Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132352e342e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          lwFDZYA1/vU9VLiDIM4tZlQ17mSs4W1rV6pQucH/Nzs=
Subject key identifier:   F7:94:8D:F6:90:BB:E3:F5:51:2F:B9:14:3D:74:16:3E:24:E6:F8:95
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54589559B5D136E01AB57621725052025DFD3BF2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:11 +0000
ROA not before:           Tue 27 Apr 2021 15:41:11 +0000
ROA not after:            Wed 27 Apr 2022 15:46:11 +0000
asID:                     17995
IP address blocks:        103.125.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:95:59:b5:d1:36:e0:1a:b5:76:21:72:50:52:02:5d:fd:3b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:11 2021 GMT
            Not After : Apr 27 15:46:11 2022 GMT
        Subject: CN=3082010A0282010100CA3C234D0CB9B43F0C86D74472A6F08E968875BE068404E51DEDE26BAAD756A4C4874CE1E691F9B925D4AF11E196078A0BA1E1E426053E2C4EAA25CD3B0532A7218F05AA2DDDFF0E3BEC099A886EC339FF38F526419F4C072ED1079D4A4D199AE2B2C8F2BD6FB3AF104FCD56BB9B3D124F0473A311BCB6F5F6A0209CB6945D420221619E521BF410A02F83CA4A7F6A5E1934AC1F2F11E0BF7EDB812CDDB31D462641FC42C73C375D0E4AC692FB9E85561C6848BF407DE330B4D5DFDF7F3C53CC24A337A1933A314D90971E88A30212C5DDC9AEBD0BA9C9AED73608C97D6129F293061E7B34735976513C1A89E47009F96B38F8F78A10EA309CB5BFF4119F28650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:23:4d:0c:b9:b4:3f:0c:86:d7:44:72:a6:
                    f0:8e:96:88:75:be:06:84:04:e5:1d:ed:e2:6b:aa:
                    d7:56:a4:c4:87:4c:e1:e6:91:f9:b9:25:d4:af:11:
                    e1:96:07:8a:0b:a1:e1:e4:26:05:3e:2c:4e:aa:25:
                    cd:3b:05:32:a7:21:8f:05:aa:2d:dd:ff:0e:3b:ec:
                    09:9a:88:6e:c3:39:ff:38:f5:26:41:9f:4c:07:2e:
                    d1:07:9d:4a:4d:19:9a:e2:b2:c8:f2:bd:6f:b3:af:
                    10:4f:cd:56:bb:9b:3d:12:4f:04:73:a3:11:bc:b6:
                    f5:f6:a0:20:9c:b6:94:5d:42:02:21:61:9e:52:1b:
                    f4:10:a0:2f:83:ca:4a:7f:6a:5e:19:34:ac:1f:2f:
                    11:e0:bf:7e:db:81:2c:dd:b3:1d:46:26:41:fc:42:
                    c7:3c:37:5d:0e:4a:c6:92:fb:9e:85:56:1c:68:48:
                    bf:40:7d:e3:30:b4:d5:df:df:7f:3c:53:cc:24:a3:
                    37:a1:93:3a:31:4d:90:97:1e:88:a3:02:12:c5:dd:
                    c9:ae:bd:0b:a9:c9:ae:d7:36:08:c9:7d:61:29:f2:
                    93:06:1e:7b:34:73:59:76:51:3c:1a:89:e4:70:09:
                    f9:6b:38:f8:f7:8a:10:ea:30:9c:b5:bf:f4:11:9f:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:94:8D:F6:90:BB:E3:F5:51:2F:B9:14:3D:74:16:3E:24:E6:F8:95
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e342e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:74:8d:3e:8b:c8:72:d5:f9:d4:e9:8a:76:d2:6e:cc:6a:2a:
         2f:e3:84:9d:fa:4a:36:50:dd:1b:96:40:82:28:f6:34:33:c1:
         00:9b:a5:79:b8:18:33:33:25:1b:ea:6d:3f:16:a3:68:f0:65:
         a5:8e:8c:88:76:77:57:6c:d1:c8:74:95:3e:ef:ae:ac:f9:11:
         33:3d:de:aa:23:80:b7:87:4f:09:ff:21:d0:25:92:74:45:47:
         52:29:8c:58:ad:05:51:99:a4:bc:ad:30:12:ea:d4:8a:ba:42:
         45:2d:36:de:87:bb:c2:f0:2d:58:bf:94:58:3e:ce:4c:b2:d9:
         77:3f:42:0f:a5:0b:07:ea:55:3a:5e:84:ee:c8:8d:d8:ed:d1:
         6e:a8:4b:2d:3f:2e:2e:8e:ef:0d:c3:60:c9:94:68:87:10:90:
         1a:cc:db:f3:f2:9f:d2:5d:fd:b7:9c:64:47:d3:48:27:0f:39:
         ea:0b:51:02:ce:f9:54:a2:d2:fe:73:4b:e6:0f:b9:41:ee:de:
         b9:ce:5a:e2:15:f2:17:33:e2:78:84:7e:8f:12:79:1e:d7:e9:
         2e:87:ae:d3:78:f5:ab:ef:69:4c:b0:81:25:a8:79:09:39:ae:
         2f:7c:5f:6a:40:b2:ea:96:78:eb:f8:14:52:57:5d:b3:6b:ab:
         57:0f:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----