Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35362e302f3234203d3e20313331313131.roa
File:                     3130332e3133362e35362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          snxSQ8qeJBo4PXI7NsCNXHhlC3tHnwYrCzqf+Oad23Y=
Subject key identifier:   93:A3:87:F4:12:95:7D:EB:AB:CF:88:9F:CE:55:C1:04:EA:EF:CF:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19B577FB3A07D6F29C4FCC7A7B1F0570A1E61394
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35362e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.136.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b5:77:fb:3a:07:d6:f2:9c:4f:cc:7a:7b:1f:05:70:a1:e6:13:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject: CN=3082010A0282010100B938D00C88B8F6ABB3AEFFFB2238F1A4264D021C31520DC4169067723C509DED3855CEB949DE9D93C1ED7C119827C1D6FDAFB8844300B986667474C02377C05FFD2C3E764218BFF0E635C0D1F854FB3BAC7867C50530EFC060119B74AB40B5D032078275DC135C692044D5534EC6E8AC150B84873F6190B800FF242CB4F99E0DDD0ADB918D687901A8B2D5CA39C0F0CE711D0D760CE3D02D87DE4AB523696A9110644BAE4EC71158E5302470F64CAFA421ABC25AB6403163ED519310E1D237E45B95190EE5D2D8787C7D138FC76B695CDC0449EF230C811711A7C1BCD3D43912B08BCF06A19F85AD442285C44A61AAE8DEB1D9008B01573F28BA19E2F2C860C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:d0:0c:88:b8:f6:ab:b3:ae:ff:fb:22:38:
                    f1:a4:26:4d:02:1c:31:52:0d:c4:16:90:67:72:3c:
                    50:9d:ed:38:55:ce:b9:49:de:9d:93:c1:ed:7c:11:
                    98:27:c1:d6:fd:af:b8:84:43:00:b9:86:66:74:74:
                    c0:23:77:c0:5f:fd:2c:3e:76:42:18:bf:f0:e6:35:
                    c0:d1:f8:54:fb:3b:ac:78:67:c5:05:30:ef:c0:60:
                    11:9b:74:ab:40:b5:d0:32:07:82:75:dc:13:5c:69:
                    20:44:d5:53:4e:c6:e8:ac:15:0b:84:87:3f:61:90:
                    b8:00:ff:24:2c:b4:f9:9e:0d:dd:0a:db:91:8d:68:
                    79:01:a8:b2:d5:ca:39:c0:f0:ce:71:1d:0d:76:0c:
                    e3:d0:2d:87:de:4a:b5:23:69:6a:91:10:64:4b:ae:
                    4e:c7:11:58:e5:30:24:70:f6:4c:af:a4:21:ab:c2:
                    5a:b6:40:31:63:ed:51:93:10:e1:d2:37:e4:5b:95:
                    19:0e:e5:d2:d8:78:7c:7d:13:8f:c7:6b:69:5c:dc:
                    04:49:ef:23:0c:81:17:11:a7:c1:bc:d3:d4:39:12:
                    b0:8b:cf:06:a1:9f:85:ad:44:22:85:c4:4a:61:aa:
                    e8:de:b1:d9:00:8b:01:57:3f:28:ba:19:e2:f2:c8:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:87:F4:12:95:7D:EB:AB:CF:88:9F:CE:55:C1:04:EA:EF:CF:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:d5:08:a2:60:c5:e2:e8:6a:62:d1:57:be:3e:2c:e5:43:
         12:76:0a:67:86:96:f1:63:68:6f:e7:fc:a5:a3:e1:4f:67:09:
         a8:7c:38:26:a5:f0:b6:68:8f:2b:c2:7e:36:56:86:46:1d:f6:
         b3:34:40:81:18:42:67:13:9b:69:6a:31:5e:0d:ef:00:38:44:
         b6:24:7e:2f:a6:06:b4:0a:e8:0d:42:ce:d9:57:f0:f0:2b:2d:
         54:37:14:7e:83:e3:19:3e:56:5a:c0:36:de:9d:55:54:bb:03:
         9b:c4:64:fe:6a:6b:91:47:73:77:74:28:a0:fe:65:db:f1:da:
         0a:78:a3:ad:6c:cd:e8:2c:04:7f:bd:31:2a:f6:39:d3:55:0f:
         e9:be:55:9a:75:c0:3c:88:91:4e:2e:a2:7c:80:f5:79:ae:53:
         1a:ea:71:75:9b:51:18:40:47:8b:f8:dc:b3:90:2c:94:1c:e1:
         53:3d:9a:85:97:ad:9c:f3:e0:01:0d:23:09:33:a1:3c:61:2e:
         b0:34:93:fd:83:da:4f:21:58:70:15:a3:20:e8:96:d2:88:35:
         cf:db:c4:6b:f6:55:2b:28:e4:15:ca:0f:36:12:27:33:79:27:
         17:81:ac:65:6d:5e:83:7d:10:03:61:a0:cd:4d:35:27:06:a3:
         71:1d:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----