Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234302e302f32332d3234203d3e20313332363431.roa
File:                     3130332e3134352e3234302e302f32332d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          z6pp9Fw9/2UFfKV0DkaoqA0UT+KinGzUCy66irmpVAo=
Subject key identifier:   01:A3:57:A8:38:C2:A2:48:90:ED:24:52:29:8F:AA:F0:3C:A5:DE:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1BB0AF7D15ED7A280337724D655EB46B2C373E40
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234302e302f32332d3234203d3e20313332363431.roa
Signing time:             Mon 14 Jun 2021 04:29:01 +0000
ROA not before:           Mon 14 Jun 2021 04:24:01 +0000
ROA not after:            Tue 14 Jun 2022 04:29:01 +0000
asID:                     132641
IP address blocks:        103.145.240.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b0:af:7d:15:ed:7a:28:03:37:72:4d:65:5e:b4:6b:2c:37:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 04:24:01 2021 GMT
            Not After : Jun 14 04:29:01 2022 GMT
        Subject: CN=3082010A0282010100C8CE7CE5866250CA3E5F6FA043BA4CDC056D91AE2D4DB79BFAA73FF09EF29347EBFFA3E8BF549FD2D5F2955A661B28341E26A7BCDBC358DA9B2B298415F09D13DFB1891BF0D351A4DA514A9D4599886C01DFC9ACF1911A39565E084FC4F0C6A4837DA6223AA9A69C653E39CC22C76F59BA4524D646DA89DA2652DE0010CC39620D471E6B7B70880B5B5D1923886378C7C1E1C6AB01295169096CF98BA13A1C93D8E4DA28B0E2CDEC0C946CA8A8F130FEA707005A0B14915CDE415B72DEEECD122A56F711417679120A710D3DEFEEE047B5B71457847D6FB0540BB2147CB8CAC9348A1D8A3FFCF3594DE34C6FFAAD0B2DEDCDB1BD1CF8B1C03EA3A875F3F5BC870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:7c:e5:86:62:50:ca:3e:5f:6f:a0:43:ba:
                    4c:dc:05:6d:91:ae:2d:4d:b7:9b:fa:a7:3f:f0:9e:
                    f2:93:47:eb:ff:a3:e8:bf:54:9f:d2:d5:f2:95:5a:
                    66:1b:28:34:1e:26:a7:bc:db:c3:58:da:9b:2b:29:
                    84:15:f0:9d:13:df:b1:89:1b:f0:d3:51:a4:da:51:
                    4a:9d:45:99:88:6c:01:df:c9:ac:f1:91:1a:39:56:
                    5e:08:4f:c4:f0:c6:a4:83:7d:a6:22:3a:a9:a6:9c:
                    65:3e:39:cc:22:c7:6f:59:ba:45:24:d6:46:da:89:
                    da:26:52:de:00:10:cc:39:62:0d:47:1e:6b:7b:70:
                    88:0b:5b:5d:19:23:88:63:78:c7:c1:e1:c6:ab:01:
                    29:51:69:09:6c:f9:8b:a1:3a:1c:93:d8:e4:da:28:
                    b0:e2:cd:ec:0c:94:6c:a8:a8:f1:30:fe:a7:07:00:
                    5a:0b:14:91:5c:de:41:5b:72:de:ee:cd:12:2a:56:
                    f7:11:41:76:79:12:0a:71:0d:3d:ef:ee:e0:47:b5:
                    b7:14:57:84:7d:6f:b0:54:0b:b2:14:7c:b8:ca:c9:
                    34:8a:1d:8a:3f:fc:f3:59:4d:e3:4c:6f:fa:ad:0b:
                    2d:ed:cd:b1:bd:1c:f8:b1:c0:3e:a3:a8:75:f3:f5:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:57:A8:38:C2:A2:48:90:ED:24:52:29:8F:AA:F0:3C:A5:DE:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3234302e302f32332d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:18:83:5d:63:08:21:4c:55:71:36:18:3e:f5:82:4e:32:d3:
         44:b3:cd:5b:5a:ad:aa:bb:2b:51:24:a4:de:53:bc:4a:6f:38:
         a0:19:fa:97:6c:4f:d2:e3:35:de:e3:49:7b:9b:99:b3:26:51:
         9f:4b:5a:16:f2:d0:86:a5:9e:e3:6e:09:97:33:17:47:50:59:
         d6:7c:53:aa:32:53:1d:e1:3b:6c:4e:f8:a9:45:d4:67:89:9a:
         47:81:9e:4e:81:e2:4f:c8:18:7d:d8:67:bb:d7:f5:bf:20:cc:
         8b:b9:41:ef:51:a8:30:6c:a0:68:c3:27:84:72:5a:a5:e1:7d:
         89:84:4f:6d:e2:11:0e:01:29:79:94:94:d7:20:5b:9b:ac:c0:
         d2:3e:85:e5:eb:3c:5f:3f:eb:d5:81:a9:0f:b5:c8:cb:dc:8b:
         72:6b:de:e2:56:b6:54:3f:b0:bc:70:12:7c:eb:dd:f5:78:13:
         9b:b4:66:3f:cc:fa:b7:c6:48:07:09:02:12:d5:00:cd:61:bd:
         e6:6f:07:0e:0b:12:0d:c5:46:9e:29:d1:48:a1:44:15:71:b4:
         46:3a:bb:b2:30:cd:8d:3d:67:50:76:5d:05:07:78:92:0c:a9:
         8d:35:ad:7e:e6:41:4d:27:e0:1b:a6:0f:93:59:ba:e3:0b:ec:
         14:e5:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----