Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33362e302f32332d3234203d3e203535363939.roa
File:                     3130332e3133392e33362e302f32332d3234203d3e203535363939.roa (raw, json)
Hash identifier:          ToJRfcC55dKwEolwiBfpK22AM1dVkf4K3YJY7ZkEtmk=
Subject key identifier:   88:FE:AC:41:7A:9B:21:5F:BE:9A:ED:1E:14:0E:81:8C:4D:23:16:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       42503F23EF0E9E7E7BE48866C413E95A582D5207
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33362e302f32332d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:00 +0000
ROA not before:           Wed 27 Oct 2021 08:55:00 +0000
ROA not after:            Thu 27 Oct 2022 09:00:00 +0000
asID:                     55699
IP address blocks:        103.139.36.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:3f:23:ef:0e:9e:7e:7b:e4:88:66:c4:13:e9:5a:58:2d:52:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:00 2021 GMT
            Not After : Oct 27 09:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:d9:39:db:51:2a:57:7c:c5:7e:69:c3:ab:
                    21:d2:eb:2e:b5:71:be:18:cb:6f:a6:ec:30:cb:b1:
                    b9:7f:56:60:05:da:20:00:bb:a4:3a:9d:cb:57:2e:
                    0d:92:8c:82:1c:61:e0:22:aa:1b:73:3f:0a:eb:c3:
                    f7:23:4a:6b:fa:50:d5:96:18:fe:cb:64:28:fa:a0:
                    4c:58:12:67:f8:ae:dd:67:03:78:a3:44:13:f0:f1:
                    51:5f:39:76:72:e4:2c:25:9d:95:06:01:c4:2e:c4:
                    e1:5b:e7:bc:5a:68:49:3b:82:35:e8:b3:1e:df:d8:
                    90:2b:98:36:80:91:7c:2d:a5:9f:f2:28:70:93:57:
                    c0:cf:74:23:a1:0a:0d:54:46:bc:13:2f:15:db:f8:
                    b9:d0:5c:79:62:29:e6:89:b2:bb:2d:e5:21:32:8c:
                    f4:67:76:55:cf:07:fb:fd:f7:1b:88:d7:50:03:0f:
                    13:00:34:34:78:5f:a2:3c:4d:93:7b:8b:b9:a6:3c:
                    59:9f:47:ef:d8:9c:41:5f:de:bc:9b:b2:85:31:5e:
                    d3:92:bd:c7:dd:b8:bf:ce:7a:1e:47:00:0c:b9:b1:
                    4f:13:81:70:11:ec:b3:82:ff:ca:a7:3f:b6:a3:20:
                    39:c0:75:c2:d1:9e:73:64:1a:44:b7:79:a3:31:3d:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:AC:41:7A:9B:21:5F:BE:9A:ED:1E:14:0E:81:8C:4D:23:16:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33362e302f32332d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:99:dd:e8:eb:fc:f4:47:d8:ac:19:99:46:1b:e7:83:c8:
         30:d8:6a:78:7f:28:91:da:d9:4e:96:8b:09:9e:4f:6a:6c:4b:
         11:71:75:85:3a:70:90:7f:08:c1:c9:1b:1d:1a:ac:0a:17:09:
         1a:b4:e3:36:f8:96:12:4f:de:59:cc:bd:0c:3b:0c:2a:26:9a:
         ef:d1:bf:26:f4:e9:4b:a4:5c:f7:4c:c6:eb:87:79:70:4f:0d:
         99:02:4d:90:0a:28:4d:89:c4:ca:89:e9:37:ea:61:82:1c:31:
         76:cd:a3:38:1e:f6:b1:e2:02:9a:7b:b6:72:dc:79:5a:a6:45:
         c8:53:3a:58:16:3d:55:96:72:51:e6:fa:b7:45:34:f0:00:95:
         39:4a:34:e4:9b:3b:b5:09:a0:15:b2:9e:ee:06:7a:a6:4d:34:
         98:d0:0f:b4:1e:33:06:9d:eb:62:7a:30:c5:19:93:db:ec:f9:
         aa:35:bb:a5:69:5e:83:8c:22:e4:68:6e:1d:82:7c:27:20:11:
         a6:e2:d6:5e:f9:4c:33:9b:a3:16:a1:cd:b5:31:7c:19:4f:ac:
         37:10:4d:ca:33:3f:9d:45:0a:79:9a:b9:bd:df:b4:98:4f:29:
         6f:01:6a:38:7d:21:b7:91:7e:9f:95:31:c1:32:56:42:7e:4c:
         55:2d:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----