Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e36342e302f32322d3234203d3e20313333383030.roa
File:                     3130332e39332e36342e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          ZBrUQ9nu1x76QSD6rD90Pvy/Nl2zjwmz3F/cLhNXs90=
Subject key identifier:   13:C0:68:70:F6:77:BF:BC:B4:86:24:2E:DC:E2:F1:C3:2E:E1:5D:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A0E4716BDF9474A29796FDEE3984A653E8BF57C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e36342e302f32322d3234203d3e20313333383030.roa
Signing time:             Sat 09 Oct 2021 04:00:02 +0000
ROA not before:           Sat 09 Oct 2021 03:55:02 +0000
ROA not after:            Sun 09 Oct 2022 04:00:02 +0000
asID:                     133800
IP address blocks:        103.93.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0e:47:16:bd:f9:47:4a:29:79:6f:de:e3:98:4a:65:3e:8b:f5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  9 03:55:02 2021 GMT
            Not After : Oct  9 04:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:a9:78:36:3c:06:3b:e4:cd:dd:7c:32:4b:
                    ee:07:25:ab:5a:1b:4e:78:fc:ad:55:fb:33:db:b5:
                    2f:88:fb:30:ef:45:96:c2:20:0b:09:78:ec:84:6a:
                    51:bd:80:6f:9f:9c:02:33:9a:e6:9f:17:57:60:db:
                    5f:cf:e4:b6:df:3c:cf:bb:03:4d:ba:7e:5b:ce:1b:
                    f6:0b:18:f5:08:44:a3:8c:07:c7:7a:37:95:56:04:
                    e8:d1:fe:27:1f:b7:cf:53:54:1d:6d:a6:1b:6d:bf:
                    36:7d:8c:78:c6:33:23:dc:09:93:18:4d:7b:fa:fd:
                    68:50:65:54:45:92:05:38:00:4e:16:2b:4b:e1:bd:
                    57:69:4e:da:f9:77:cb:65:d3:ea:ec:31:dc:40:c0:
                    f7:06:25:0c:a8:38:f8:ef:78:20:a1:11:21:f5:ec:
                    97:d2:74:3c:60:a3:06:f9:cf:aa:3c:cc:eb:c7:30:
                    9f:5e:d4:b0:1f:7a:09:c6:1a:27:6c:71:66:e0:37:
                    2e:25:5b:07:6b:3b:4d:e5:b2:1a:61:51:a6:fb:60:
                    5a:f7:d3:e9:3a:e7:bd:b9:09:c6:7e:0d:4c:3d:6b:
                    2d:4a:69:8f:ee:e1:02:94:23:78:97:01:29:0b:6a:
                    87:96:7d:d3:8a:e2:3b:27:6b:8b:a3:01:3b:3d:25:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:68:70:F6:77:BF:BC:B4:86:24:2E:DC:E2:F1:C3:2E:E1:5D:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39332e36342e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:c3:82:e4:58:56:30:3e:c5:2a:b9:88:d6:ba:66:b7:7c:
         f0:0c:27:08:32:c3:6e:c6:05:66:60:eb:b2:2c:72:01:91:1d:
         10:a9:5a:13:36:d6:bb:84:b4:06:5c:4d:b8:c1:bd:ac:b3:69:
         b4:d5:cd:54:7b:3a:5f:c3:65:5f:8f:56:8a:75:3d:10:0d:96:
         d8:9c:a9:b4:63:d9:65:2b:9b:5c:96:06:91:b2:a1:3f:e1:b4:
         5a:d0:d7:e3:c5:fb:03:07:c2:92:35:da:19:b2:7b:29:2f:44:
         8a:fe:f6:8e:4d:24:5e:0f:5c:ff:27:cb:1f:3c:87:7e:ef:1e:
         e7:a4:71:65:5a:e3:68:38:6e:a7:29:95:44:3a:a9:35:cc:c0:
         14:43:dc:c1:85:67:63:9f:fb:24:a8:5e:4b:ce:ef:29:a5:55:
         6d:4a:41:9f:27:a7:c0:fc:43:6c:31:aa:c9:be:57:3d:de:c2:
         a6:2d:5b:c2:b9:51:dd:94:34:0e:b2:94:21:ae:48:9d:d7:9f:
         8e:05:7e:a7:90:84:0f:8a:90:f0:55:ef:d1:35:b3:43:d6:87:
         24:0b:33:a3:c4:0e:89:c5:f5:27:4c:f4:5e:86:88:04:af:00:
         6e:0e:39:f1:58:3c:ef:a2:dc:bd:8c:7c:60:75:79:2a:e3:ee:
         f6:b0:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----