Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139362e302f32332d3234203d3e20313339343039.roa
File:                     3130332e3134332e3139362e302f32332d3234203d3e20313339343039.roa (raw, json)
Hash identifier:          eda+JM3/R4KJCEG5Ej0JI/s/rQG3KAWQmbg6A2K5lj0=
Subject key identifier:   9F:2A:5B:8E:56:36:67:F7:FA:2C:81:0E:AA:C6:EA:94:9E:2D:FE:4D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       77E53C74D7C60DB6AD948BAA659732B8DD880D37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139362e302f32332d3234203d3e20313339343039.roa
Signing time:             Mon 26 Jul 2021 03:46:29 +0000
ROA not before:           Mon 26 Jul 2021 03:41:29 +0000
ROA not after:            Tue 26 Jul 2022 03:46:29 +0000
asID:                     139409
IP address blocks:        103.143.196.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:3c:74:d7:c6:0d:b6:ad:94:8b:aa:65:97:32:b8:dd:88:0d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 26 03:41:29 2021 GMT
            Not After : Jul 26 03:46:29 2022 GMT
        Subject: CN=3082010A0282010100D2D22C6FBB7C515BA7FCCE696CF607874F80BA0ABF93F8B8C6DDCAB2D6E47322E269F7ABB0F1E32C4B0B9D4D25E7697EE8125EC05342074321F4E45503324ED0DC0D103E1E757A508429A845E06B17DC4EC1FE3013722723909F1BBD872E143B7F67153E80272A9B6E1A980FFFB596884BB3D39A5638DF2E67C2D110706527AD535C2BF930A2CCFD5CB9879E9EE9D9B85E9B16280E09FBF64DEFB64AD6C4B37FC15F6F068AB05974BDBF253998188E8373B1E1073FE68AC5C8A52FEDF3FE7595A041055617B094904037EA1D278A9F8CA37DADA0D7976AC5E16C204F43D804AA7714882A237AC9300F6A57AE48196973349858E761411AAC3AEBF6A9BF4F69410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:2c:6f:bb:7c:51:5b:a7:fc:ce:69:6c:f6:
                    07:87:4f:80:ba:0a:bf:93:f8:b8:c6:dd:ca:b2:d6:
                    e4:73:22:e2:69:f7:ab:b0:f1:e3:2c:4b:0b:9d:4d:
                    25:e7:69:7e:e8:12:5e:c0:53:42:07:43:21:f4:e4:
                    55:03:32:4e:d0:dc:0d:10:3e:1e:75:7a:50:84:29:
                    a8:45:e0:6b:17:dc:4e:c1:fe:30:13:72:27:23:90:
                    9f:1b:bd:87:2e:14:3b:7f:67:15:3e:80:27:2a:9b:
                    6e:1a:98:0f:ff:b5:96:88:4b:b3:d3:9a:56:38:df:
                    2e:67:c2:d1:10:70:65:27:ad:53:5c:2b:f9:30:a2:
                    cc:fd:5c:b9:87:9e:9e:e9:d9:b8:5e:9b:16:28:0e:
                    09:fb:f6:4d:ef:b6:4a:d6:c4:b3:7f:c1:5f:6f:06:
                    8a:b0:59:74:bd:bf:25:39:98:18:8e:83:73:b1:e1:
                    07:3f:e6:8a:c5:c8:a5:2f:ed:f3:fe:75:95:a0:41:
                    05:56:17:b0:94:90:40:37:ea:1d:27:8a:9f:8c:a3:
                    7d:ad:a0:d7:97:6a:c5:e1:6c:20:4f:43:d8:04:aa:
                    77:14:88:2a:23:7a:c9:30:0f:6a:57:ae:48:19:69:
                    73:34:98:58:e7:61:41:1a:ac:3a:eb:f6:a9:bf:4f:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2A:5B:8E:56:36:67:F7:FA:2C:81:0E:AA:C6:EA:94:9E:2D:FE:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e3139362e302f32332d3234203d3e20313339343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:1d:19:6f:29:0c:45:ce:70:07:d1:85:f0:16:7b:9b:e3:
         17:cf:23:1f:a1:dc:18:fb:2e:e1:88:88:c9:0c:76:46:f6:ac:
         8e:61:fb:bf:df:f8:3e:56:d7:17:93:54:2f:91:59:bb:bc:3e:
         25:4d:16:20:d2:6e:9e:37:4d:61:44:f1:b0:f3:1e:62:0f:35:
         81:cf:5d:e8:33:0a:15:ab:40:6e:12:e5:61:9a:b0:a6:3d:69:
         71:6f:8f:de:13:13:69:44:6e:db:a2:43:a8:9b:a1:70:bc:b9:
         92:9c:0f:99:33:a3:66:45:f8:94:84:7f:c8:52:db:e2:c7:43:
         0c:32:b7:99:58:62:94:c3:0c:b4:1c:f8:45:2d:fe:de:79:d7:
         e4:80:6c:e4:18:2c:27:55:3f:93:b4:cf:d7:ec:9b:88:d2:03:
         43:b8:b9:85:06:b8:63:46:e8:dc:f9:38:b3:06:74:11:cd:b9:
         7d:48:56:fc:9a:f9:77:53:20:ec:0c:48:a1:c8:bd:ae:ce:fa:
         5f:2b:89:2c:aa:6e:8d:15:c6:dd:b7:bf:5d:88:f2:d1:42:e6:
         cc:34:46:82:6c:fb:7c:c2:77:74:de:66:2b:cd:96:08:32:05:
         d7:41:2e:79:45:3b:c8:1d:57:00:65:a4:04:26:bc:ad:3d:22:
         84:7e:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----