Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131392e302f3234203d3e20313331313131.roa
File:                     3130332e3132342e3131392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          tuNxRCxzcD8HJhAklOL44qqUtRI0/YDspW4x2GOhi8U=
Subject key identifier:   B5:DC:F8:BC:C5:4C:FC:35:E4:3D:E0:9B:8B:F5:D0:05:B4:46:B4:2C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       325742E34B0E59461BBD678EAFFD232238BEC1A6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131392e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:07 +0000
ROA not before:           Tue 29 Jun 2021 10:55:07 +0000
ROA not after:            Wed 29 Jun 2022 11:00:07 +0000
asID:                     131111
IP address blocks:        103.124.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:57:42:e3:4b:0e:59:46:1b:bd:67:8e:af:fd:23:22:38:be:c1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:07 2021 GMT
            Not After : Jun 29 11:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:62:29:e0:df:71:95:1e:8a:0f:ea:b5:14:
                    0c:1b:f2:3d:68:22:51:62:54:9a:bf:00:23:4a:e4:
                    99:25:5f:ae:a7:84:82:1a:eb:ca:2b:f4:41:09:28:
                    17:99:df:94:96:10:11:8b:ab:4f:bb:ba:58:5d:0f:
                    f1:eb:9f:33:f7:96:a1:a0:ab:5d:03:3b:ec:a9:ed:
                    1d:6d:54:6d:16:0d:e3:33:7d:35:c0:e6:e2:ab:2f:
                    c9:71:b8:32:1a:a9:26:2d:96:2a:ee:f8:78:32:27:
                    30:39:4f:aa:e8:39:74:1e:50:93:d5:d6:88:f9:30:
                    3e:1e:28:c0:73:93:81:76:ee:a3:4a:11:c9:9e:fb:
                    9d:9d:14:51:2b:68:a9:d1:c0:58:ff:1c:bc:47:9f:
                    ca:b3:70:f5:f4:51:b7:74:e4:38:c4:8d:0b:40:03:
                    bc:e1:16:bc:94:f7:14:22:77:17:8b:f7:a9:67:24:
                    1f:79:89:c3:c6:26:68:86:47:ae:e6:bb:70:8d:06:
                    3b:e6:22:93:94:0a:ec:c7:e7:00:fb:2f:95:d0:8f:
                    77:08:2f:18:e8:24:c2:b0:fc:96:72:1a:e3:08:b1:
                    d1:a3:f5:8f:7c:4b:05:de:5e:35:18:d1:55:cb:89:
                    c3:be:82:3d:68:62:16:2d:d1:aa:49:27:d8:93:52:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DC:F8:BC:C5:4C:FC:35:E4:3D:E0:9B:8B:F5:D0:05:B4:46:B4:2C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:44:de:8e:7c:9b:17:62:28:35:ae:22:96:f3:1f:f3:ad:
         17:3c:52:c2:6c:9b:69:c3:d7:a9:78:71:22:a6:46:bb:cd:48:
         90:b1:dd:27:3a:7d:70:77:1f:d2:03:6c:33:6e:b0:76:01:4d:
         13:1b:a2:b8:db:cc:1e:5e:8f:fd:1b:b2:e8:b5:ac:96:bd:64:
         c0:a6:5e:dd:62:4e:2d:6d:b3:1d:de:ee:c1:53:18:96:97:8d:
         e8:67:58:73:d2:a5:cf:10:15:69:ca:e2:51:41:aa:fa:12:1c:
         7a:39:82:3a:2d:6c:af:3b:c4:0b:1f:2b:74:56:92:73:e0:c3:
         06:24:b8:37:f1:89:cd:f1:99:86:04:5b:cc:d3:e1:8e:81:37:
         21:04:80:16:8a:de:09:47:c4:39:cf:f6:2f:6a:75:20:18:53:
         e9:24:a2:a0:34:26:80:d2:42:67:b0:0b:75:b2:e7:b6:a3:46:
         dd:ca:84:3a:dd:ab:13:dc:b9:09:d9:86:3f:ff:71:6e:ee:41:
         f6:24:c7:45:f0:b2:54:50:24:54:37:b2:24:4f:3b:f1:d8:78:
         31:e1:fb:fe:0b:9b:42:a9:cf:eb:0d:56:7a:70:6d:46:9b:a0:
         ee:ef:31:77:6c:3b:41:df:0d:41:08:92:39:28:2f:39:7e:e8:
         86:69:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----