Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231342e302f3234203d3e20313331313131.roa
File:                     3130332e3133352e3231342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          mVXDkhDci8Kz3/4DL6kkRgZb8X/M0yWFiEqro8FmjGo=
Subject key identifier:   DE:13:85:EB:47:FB:FF:3E:1D:D4:6D:45:92:DE:87:0E:B3:EE:AE:E7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23EA3E75C213DACC060CAC81969A5587A4EE7522
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231342e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:05 +0000
ROA not before:           Tue 29 Jun 2021 10:55:05 +0000
ROA not after:            Wed 29 Jun 2022 11:00:05 +0000
asID:                     131111
IP address blocks:        103.135.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ea:3e:75:c2:13:da:cc:06:0c:ac:81:96:9a:55:87:a4:ee:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:05 2021 GMT
            Not After : Jun 29 11:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:c8:a8:a1:b2:36:06:31:52:f1:4e:3c:c3:
                    59:25:b0:ca:02:9b:e0:16:5e:65:62:9d:95:f5:83:
                    35:be:65:3b:eb:5f:91:38:9f:da:f6:f1:ed:3f:42:
                    7e:a6:aa:87:88:cc:01:a3:b5:27:1a:01:33:c6:6f:
                    d7:86:a8:d8:36:8d:e8:d1:1a:2b:bf:19:76:93:4b:
                    ec:02:00:f8:e2:2a:8d:86:ee:11:10:d9:b2:46:c6:
                    6d:34:84:0d:bb:4b:27:6a:fe:32:ed:13:29:cb:a6:
                    fc:73:72:33:19:95:be:57:b3:aa:60:e8:6c:cf:0a:
                    b2:f4:30:1e:36:90:ce:78:1b:bd:8f:4e:62:9e:3e:
                    2a:0b:0c:d2:81:3d:78:b6:24:8b:cb:12:63:0b:58:
                    73:01:ff:92:0b:83:ff:ea:4c:b2:0b:9a:02:df:21:
                    cb:94:bd:13:ed:ff:e2:2a:80:9f:19:b7:d8:a5:b0:
                    ea:4c:fc:e8:8f:29:f8:db:09:75:93:23:90:b3:7d:
                    42:bf:f3:57:7d:9e:e7:41:a3:a7:1b:f4:3a:cd:a0:
                    24:37:32:12:45:7e:34:f3:18:a2:ed:04:02:b0:92:
                    60:e3:bd:5c:7e:89:0a:38:0f:27:17:71:40:1a:2f:
                    45:83:fa:1c:aa:27:93:bf:00:bb:fb:64:f6:75:12:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:85:EB:47:FB:FF:3E:1D:D4:6D:45:92:DE:87:0E:B3:EE:AE:E7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231342e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:37:08:7c:6d:56:e3:c6:d5:0e:06:9e:10:49:f2:18:ff:ea:
         ae:5d:4b:a3:e5:4a:7c:0d:4b:d5:67:42:89:40:f3:8d:df:52:
         06:53:62:3b:f8:b4:d1:d6:ac:a2:b6:a2:c9:26:00:f5:15:8e:
         da:ab:19:7f:b0:e1:66:42:90:db:df:ee:02:74:71:30:f8:c0:
         32:27:e7:09:e4:c5:47:fd:18:f2:98:f1:82:81:cf:90:3c:9f:
         94:80:11:78:62:e5:b9:3f:9a:83:0b:c0:ce:39:8d:1c:28:5d:
         3d:78:d6:cf:cb:5f:33:82:07:43:ab:82:db:76:ba:f2:1f:00:
         a4:87:60:87:e0:ad:b9:95:46:ff:e5:c1:02:cb:7d:20:34:37:
         ab:51:b6:20:eb:31:49:9c:14:73:2e:1d:96:66:26:1f:dd:9f:
         c6:b4:dd:86:14:3d:b5:2a:8d:12:4e:d3:77:51:66:27:26:e6:
         92:af:81:76:56:c3:f0:e6:91:d3:b2:2e:00:54:3b:2f:79:92:
         b3:ea:36:52:15:bc:7a:ee:a5:f1:d0:0e:bc:eb:9d:36:6b:b1:
         06:24:36:96:21:0a:44:b0:4a:61:b4:58:99:9c:40:e1:e6:c3:
         65:be:d1:80:9c:8e:01:b6:5b:26:c2:05:a5:36:fa:af:09:d2:
         d9:b7:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----