Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134332e302f32342d3234203d3e20313339343239.roa
File:                     3130332e3134342e3134332e302f32342d3234203d3e20313339343239.roa (raw, json)
Hash identifier:          TZiexIfwybA1VHf/UM3crrEFe5//vm5eFDZ7YHRP1oc=
Subject key identifier:   A0:D2:7F:CC:CA:A5:82:39:1A:17:E5:15:E5:A9:11:04:53:4B:81:34
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1DDE13B49B29E15EC0A83D592D67AEFC41D0AFC9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134332e302f32342d3234203d3e20313339343239.roa
Signing time:             Fri 17 Sep 2021 09:50:22 +0000
ROA not before:           Fri 17 Sep 2021 09:45:22 +0000
ROA not after:            Sat 17 Sep 2022 09:50:22 +0000
asID:                     139429
IP address blocks:        103.144.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:13:b4:9b:29:e1:5e:c0:a8:3d:59:2d:67:ae:fc:41:d0:af:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 17 09:45:22 2021 GMT
            Not After : Sep 17 09:50:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:28:0c:2d:38:54:45:19:8c:40:74:32:04:
                    78:b4:06:69:b2:ed:a2:12:9f:4b:f3:3f:c8:c6:6a:
                    10:91:29:fb:bb:f8:3a:87:53:40:d0:88:b7:d3:28:
                    c3:37:9c:de:56:1c:38:e3:0e:01:9e:c3:e9:e0:01:
                    d5:c4:b1:0f:f1:3f:31:00:75:53:5f:64:ab:82:a1:
                    bb:c3:fd:d7:d3:c4:8b:ad:2f:48:3f:e3:34:98:ef:
                    f3:7a:3d:77:14:b5:9e:c2:98:ae:39:97:43:3e:57:
                    33:9e:95:3e:1f:3a:63:c2:12:bd:46:cb:42:47:51:
                    06:21:34:3b:bc:fd:88:8d:3d:f0:22:09:af:44:a0:
                    68:ad:c7:2a:04:cb:c2:77:50:bc:ac:a9:e1:32:81:
                    6d:4e:74:ae:8a:f7:59:fe:8a:80:90:86:a0:b4:c2:
                    de:bb:f3:74:39:8b:82:6d:1b:fd:20:a1:1c:6f:d1:
                    9f:b2:e7:67:85:58:54:54:a9:2c:4a:b7:de:99:60:
                    60:02:04:75:5f:17:f8:e9:ed:7b:3a:d1:b0:3e:a0:
                    90:ba:67:db:12:12:a7:ef:c3:d1:b1:dd:88:59:55:
                    9c:75:6f:99:f2:d4:5b:ac:21:c6:2e:ed:75:6c:04:
                    11:0e:e8:c8:5e:a0:86:c4:4f:ff:43:90:95:9e:b9:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:7F:CC:CA:A5:82:39:1A:17:E5:15:E5:A9:11:04:53:4B:81:34
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134332e302f32342d3234203d3e20313339343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:64:65:4f:4e:c6:f2:37:c9:ce:ee:eb:62:16:30:85:e2:6d:
         14:fa:4b:9b:0c:08:c0:a2:d0:af:15:32:da:00:0b:11:f1:3f:
         2f:e5:f6:d2:e6:54:1a:1b:38:8b:e1:3b:51:b8:d7:4d:9d:2a:
         36:79:6b:8a:08:1d:96:a0:0b:12:8b:72:73:b2:83:4a:5e:61:
         d2:6d:62:7b:84:16:3e:2c:3c:52:29:56:e7:63:9c:cd:db:24:
         39:a9:a4:ea:bf:3b:34:9d:4a:c5:12:74:f1:81:02:ad:94:71:
         be:36:86:8d:b0:8e:e2:25:bb:82:04:0b:8c:24:76:6c:e7:f9:
         79:7a:28:c1:4a:04:a2:78:39:2c:dd:77:a6:07:ec:94:35:92:
         30:ee:36:fa:8d:e1:fb:69:13:61:a4:e3:9e:8c:57:f4:d0:61:
         71:9f:0c:f7:fe:3a:3c:0d:3f:23:4c:2a:9f:31:43:c4:fb:8b:
         9a:c5:7f:66:6e:51:b2:66:90:fa:78:10:2b:32:c7:31:c9:35:
         14:19:51:ec:00:5e:dd:3e:ce:df:16:9d:90:12:e1:33:a4:11:
         f5:22:31:45:e7:28:bc:05:64:42:78:63:e9:0d:6c:31:b1:7d:
         b4:16:0f:fc:cb:01:df:3a:0c:cf:ac:b7:4b:73:0b:39:81:3f:
         c2:7d:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----