F2:BA:77:DB:C1:3A:59:38:CA:62:9A:B7:9A:11:4B:30:A0:24
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       708B4B249DF4AC3695F8BAA9CE117169EE79F5F0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e35362e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:01 +0000
ROA not before:           Sat 09 Oct 2021 03:55:01 +0000
ROA not after:            Sun 09 Oct 2022 04:00:01 +0000
asID:                     133800
IP address blocks:        103.93.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8b:4b:24:9d:f4:ac:36:95:f8:ba:a9:ce:11:71:69:ee:79:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:01 2021 GMT
            Not After : Oct  9 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:01:96:84:28:87:2e:b3:af:ab:ba:cb:0d:
                    46:62:38:17:f8:ff:97:61:33:30:e0:ee:ec:88:83:
                    94:1b:04:b3:30:e1:95:bd:32:b4:7b:cc:b1:19:11:
                    0b:f1:db:27:f6:90:13:9b:f4:e1:4c:67:0e:6d:00:
                    2a:e5:be:8a:8c:25:70:06:ba:ac:b0:0f:14:88:ff:
                    de:f5:1d:f5:38:1f:9f:ec:22:b7:ea:9e:39:43:8d:
                    18:6a:00:82:22:f6:e8:95:d3:3f:cf:45:07:51:1b:
                    8a:f0:ed:58:62:08:85:72:2e:34:62:94:dc:53:37:
                    40:d5:27:39:76:e6:2f:39:c4:a7:58:8a:21:d4:84:
                    ea:25:34:21:eb:40:47:0c:c3:f1:90:9d:1a:ab:01:
                    0a:86:8f:34:67:d6:45:3b:99:93:3d:75:c1:0b:12:
                    99:9a:0f:1d:f7:60:4b:0b:00:1c:0a:d4:34:c5:0d:
                    37:70:fa:3d:aa:46:f0:f2:7a:76:6e:e2:60:cf:d7:
                    a1:84:24:bd:08:6b:b0:77:35:27:b4:9c:f6:69:f9:
                    77:e1:1c:aa:c4:97:81:00:c5:7d:79:42:6c:39:db:
                    d9:9e:72:93:e3:b5:8f:77:a0:96:45:12:cd:c5:aa:
                    c2:7b:72:b9:b2:ee:a1:00:3a:cf:d1:11:8b:fc:59:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:F2:BA:77:DB:C1:3A:59:38:CA:62:9A:B7:9A:11:4B:30:A0:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e35362e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:80:fd:5d:22:90:82:02:0f:c5:b7:0a:80:07:ce:d7:13:
         16:23:89:f3:41:92:5d:a1:a2:dd:ad:7d:0e:13:45:b8:84:fd:
         cd:98:cb:1c:31:68:f3:c1:96:72:c7:cb:88:e7:cb:f9:f7:df:
         e4:3d:8f:87:6a:aa:9e:cc:ea:9f:a1:3a:b0:88:84:ac:60:89:
         d7:e0:d4:d7:b5:35:c6:53:b3:f2:d4:77:4b:86:12:71:0d:e3:
         ea:a5:1c:49:5d:4c:8d:51:9a:b7:66:34:d2:68:a9:27:d5:da:
         9a:78:61:f8:9a:ed:c0:47:67:d8:fb:c5:ed:41:14:38:79:2d:
         c5:ee:7c:72:9e:59:0b:e3:7d:f4:cc:c1:54:20:4e:19:ff:03:
         35:ba:7f:7d:39:90:cf:b6:38:f6:8e:43:0c:42:e6:9f:d0:a7:
         eb:95:72:24:45:09:9a:ec:14:0e:ff:90:71:9c:af:a8:a1:98:
         74:63:7e:12:dc:d5:94:0e:25:69:e8:f6:0a:6c:6c:9d:f6:3e:
         15:f1:fe:98:a6:36:ac:7a:33:25:3a:67:ad:b6:e1:75:7e:ba:
         ce:5a:06:17:b0:37:fd:0c:9e:26:e8:c7:72:e5:00:9c:d2:c7:
         f9:30:3a:24:05:df:78:20:53:13:c1:aa:de:90:7f:96:e9:16:
         92:f0:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----