Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa
File:                     3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (raw, json)
Hash identifier:          rLHPOXIFXfpXohKYKgZde121WzE3jn5YuRGMnoYgjvk=
Subject key identifier:   31:93:EF:14:9F:C1:06:E9:1E:C6:0E:FB:42:E8:23:98:B5:C1:6B:1E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D4CDDE285E10DEF57E7F6698911A28C7CA4D0DC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa
Signing time:             Tue 11 May 2021 05:47:11 +0000
ROA not before:           Tue 11 May 2021 05:42:11 +0000
ROA not after:            Wed 11 May 2022 05:47:11 +0000
asID:                     138835
IP address blocks:        103.138.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4c:dd:e2:85:e1:0d:ef:57:e7:f6:69:89:11:a2:8c:7c:a4:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 11 05:42:11 2021 GMT
            Not After : May 11 05:47:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:27:1c:ab:69:7e:d1:dd:c5:a7:6c:10:3f:
                    26:c1:7b:39:4b:33:a2:94:8c:be:61:12:76:4c:97:
                    cc:64:ff:15:31:4e:5f:4c:71:d0:63:c3:49:e3:a6:
                    1b:ee:19:e0:b1:db:12:47:ae:54:dc:77:ce:67:32:
                    51:83:c8:54:62:a1:f7:d1:05:6f:1f:a2:da:ff:02:
                    a3:a1:00:31:39:37:18:f0:bb:58:d7:36:50:20:e3:
                    b8:78:7b:0a:96:8a:91:28:5b:c5:0d:85:ef:fb:89:
                    ea:e3:a2:5a:2a:c2:1d:dc:fc:53:8c:d8:ba:34:90:
                    b3:c3:68:aa:88:1f:4e:eb:24:17:63:9c:89:80:5b:
                    5a:a9:4c:98:b0:26:65:38:d7:3b:54:a5:17:52:38:
                    94:67:65:e7:8a:e3:14:d2:d4:d3:21:6c:a6:70:90:
                    da:a2:25:99:a9:65:3b:9a:ff:46:5c:99:9f:d8:5f:
                    12:0c:ad:29:c0:1a:b6:25:ba:fd:60:4a:e3:21:ae:
                    ac:5a:33:50:4a:a1:b4:6c:aa:ac:2b:e2:ea:1c:6e:
                    47:2f:ab:89:3a:9c:41:65:25:4d:11:1e:16:a4:94:
                    20:3a:e9:8f:d2:63:88:67:05:7d:ac:40:76:38:8e:
                    62:b7:f4:d2:fb:bd:25:f3:ba:a4:52:3f:6b:d0:bb:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:EF:14:9F:C1:06:E9:1E:C6:0E:FB:42:E8:23:98:B5:C1:6B:1E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:89:3c:65:b2:89:17:62:ac:c8:3e:2b:35:39:b2:fe:77:df:
         f2:f2:fb:c1:16:22:ea:25:d2:d8:95:13:c7:3e:ab:8f:1e:61:
         b7:48:9e:d8:7c:f9:85:f1:34:3f:1c:be:6e:14:42:6f:5b:e2:
         b7:dc:27:1d:4a:ab:d4:f8:7e:76:7e:c0:ee:a5:fb:b2:e0:ae:
         2b:82:8c:91:0a:69:23:66:83:99:9c:ad:d6:fa:d7:c9:58:f0:
         5b:4f:da:65:fb:e5:2b:f1:58:2b:c2:4d:c7:7c:6f:db:fd:a3:
         87:af:64:d2:ab:e6:20:55:d6:04:17:4f:d8:d8:93:55:f4:be:
         c4:cd:8e:86:72:8b:03:42:67:0d:7d:85:d9:35:d7:59:20:84:
         cb:ea:e4:9f:08:cf:e9:79:60:31:f5:4d:d7:5f:04:55:92:3b:
         b2:f2:a8:ad:b7:e2:be:f9:c3:7c:fc:cd:c3:77:78:bf:68:a5:
         b7:74:ed:6c:3e:10:71:96:a6:aa:8b:f7:95:12:6a:d5:12:4e:
         37:e6:54:5d:b5:e9:1a:c9:a8:42:aa:45:48:c5:a6:e9:52:f1:
         d0:3c:ed:51:14:dd:44:64:b5:ec:63:bf:2f:59:ec:3b:8f:14:
         80:ed:5c:8d:31:e7:e9:b8:1c:62:99:95:a7:72:d7:9f:96:f3:
         38:43:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----