Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e34362e302f32332d3234203d3e20313339393537.roa
File:                     3130332e3134352e34362e302f32332d3234203d3e20313339393537.roa (raw, json)
Hash identifier:          pbKdnL8byOpOoR59gxj7p/G+6LqfLaHYVX6hqEoiSyA=
Subject key identifier:   FB:44:DA:BE:EB:CE:FA:17:5C:77:E9:2C:47:DF:8C:4D:D9:31:63:67
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3731527EC542037E5E9F43AC9F8EF01252F4EE9C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e34362e302f32332d3234203d3e20313339393537.roa
Signing time:             Thu 19 Aug 2021 08:44:42 +0000
ROA not before:           Thu 19 Aug 2021 08:39:42 +0000
ROA not after:            Fri 19 Aug 2022 08:44:42 +0000
asID:                     139957
IP address blocks:        103.145.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:31:52:7e:c5:42:03:7e:5e:9f:43:ac:9f:8e:f0:12:52:f4:ee:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 19 08:39:42 2021 GMT
            Not After : Aug 19 08:44:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:8e:f9:98:9b:a8:2d:96:80:d4:73:58:d6:
                    8b:81:19:15:07:d0:9f:0c:d0:40:b7:65:89:20:bc:
                    88:47:ed:d6:6f:3b:b3:4b:f7:42:36:5d:12:53:8f:
                    99:1a:29:9d:01:72:88:8b:ea:16:48:07:cc:be:c5:
                    ad:5d:dd:c8:f3:4a:e4:9e:e9:fb:17:91:14:6b:97:
                    a4:1b:54:e0:4f:f2:aa:74:4e:9b:8f:14:0d:ef:be:
                    84:08:5b:df:77:35:3d:f1:8f:7c:06:28:73:39:68:
                    96:66:59:c8:fa:10:19:03:1a:91:78:3c:ad:eb:fc:
                    a4:c8:65:25:2e:20:fd:a4:28:b8:5a:ac:a2:89:2c:
                    da:a9:08:83:88:ca:2e:ef:52:4f:08:bc:96:17:1a:
                    62:89:99:58:5d:0e:c1:45:3c:0d:65:38:ed:ff:1a:
                    27:5c:4a:77:c8:29:6e:c9:83:77:3e:b2:db:95:bb:
                    5c:b6:f1:2c:9c:c2:09:f0:28:0a:8b:14:9c:fe:c8:
                    0a:d5:24:9b:d5:60:cc:02:6f:58:24:d7:4b:06:54:
                    20:2d:79:84:b6:ac:1a:92:11:68:7a:e1:2e:75:63:
                    f0:0b:88:24:73:22:c6:14:18:07:87:7d:70:4b:57:
                    5d:9b:e0:20:3b:54:76:b6:32:d3:ac:b6:fc:47:3b:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:DA:BE:EB:CE:FA:17:5C:77:E9:2C:47:DF:8C:4D:D9:31:63:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e34362e302f32332d3234203d3e20313339393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:33:bd:11:bc:ce:52:95:07:48:43:37:c2:60:74:5c:54:
         1b:95:90:17:34:7b:33:ea:bc:a9:73:3e:76:e8:78:38:55:b3:
         3e:5f:3a:7d:e2:98:b5:2d:f6:b2:29:69:53:b9:ed:2f:a2:cb:
         8a:32:29:e2:0e:26:4a:30:8c:9b:6d:d3:6d:ac:2d:25:a5:3a:
         1a:fc:7b:21:2c:19:30:50:e7:10:33:59:bc:70:ec:2c:d4:05:
         18:9f:4b:c2:e0:f2:d0:5d:f5:0c:24:62:80:b5:11:f5:80:2a:
         ca:19:29:dd:b6:57:2b:17:d4:00:ea:38:20:a4:56:a4:a5:69:
         18:82:87:6a:88:a2:a7:99:20:ac:1e:0f:1f:9a:a6:60:13:3c:
         ca:68:e9:d9:cb:17:e3:57:29:a1:6a:8a:49:fd:5b:22:c0:17:
         de:4e:68:19:10:86:aa:6a:23:52:22:d7:b0:58:aa:86:ab:8f:
         45:a4:1e:42:ce:7a:0c:e5:88:3f:47:02:e1:6a:23:0c:3d:5d:
         24:ad:39:c6:41:95:92:a9:13:1f:98:ad:a4:67:45:33:64:5e:
         2d:20:17:2c:2a:82:cb:7d:0a:4c:76:18:c8:1c:3c:55:89:73:
         50:77:a3:03:1b:9e:a6:00:71:50:30:63:fe:c2:99:b4:1b:2f:
         99:53:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----