Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35372e302f3234203d3e20313331313131.roa
File:                     3130332e3133362e35372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          o6mHzheCcFRItKrmiVzFT3Okx/NB6qwzoMI7GI6wgtE=
Subject key identifier:   B5:B1:23:64:4A:ED:A4:07:A8:F5:91:48:FE:DD:AA:F4:B8:89:6F:1A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1125A65A5473EA719BB9C67DDC38FDC0E6CFB040
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35372e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:04 +0000
ROA not before:           Tue 29 Jun 2021 10:55:04 +0000
ROA not after:            Wed 29 Jun 2022 11:00:04 +0000
asID:                     131111
IP address blocks:        103.136.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:25:a6:5a:54:73:ea:71:9b:b9:c6:7d:dc:38:fd:c0:e6:cf:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:04 2021 GMT
            Not After : Jun 29 11:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:e1:da:a4:b4:e4:4c:1f:66:64:1c:98:d6:
                    fe:4e:f7:90:fb:f1:0c:e4:5b:32:a8:1c:56:53:da:
                    52:ce:49:43:63:03:3a:9c:5b:55:55:8b:25:ab:71:
                    aa:bd:3e:00:7d:73:d9:7a:5e:d5:3a:0d:c9:2a:61:
                    13:9e:20:76:b0:af:8d:c9:c3:69:6b:81:cb:b3:bf:
                    8c:50:71:86:c6:ca:38:30:92:fa:f0:21:a5:41:00:
                    af:cc:9c:45:91:c8:3a:7f:56:92:22:0d:49:04:61:
                    3e:70:c0:1c:4d:02:b8:43:57:a3:b9:5c:0c:51:38:
                    fc:96:0e:5f:9e:80:4f:9f:29:a4:ee:89:aa:05:8d:
                    6e:27:a6:15:e4:71:49:9a:7e:eb:45:ee:c3:44:8f:
                    e1:7c:0c:7e:03:d3:b5:4f:99:11:e7:97:ff:4e:4a:
                    17:11:5e:eb:46:ab:62:f4:9d:2e:b9:1c:50:8a:e8:
                    ff:6b:97:f7:5f:9b:af:c5:f9:2e:08:c9:bc:08:d3:
                    ac:87:1a:2b:30:8a:3b:58:58:90:6c:8e:b4:6a:42:
                    4e:91:0a:cd:cc:d5:5a:2d:32:77:73:b9:09:36:0f:
                    67:cc:57:65:cc:3e:df:53:63:83:31:c8:b0:30:62:
                    61:ef:28:d4:f5:2f:2d:fe:11:8b:22:41:68:2e:c9:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:23:64:4A:ED:A4:07:A8:F5:91:48:FE:DD:AA:F4:B8:89:6F:1A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:10:6b:cc:cd:a1:6e:4d:9b:8e:0e:e4:e3:dc:c7:a4:7f:e9:
         99:78:b7:67:50:d0:83:65:3a:7e:49:42:e4:67:36:be:f3:21:
         cc:7d:30:b2:2f:ef:db:65:ea:97:98:e3:e5:77:23:5c:bd:ca:
         7d:99:b1:32:db:78:92:f1:0c:de:90:75:67:ed:f4:35:bb:8e:
         47:53:7a:b2:78:88:69:9a:dc:84:32:c2:55:a2:9d:2d:0e:ff:
         38:41:0a:17:9d:82:75:64:09:c1:c1:3e:4c:4a:bd:b4:88:c9:
         f5:a9:9c:f2:9b:3a:c2:1c:f3:10:b7:60:37:2a:06:b2:1d:3b:
         e8:d0:e0:05:91:92:32:40:20:3d:d5:5b:27:57:c5:db:71:c4:
         54:01:a3:d6:91:fb:69:74:b8:c7:25:93:34:11:a6:0e:cf:0e:
         f9:42:78:a4:bf:2e:4b:bc:c1:47:b3:47:7e:b7:d4:72:85:59:
         57:4e:b8:3f:53:50:b4:05:0d:6f:7b:3d:3e:67:cb:a7:b1:dc:
         20:49:21:da:79:1e:1b:29:48:6f:dc:50:23:26:64:4f:2e:5f:
         31:b7:b8:a6:3c:fe:2e:92:18:ed:83:c3:bf:b7:02:3e:86:93:
         f3:9a:26:3f:e6:8d:b6:08:a4:ce:11:e6:e4:90:a8:53:c4:20:
         7a:b5:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----