Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230392e302f3234203d3e20313331313131.roa
File:                     3130332e3132352e3230392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          J5PN1SIx1QhoJuhYavI6vze2BI6OHO9Ja+S+x4Khyeo=
Subject key identifier:   1C:1D:28:65:9B:BD:78:A1:3E:0A:9C:C3:01:2C:A1:ED:48:A6:87:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       56EB1A6F0B34A13FD62FD6A3A7AB0823087C229E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230392e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.125.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:eb:1a:6f:0b:34:a1:3f:d6:2f:d6:a3:a7:ab:08:23:08:7c:22:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject: CN=3082010A0282010100AFE1A09058A431BB1BC423AC89B8F8B0FA74E5D52F7A31F763A311B18576D06BB6C6F148D9DD918908512F8D6280DDC0CFD5251B5C9B5E450990C798BC0FD1B160C3E86A9BBBEEE0AF3E276D76F56E3D4E0D04E3E458A18E14990E16CFC0970AF59C16BEE86BF9CA36160845E1ECD848DCD46F0D0DA91E2572446AF48FE4E2DA7025BC48B5F5F9759E12CAE9F8F7059B1A1ED1008C6C27DCF85DB3D9F48E51670AA82C28309D40BF88847005808BDD06353C2BE1808ECC78517168C9A5E07D72270C11611BA1F637A9A54C8D0F3F38612A6A09F7B088AA0680F38CCDECCD0B13F922A235224DC9FE7BE666172A151ED6D59CA3D1BA0656E365B3C681C85D81630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:a0:90:58:a4:31:bb:1b:c4:23:ac:89:b8:
                    f8:b0:fa:74:e5:d5:2f:7a:31:f7:63:a3:11:b1:85:
                    76:d0:6b:b6:c6:f1:48:d9:dd:91:89:08:51:2f:8d:
                    62:80:dd:c0:cf:d5:25:1b:5c:9b:5e:45:09:90:c7:
                    98:bc:0f:d1:b1:60:c3:e8:6a:9b:bb:ee:e0:af:3e:
                    27:6d:76:f5:6e:3d:4e:0d:04:e3:e4:58:a1:8e:14:
                    99:0e:16:cf:c0:97:0a:f5:9c:16:be:e8:6b:f9:ca:
                    36:16:08:45:e1:ec:d8:48:dc:d4:6f:0d:0d:a9:1e:
                    25:72:44:6a:f4:8f:e4:e2:da:70:25:bc:48:b5:f5:
                    f9:75:9e:12:ca:e9:f8:f7:05:9b:1a:1e:d1:00:8c:
                    6c:27:dc:f8:5d:b3:d9:f4:8e:51:67:0a:a8:2c:28:
                    30:9d:40:bf:88:84:70:05:80:8b:dd:06:35:3c:2b:
                    e1:80:8e:cc:78:51:71:68:c9:a5:e0:7d:72:27:0c:
                    11:61:1b:a1:f6:37:a9:a5:4c:8d:0f:3f:38:61:2a:
                    6a:09:f7:b0:88:aa:06:80:f3:8c:cd:ec:cd:0b:13:
                    f9:22:a2:35:22:4d:c9:fe:7b:e6:66:17:2a:15:1e:
                    d6:d5:9c:a3:d1:ba:06:56:e3:65:b3:c6:81:c8:5d:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1D:28:65:9B:BD:78:A1:3E:0A:9C:C3:01:2C:A1:ED:48:A6:87:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3230392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:dc:97:b2:c9:26:7d:e8:a5:14:2e:95:67:34:1f:1e:3c:
         dd:a3:1f:63:af:41:39:90:6b:90:a4:6a:7d:01:dc:87:87:72:
         c5:f2:af:42:9f:8a:f5:bf:88:a8:24:c8:f2:55:ff:0e:d0:fe:
         42:cc:52:1a:98:b7:3d:07:c5:5d:c1:dc:53:81:83:5c:b4:99:
         0e:35:1b:a2:59:91:58:2b:fd:38:e3:af:7f:2c:b7:ec:2c:9d:
         7f:1b:ec:04:75:52:3f:e3:7c:66:1c:a4:40:54:a4:44:82:4c:
         45:b0:5e:bd:1d:4a:33:16:d4:e4:0d:b0:3a:e2:a9:c7:88:4d:
         78:72:a4:41:bf:de:ae:58:dd:8c:63:db:52:66:ec:23:6e:a5:
         36:03:6a:45:93:ba:3a:bb:98:bc:9c:62:64:87:0a:9f:3c:2b:
         db:42:d6:10:42:fb:d8:53:ab:e6:b7:e3:9d:bd:13:c2:77:6b:
         4f:21:9d:42:8f:4e:99:3f:23:e0:73:41:79:ab:7a:84:6d:45:
         91:14:aa:e5:4d:e9:63:1e:e7:af:83:de:f0:51:d6:fc:06:c0:
         a3:24:f5:19:3c:58:35:6f:0e:29:65:56:d3:00:19:1b:04:60:
         b0:87:23:0b:03:3c:41:94:00:bf:0c:bd:67:67:24:b1:cb:75:
         17:35:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----