Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa
File:                     3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (raw, json)
Hash identifier:          crc2qbOSihcR5qD7aaVQ/q1fbouQjjnJ7j7FRTxIIRo=
Subject key identifier:   0D:07:A7:E5:3F:6D:5F:13:75:B7:A5:D2:6D:95:38:7B:CF:26:78:B9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0DE2F162B9D3890DF549EF7C184AD38500DB696F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa
Signing time:             Fri 23 Apr 2021 07:25:36 +0000
ROA not before:           Fri 23 Apr 2021 07:20:36 +0000
ROA not after:            Sat 23 Apr 2022 07:25:36 +0000
asID:                     138064
IP address blocks:        103.122.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e2:f1:62:b9:d3:89:0d:f5:49:ef:7c:18:4a:d3:85:00:db:69:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 23 07:20:36 2021 GMT
            Not After : Apr 23 07:25:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:a1:28:db:65:36:d1:a8:23:4e:fc:bb:2c:
                    7c:63:e4:a1:b4:88:5f:01:24:7c:65:de:bc:ad:21:
                    87:1d:36:a8:a6:85:5b:35:4b:c9:65:7a:41:bd:1e:
                    86:51:5a:90:ae:f7:c5:2c:b7:0e:61:71:99:2d:4d:
                    b8:b6:f5:e8:bc:71:3c:d1:f6:b0:86:27:9f:25:47:
                    d8:35:e3:84:ed:3e:dd:98:22:56:fe:5a:76:d1:0b:
                    58:4d:e1:e6:69:54:36:26:fb:99:82:b6:38:1f:e8:
                    1d:d7:e6:03:0a:69:65:08:d2:f1:4d:31:c9:e3:5c:
                    82:85:4c:c7:3f:9a:22:9b:61:cc:64:54:21:08:7d:
                    69:3c:58:75:4f:0f:de:35:fc:3a:88:ad:34:e7:79:
                    99:e6:c1:5b:bf:23:54:e9:20:2d:24:c2:bb:16:f9:
                    2f:2c:23:92:b3:9d:9b:b0:aa:a4:eb:8b:aa:e6:7a:
                    f3:96:8a:6a:12:9b:cf:9d:e0:90:e0:39:47:b8:28:
                    57:9a:f3:e8:61:99:e1:35:20:fa:5b:b0:0e:27:78:
                    46:fb:52:a1:ce:09:e9:f8:48:90:e1:1e:de:04:9f:
                    f4:fa:41:cd:73:a1:97:09:c9:bb:fb:2a:80:51:6c:
                    a2:8a:1c:67:cf:93:c9:91:69:01:59:0c:05:ff:9a:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:A7:E5:3F:6D:5F:13:75:B7:A5:D2:6D:95:38:7B:CF:26:78:B9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:c0:07:94:19:60:6b:fe:40:68:74:e4:f1:61:a5:d5:67:
         54:e4:59:69:c7:ac:d6:9b:96:88:bc:ac:15:2c:86:80:99:46:
         bd:e2:2c:18:5b:27:e6:58:73:16:03:4a:ec:8c:22:cf:32:53:
         bb:51:99:4d:cf:3e:ac:a1:2f:ca:4c:f6:5e:cf:11:3c:30:7a:
         48:30:76:fa:48:4f:60:cf:0f:98:1e:14:83:ce:27:0d:ec:88:
         5e:c9:6f:b1:d7:7c:48:82:3f:02:c9:9e:ea:0e:6c:be:1e:16:
         44:c6:24:12:a4:1c:bf:4e:75:5c:a2:49:1e:6d:21:c4:06:88:
         0b:99:ba:92:9c:70:84:2e:38:1f:e1:e5:1f:18:90:a2:17:24:
         54:e9:fc:ce:bb:5a:30:0a:2d:5d:35:4b:0c:d7:1c:dc:02:42:
         ab:9b:ef:5b:79:3a:ce:75:e7:f8:17:59:87:b8:e6:2d:09:7b:
         45:45:8c:e5:03:5b:e6:9a:75:69:e0:d5:b3:48:87:b5:8f:05:
         1e:6e:16:4f:cd:d8:28:44:a1:9b:3f:cb:cd:26:fb:25:b9:e5:
         0f:1c:74:17:b9:42:ca:b5:0e:0d:ec:e7:00:0c:36:62:69:04:
         ec:93:bc:37:7e:7c:57:20:93:47:33:60:64:73:ba:fd:6b:a1:
         10:2a:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----