Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
File:                     3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (raw, json)
Hash identifier:          QB6YGx4lMiKhx4g2xI2iaqHRKm6qzT0cqlSYtPDUQrQ=
Subject key identifier:   B0:9A:26:FB:C7:F7:B5:0D:F6:C8:BC:BE:A0:22:6F:54:72:ED:CF:8F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3CF4D27EF81C1F3A246A67D13195EDD89AE03361
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
Signing time:             Thu 29 Jul 2021 09:03:27 +0000
ROA not before:           Thu 29 Jul 2021 08:58:27 +0000
ROA not after:            Fri 29 Jul 2022 09:03:27 +0000
asID:                     138866
IP address blocks:        103.140.130.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:d2:7e:f8:1c:1f:3a:24:6a:67:d1:31:95:ed:d8:9a:e0:33:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 29 08:58:27 2021 GMT
            Not After : Jul 29 09:03:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:64:16:15:54:7f:49:1f:69:33:a5:e8:3c:
                    b3:48:c4:38:cc:4b:92:c8:b3:95:16:e6:b7:e6:1c:
                    aa:9b:af:ce:37:2c:41:e7:03:b0:05:c0:f7:32:79:
                    69:23:d5:5e:dc:d9:68:9a:fb:39:82:49:9f:59:9a:
                    f1:57:7e:3d:03:70:8c:59:55:9c:9d:38:8a:d4:8f:
                    9e:5c:7b:4f:3c:d3:02:a7:32:b9:ca:54:bc:2f:65:
                    5b:d2:af:fe:c3:f2:9e:b3:3e:38:f0:90:34:b3:34:
                    5a:c6:d0:19:57:ed:bd:64:a5:97:1e:63:e3:50:19:
                    f9:9c:89:6f:32:aa:53:79:e1:2f:4d:76:8c:76:2d:
                    58:71:10:68:5a:d7:13:12:20:3e:e1:1d:6f:51:dc:
                    26:56:33:25:55:ce:1b:14:bd:f5:fe:a4:c1:b0:1c:
                    16:99:ff:25:ad:0c:9d:ca:67:d0:a6:93:02:0a:72:
                    56:39:6d:e9:71:cf:d6:1e:10:0c:a0:8b:11:f9:dd:
                    7a:c9:38:af:b4:5e:d1:31:f5:78:56:db:3b:f6:e0:
                    71:6d:52:71:f0:c6:36:81:bd:1a:33:19:fc:4b:1f:
                    f4:6f:f7:3e:ba:60:9d:4d:82:57:1a:a9:17:a0:41:
                    d2:bd:f5:75:15:73:ab:a5:bc:7d:f6:2e:94:0c:f5:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:26:FB:C7:F7:B5:0D:F6:C8:BC:BE:A0:22:6F:54:72:ED:CF:8F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:12:50:a9:09:9e:14:7b:e9:79:98:37:f2:7f:aa:2c:a5:
         22:55:86:04:b1:37:ee:7a:02:ee:86:7f:d3:d0:46:d9:cb:9e:
         e2:72:18:d0:62:12:5e:53:ce:72:e2:71:c0:9d:bd:a7:5e:df:
         57:51:94:b8:86:f4:33:5e:82:75:53:7d:39:54:b6:37:7e:11:
         c4:2f:f8:96:14:3f:f0:df:45:ff:95:89:77:05:6d:81:a5:cb:
         72:0a:b6:56:36:27:27:38:9a:bb:32:68:ee:85:51:55:d0:02:
         7a:30:50:0f:67:4a:61:9f:51:45:5e:0a:2a:5c:1f:3d:d7:88:
         c6:8f:37:b8:6e:03:88:b5:49:b7:e5:cc:b8:49:c5:e6:86:d1:
         ff:21:5b:f8:7d:3a:0a:a5:be:54:73:b3:4a:ad:79:6a:5c:a9:
         14:b5:87:39:cc:ce:16:04:94:4b:d0:3b:23:f9:8a:b1:bb:3f:
         e4:43:a6:51:c1:7d:38:1c:05:6d:bb:ab:76:7c:65:55:0d:22:
         cb:b1:1d:02:0b:c1:6b:87:71:c2:85:ae:7c:78:13:95:35:df:
         b7:78:18:75:93:d6:b2:4a:54:15:1d:88:db:a8:16:88:da:46:
         42:24:87:45:1f:7d:85:16:97:a3:25:3d:ff:2b:8c:ba:e9:3b:
         53:8a:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----