Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa
File:                     3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          HxQlzkqSawXJf+cfZugsO3jn85vAphLoj856EBHOXoM=
Subject key identifier:   9C:B3:D2:05:4C:99:BD:D4:FD:63:1E:4A:ED:C9:43:80:E3:53:50:E0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       184C8A3F010B532B021614BD8F538EBBB143F1EF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa
Signing time:             Wed 14 Apr 2021 02:58:02 +0000
ROA not before:           Wed 14 Apr 2021 02:53:02 +0000
ROA not after:            Thu 14 Apr 2022 02:58:02 +0000
asID:                     139369
IP address blocks:        103.142.60.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4c:8a:3f:01:0b:53:2b:02:16:14:bd:8f:53:8e:bb:b1:43:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 14 02:53:02 2021 GMT
            Not After : Apr 14 02:58:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:c4:da:7e:ed:00:31:3f:95:36:55:aa:e5:
                    1d:67:38:68:3d:ba:7c:ac:6a:69:ba:94:b3:e3:21:
                    23:db:a2:17:95:65:5f:95:8a:6a:03:ea:c4:bc:39:
                    f7:3f:e7:eb:0e:21:95:95:17:15:0a:84:2a:ff:b2:
                    cf:59:67:03:ce:34:2f:b7:ef:ea:c4:c3:da:72:ce:
                    43:d9:c2:88:ab:cf:9f:68:15:69:20:2a:3e:90:b2:
                    40:d6:3d:2c:c3:fc:20:0f:04:d2:2d:6e:9f:7f:cd:
                    3e:36:c6:37:cd:2b:de:76:eb:a8:2c:f7:29:30:79:
                    a1:f3:3c:73:e7:1c:19:81:88:26:08:9a:30:0b:31:
                    82:5a:0c:e9:32:37:88:92:fb:2c:92:66:0b:c0:0a:
                    70:07:8c:22:00:db:81:78:ab:4e:7e:b3:d9:19:2a:
                    7e:1a:d7:aa:36:08:3d:f8:b8:b0:6f:2b:c9:40:11:
                    14:cc:44:15:1b:66:7b:13:ba:c3:cb:02:60:84:15:
                    20:65:a0:09:7a:56:a4:fa:9b:35:bf:0c:89:e6:7e:
                    f5:1e:06:8c:f3:6b:6a:5f:b7:26:f0:87:11:41:51:
                    fe:6c:d9:b8:ab:cb:55:06:6e:01:78:0c:80:a5:00:
                    02:a3:64:a8:2d:f8:ce:5c:e2:31:c6:16:78:d1:e5:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:D2:05:4C:99:BD:D4:FD:63:1E:4A:ED:C9:43:80:E3:53:50:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:7a:77:be:33:b0:5a:56:a7:b9:9e:24:b2:c0:5f:59:56:
         e7:bf:ae:28:be:b8:e9:b0:bc:2c:92:33:7d:74:21:0a:6a:36:
         15:32:2f:16:86:33:4f:2a:41:d3:a1:d7:61:df:3c:e2:9b:58:
         1a:82:a1:c9:f3:28:a0:51:45:44:cd:bf:81:93:e9:0a:28:d2:
         72:ef:08:e7:61:5f:80:d3:3d:2d:6d:e1:70:93:01:40:68:5a:
         77:ab:fe:ca:ec:80:bc:72:05:8e:4c:3c:ca:3f:4f:fb:86:08:
         71:ca:f2:30:bb:79:7c:a0:54:15:50:9a:31:14:05:b4:10:c1:
         35:04:02:22:32:10:60:ec:cf:71:27:42:e0:85:13:86:15:0d:
         14:0c:ef:19:63:8e:48:09:8f:2d:71:12:07:b1:35:0a:a4:65:
         f8:6b:aa:6d:06:24:75:d7:46:74:34:ce:4d:69:0d:38:cc:b4:
         d8:2a:63:8d:a8:09:64:70:c1:9e:dc:94:42:ec:7f:23:08:44:
         50:cf:12:e7:7e:5c:6c:db:99:1c:76:25:1d:a1:30:72:15:6f:
         18:e1:ce:59:b3:a5:6b:2b:3c:08:2f:8f:39:5e:d0:c9:a6:35:
         80:1f:b4:ad:11:70:d0:1d:99:d7:f5:a0:7d:01:47:63:d2:5f:
         d7:5d:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----