Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e35322e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132372e35322e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          mj2Z9qgo5p3JWxIe+CNZkzIgiIRuDsJWInq+SD+IVSM=
Subject key identifier:   DC:04:A2:DA:B8:50:4E:01:F8:DD:2F:9E:6B:46:FC:EF:3E:03:26:30
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6CBB3B15D5B49B37A6715862461F6902EC4B5D17
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e35322e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:12 +0000
ROA not before:           Tue 27 Apr 2021 15:41:12 +0000
ROA not after:            Wed 27 Apr 2022 15:46:12 +0000
asID:                     17995
IP address blocks:        103.127.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bb:3b:15:d5:b4:9b:37:a6:71:58:62:46:1f:69:02:ec:4b:5d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:12 2021 GMT
            Not After : Apr 27 15:46:12 2022 GMT
        Subject: CN=3082010A0282010100CABC83E03C5655AABCD5146B6360485D7ADB9668CF64E0000F53298DACA11B282847A4162E07B87A000A15649D2CFE6297A76447C803ADD40B4ABF6BBC631FCB6A28916A021B2C08AE9888937510E68C975FE84A743CE8FEC0BDE1384AB2855E2FE8871E5C66258168E5833EEC11DC06B3585ADC3054568C04B4F050AB8B27B28A8BA2EC1EA976D54CA4482C9BEBAE010B451E0CA6DA2642984C603203EAF7B1E303A6342D72F7F130868473C4279E138AA0186B5F002F098715C87CB093E3535D3C3BA40ABB68CF10D7E907CB50B92199497D4D4FB21CB298BACD5B414C097CD16A0750A4DB317AB51D23836DCB8A3B94BF71FF9C9B12A34A01A211AE45AF350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:83:e0:3c:56:55:aa:bc:d5:14:6b:63:60:
                    48:5d:7a:db:96:68:cf:64:e0:00:0f:53:29:8d:ac:
                    a1:1b:28:28:47:a4:16:2e:07:b8:7a:00:0a:15:64:
                    9d:2c:fe:62:97:a7:64:47:c8:03:ad:d4:0b:4a:bf:
                    6b:bc:63:1f:cb:6a:28:91:6a:02:1b:2c:08:ae:98:
                    88:93:75:10:e6:8c:97:5f:e8:4a:74:3c:e8:fe:c0:
                    bd:e1:38:4a:b2:85:5e:2f:e8:87:1e:5c:66:25:81:
                    68:e5:83:3e:ec:11:dc:06:b3:58:5a:dc:30:54:56:
                    8c:04:b4:f0:50:ab:8b:27:b2:8a:8b:a2:ec:1e:a9:
                    76:d5:4c:a4:48:2c:9b:eb:ae:01:0b:45:1e:0c:a6:
                    da:26:42:98:4c:60:32:03:ea:f7:b1:e3:03:a6:34:
                    2d:72:f7:f1:30:86:84:73:c4:27:9e:13:8a:a0:18:
                    6b:5f:00:2f:09:87:15:c8:7c:b0:93:e3:53:5d:3c:
                    3b:a4:0a:bb:68:cf:10:d7:e9:07:cb:50:b9:21:99:
                    49:7d:4d:4f:b2:1c:b2:98:ba:cd:5b:41:4c:09:7c:
                    d1:6a:07:50:a4:db:31:7a:b5:1d:23:83:6d:cb:8a:
                    3b:94:bf:71:ff:9c:9b:12:a3:4a:01:a2:11:ae:45:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:A2:DA:B8:50:4E:01:F8:DD:2F:9E:6B:46:FC:EF:3E:03:26:30
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e35322e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:1b:56:ed:0d:e9:3e:d0:67:8d:ca:7a:42:9f:cc:27:a5:
         af:2f:d0:ea:71:e3:89:e4:2b:3b:14:3f:9a:c1:dd:60:3d:99:
         41:d4:2a:33:84:0b:91:e9:64:4a:b4:b4:5e:07:a9:c0:1d:fa:
         0c:5f:d2:5f:34:46:c5:fe:45:57:91:47:e0:ca:0b:e8:d2:76:
         e9:4e:1d:1e:e7:7b:56:fe:62:e9:63:5d:c4:f6:e7:91:8d:20:
         96:87:9f:e4:da:71:83:3d:2f:ea:6f:53:2e:76:94:8c:53:d5:
         46:3d:4a:9f:ab:69:8c:65:34:20:38:bd:38:c6:dd:c9:b4:16:
         8a:88:b4:78:42:7e:ec:8d:a6:9a:0c:3f:2b:e8:81:b9:ff:ba:
         a8:de:38:ff:b1:34:67:70:fa:84:c8:21:6b:1a:f4:f4:dd:f6:
         ac:ae:e9:56:22:c9:29:29:7e:8f:b8:9e:0b:8c:c9:ac:10:b1:
         99:5d:50:2b:3d:fd:7e:f3:e3:d5:93:e8:d0:d1:e8:97:c8:36:
         f1:69:2f:bb:85:a4:13:9a:db:a1:4d:56:7d:d9:04:cc:e2:6c:
         72:7e:2b:93:ae:20:af:d5:6e:bc:2f:8c:10:c5:ee:0e:42:d8:
         12:81:59:93:9f:68:e6:05:8a:ca:e6:66:e7:5e:76:92:99:6d:
         f1:73:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----