Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132342e3138382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          BUk4GieFTM7ajzBOprFhbIbrMzB9wuDlIJQ7msAX43g=
Subject key identifier:   46:D8:FB:0A:C5:5E:CC:D6:E2:B7:72:73:5F:F0:A7:BB:50:B6:36:52
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       76C36E7C164865EF38EFFD9EF4C696E017BBD3F0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:12 +0000
ROA not before:           Tue 27 Apr 2021 15:41:12 +0000
ROA not after:            Wed 27 Apr 2022 15:46:12 +0000
asID:                     17995
IP address blocks:        103.124.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c3:6e:7c:16:48:65:ef:38:ef:fd:9e:f4:c6:96:e0:17:bb:d3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:12 2021 GMT
            Not After : Apr 27 15:46:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:61:a5:24:a5:77:56:f9:5f:7d:fc:84:f3:
                    79:cc:1a:a5:75:01:f1:fb:54:7a:7f:3a:aa:1e:86:
                    d7:d4:ef:ac:21:2a:f1:aa:fa:87:15:63:c4:79:7c:
                    4d:44:e2:0c:3e:ea:71:39:79:6f:d3:4c:59:a5:0f:
                    6d:55:4a:f1:76:8d:88:6e:b6:0d:77:c4:df:ba:4f:
                    77:3a:25:65:ee:3b:95:6a:6f:0f:a6:8f:17:bb:3a:
                    56:90:bc:e9:9e:61:8d:f2:94:51:8c:f1:0e:73:3b:
                    33:14:0d:45:a3:ce:30:37:f0:d6:68:05:96:0b:dc:
                    dd:ef:e2:cc:7d:52:d0:9f:0b:2f:f6:f4:46:43:da:
                    4d:38:13:72:2d:f4:e1:aa:30:3f:a6:ce:10:5d:99:
                    24:88:a8:d9:f2:49:53:20:78:33:cf:ab:e1:04:63:
                    29:62:15:76:9f:a7:e2:04:4d:a3:aa:07:d9:79:12:
                    81:db:e1:9e:39:2e:75:b0:d2:02:09:f3:69:c5:a0:
                    73:7b:12:2f:ac:60:75:44:36:25:d1:1a:bd:c9:58:
                    44:dd:8b:94:71:90:ad:74:11:a9:d2:ee:96:be:4e:
                    7a:14:34:f3:30:34:3b:2b:00:ec:74:cf:86:f3:9e:
                    9c:94:e3:91:c1:d1:93:ef:fc:8b:03:fa:54:24:8a:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D8:FB:0A:C5:5E:CC:D6:E2:B7:72:73:5F:F0:A7:BB:50:B6:36:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3138382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:26:d2:4d:65:cc:6a:07:f0:3b:49:73:e3:a3:e2:d5:3c:
         92:c1:81:8a:98:6b:5c:54:5e:0d:24:3b:ad:82:da:9e:b9:e4:
         8e:11:29:3e:f0:bd:e7:4a:cd:31:85:0b:53:48:31:ab:2b:4f:
         21:72:11:47:21:d5:0e:78:b2:f9:44:2f:0f:e0:f0:51:44:f6:
         0a:47:62:0a:ca:88:ff:97:2b:74:6d:bf:5b:99:ea:6d:58:3a:
         fd:29:99:4c:93:59:43:c1:4f:69:1f:48:bd:ec:0f:dd:59:6a:
         82:7f:54:e4:b2:c6:23:f4:ea:6c:7b:bd:31:ef:13:6a:a8:b3:
         96:fc:ac:3b:d6:b5:e5:17:71:d2:9f:c2:30:a2:7f:1b:5f:d8:
         f4:c0:58:5b:c4:8d:59:da:18:9a:66:fa:6c:d5:87:a9:f1:c5:
         19:f1:9a:ef:45:79:0a:a7:00:18:c3:f3:0d:f8:6d:bb:c4:a1:
         cd:6a:b7:ac:d7:45:29:98:16:7b:79:f2:57:97:f0:c1:a8:e2:
         38:c1:f0:dd:b5:c1:2c:8f:76:fd:5d:06:7e:15:9a:f9:50:12:
         8a:03:24:ee:b4:ed:d5:66:ec:7d:c8:a1:a7:cc:ba:7a:67:d1:
         a3:49:62:d4:9b:e2:84:63:b8:be:a1:07:42:98:23:c9:0a:e9:
         5c:ea:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----