Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134362e302f32332d3234203d3e20313339343238.roa
File:                     3130332e3134342e3134362e302f32332d3234203d3e20313339343238.roa (raw, json)
Hash identifier:          Sk8hecR3a+//DYQ5pTjeqqMZCwH9pmaXUzzU2KvA3ZA=
Subject key identifier:   BF:9E:B8:D6:20:A5:3F:BE:E4:25:2C:89:3C:7D:BE:F9:0E:C2:A7:9C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7EBABBBD737CA3CEF6F35D963BF6EED909AA5C15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134362e302f32332d3234203d3e20313339343238.roa
Signing time:             Wed 14 Apr 2021 07:06:08 +0000
ROA not before:           Wed 14 Apr 2021 07:01:08 +0000
ROA not after:            Thu 14 Apr 2022 07:06:08 +0000
asID:                     139428
IP address blocks:        103.144.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:bb:bd:73:7c:a3:ce:f6:f3:5d:96:3b:f6:ee:d9:09:aa:5c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 14 07:01:08 2021 GMT
            Not After : Apr 14 07:06:08 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:ab:51:05:6b:f6:03:bb:d1:9c:8e:06:48:
                    48:13:58:75:0d:6f:c1:8e:29:72:0b:c4:15:91:ea:
                    7c:c6:7e:a9:ef:44:8a:80:00:e7:3d:b2:14:c3:6b:
                    22:38:55:0a:5d:d6:15:c9:2c:1e:ce:df:02:37:c1:
                    e1:43:10:7c:e5:f6:4e:ee:e0:ac:89:8d:e5:56:28:
                    b8:e8:05:8a:9c:d3:9c:52:9c:da:3d:3f:40:fc:c2:
                    73:14:78:86:ee:12:4e:6e:1e:46:22:40:c8:0e:94:
                    51:be:ad:20:52:98:b1:dd:7a:64:36:5b:86:3e:93:
                    aa:f0:45:ea:f9:80:ce:0d:29:56:19:b7:70:11:31:
                    4f:7d:b1:9e:7f:51:32:9b:64:4d:b8:3a:fa:5e:1e:
                    4a:07:26:08:c1:f4:2d:f2:c7:46:9c:8e:11:bc:53:
                    7a:15:02:76:ca:c8:9b:6c:4b:e1:50:75:62:2a:fd:
                    42:9e:40:39:ba:a0:ed:bf:e7:40:9c:8d:ca:82:18:
                    00:c5:db:da:ee:93:c1:2e:66:7d:1f:70:f7:cf:d5:
                    7e:8e:96:91:ab:ce:a0:8e:9d:a7:53:99:51:cd:3f:
                    5d:70:d2:ba:50:db:00:10:aa:d7:3f:fb:01:10:cc:
                    cf:fe:a1:43:4e:4b:be:cb:e0:1b:59:c0:7e:ba:4f:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:B8:D6:20:A5:3F:BE:E4:25:2C:89:3C:7D:BE:F9:0E:C2:A7:9C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3134362e302f32332d3234203d3e20313339343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:6b:03:c5:25:af:72:bd:cb:ed:d8:47:89:30:0a:05:6e:
         97:47:87:d2:a8:05:e8:7b:e7:e2:e6:5f:92:16:9a:02:41:69:
         c7:67:e1:fa:00:cd:94:3b:c3:56:c9:03:1c:b1:f4:f1:84:25:
         d1:11:3f:36:f0:d8:ac:79:e5:1a:d9:59:9b:4e:0e:98:ad:4a:
         40:54:2f:f0:21:c0:a1:f6:f9:ac:26:72:50:9a:56:06:94:7f:
         48:5f:51:e9:38:5d:a0:46:e5:e5:b9:63:25:5a:f9:ef:82:7d:
         69:c5:33:9b:10:79:6d:c8:f8:48:71:c3:3a:b0:1d:a9:f7:7d:
         16:2f:6a:2b:f0:c2:1f:50:38:e0:20:95:2e:25:43:4f:c0:af:
         41:0f:19:52:09:ab:f4:88:79:fa:f8:63:b1:7c:22:20:48:f9:
         45:ae:bc:a6:d5:60:9a:32:df:82:ac:74:ea:a1:a8:51:e2:73:
         d3:4e:46:d0:63:05:7f:25:32:4f:35:4b:d8:49:ee:16:48:65:
         18:3a:14:d9:d6:98:7b:a8:3f:fa:d3:56:b6:78:4d:09:bf:14:
         23:7b:c4:94:5d:c4:5f:4b:f3:95:0e:9d:4c:58:ce:5b:18:83:
         8b:85:84:7b:22:19:ae:ba:fe:95:42:9a:d5:73:7b:bb:07:3f:
         65:14:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----