Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232322e302f3234203d3e20313331313131.roa
File:                     3130332e3133352e3232322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          PQBIFI1CdrhaE8L52UEjO9KKlG7g1FP4YIdsZTmW16U=
Subject key identifier:   DD:94:1D:26:65:A3:E7:64:7D:3A:F2:4C:4E:9D:69:6B:23:C5:E6:34
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       59E92CED1495A4721F1B5D8D475E2C26FAA919E3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232322e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:04 +0000
ROA not before:           Tue 29 Jun 2021 10:55:04 +0000
ROA not after:            Wed 29 Jun 2022 11:00:04 +0000
asID:                     131111
IP address blocks:        103.135.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e9:2c:ed:14:95:a4:72:1f:1b:5d:8d:47:5e:2c:26:fa:a9:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:04 2021 GMT
            Not After : Jun 29 11:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:7c:83:21:13:78:23:ee:f8:df:ea:b4:d3:
                    fd:f5:4b:ac:58:4d:7c:2e:f6:eb:05:67:50:97:42:
                    85:7a:76:5c:76:97:df:db:3f:c5:91:5b:0a:50:be:
                    2d:d1:eb:16:2f:75:f5:a4:8a:56:1c:1e:9e:6b:73:
                    d1:2f:a1:89:df:43:cb:a9:07:46:71:36:e1:b6:df:
                    b7:eb:8e:63:5a:d0:ba:ab:cf:47:6a:22:c0:6b:21:
                    81:c9:e0:57:57:19:30:99:23:e2:a0:9f:30:33:95:
                    d2:e3:6a:48:ad:d5:b0:c9:02:57:02:fb:00:09:f0:
                    d0:ff:a1:77:83:dc:db:34:c2:bd:d8:75:f4:4f:21:
                    24:40:d8:3f:90:44:86:21:d3:a6:3b:fb:75:4c:68:
                    9a:cd:fd:1d:9f:e7:33:d4:b0:3d:f8:79:1f:32:c9:
                    df:cc:7b:73:f9:61:d2:bb:5f:90:1a:a9:03:cb:06:
                    f2:07:07:c3:4b:38:43:0c:d4:17:b1:6e:62:e8:8b:
                    70:4a:ad:a3:31:e9:67:cb:9e:81:2f:38:f4:fc:7a:
                    97:f2:3c:28:2e:f8:af:f9:df:1d:af:73:af:28:7f:
                    79:99:c5:e8:25:b7:0e:7e:e9:b1:42:ad:9d:25:e5:
                    27:77:e0:21:5d:0a:34:9a:91:53:e6:97:2e:2b:08:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:1D:26:65:A3:E7:64:7D:3A:F2:4C:4E:9D:69:6B:23:C5:E6:34
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:47:97:22:9a:5c:0c:56:c3:d9:b1:6a:f8:0b:c3:3d:c8:
         a9:0c:67:c9:db:fe:bd:13:59:0c:a3:61:7f:ca:ad:2e:2f:1f:
         2b:a2:5e:af:50:bb:6b:0e:2a:69:09:56:b0:ed:aa:58:71:ca:
         04:a6:7b:d0:ad:17:e1:fa:25:a5:ad:08:da:88:48:11:79:5d:
         1c:db:40:f2:08:62:bb:49:d2:d2:72:6b:f9:70:8a:b7:e9:1f:
         0c:78:55:05:39:8e:34:a2:b3:9a:b9:09:25:35:35:ae:d5:cd:
         18:43:dd:1c:fb:7a:3d:f0:aa:4a:51:f2:89:e1:ff:0b:e3:5b:
         fe:ba:6c:82:e0:c5:20:a3:41:77:5c:2b:e2:dc:f8:7f:eb:98:
         77:b8:75:22:a5:d2:cd:68:49:b1:7d:06:b0:4b:d0:23:b8:5b:
         39:23:b7:76:4a:7f:35:2e:cc:54:2c:81:6c:39:40:36:07:6e:
         3b:68:ae:ca:12:25:17:0a:10:53:74:96:61:18:0d:8f:13:f3:
         9c:ac:4c:52:86:f7:3e:21:f0:9c:8c:70:dd:ac:82:ac:07:2c:
         5b:9c:19:7c:71:c9:5e:b5:bb:3b:23:dd:2b:f1:f8:cd:c4:1a:
         8e:5f:9e:18:8c:49:bd:8a:59:48:fb:6f:3b:90:dd:41:14:77:
         70:ee:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----