Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e34362e302f32332d3234203d3e20313339393436.roa
File:                     3130332e3134372e34362e302f32332d3234203d3e20313339393436.roa (raw, json)
Hash identifier:          uCr5319QwD9ynCnWo+eVV4rrDy7fBwZ78r24/vvAVzA=
Subject key identifier:   BF:61:D4:8C:53:FD:E3:1E:69:D5:3E:31:07:D7:AA:77:A0:0A:8A:7B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       719E0920D1FEAF573176FC8AC5B3A86CDA80892F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e34362e302f32332d3234203d3e20313339393436.roa
Signing time:             Mon 17 May 2021 07:31:26 +0000
ROA not before:           Mon 17 May 2021 07:26:26 +0000
ROA not after:            Tue 17 May 2022 07:31:26 +0000
asID:                     139946
IP address blocks:        103.147.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9e:09:20:d1:fe:af:57:31:76:fc:8a:c5:b3:a8:6c:da:80:89:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 17 07:26:26 2021 GMT
            Not After : May 17 07:31:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:7e:71:0d:a2:24:20:39:49:f4:3f:aa:18:
                    f2:99:71:16:64:77:6f:1f:31:e4:a2:76:11:08:7b:
                    2f:70:ed:8a:b1:b9:a9:4e:8a:db:13:31:a4:75:34:
                    77:68:4f:b4:e5:b1:a8:39:8a:eb:c2:7a:75:06:24:
                    30:62:40:a8:f3:68:07:b5:b3:37:39:c9:af:49:57:
                    2f:d8:ae:07:f3:8d:4c:b8:2f:b5:64:17:3c:b4:ea:
                    8e:64:58:4a:32:e2:30:ac:52:d1:a4:4b:22:9e:ee:
                    f2:7c:a3:80:a0:ad:85:39:32:ba:d5:ed:c9:6e:16:
                    e3:9e:68:24:f3:17:ea:d9:f9:c3:0d:cb:34:c7:58:
                    be:2c:94:b4:1f:74:80:7b:6d:d3:c5:71:ea:87:08:
                    7b:9f:df:1b:f0:a6:41:a1:70:64:df:0c:76:a1:b9:
                    ad:36:85:40:5b:46:02:d1:46:30:79:64:d2:b4:af:
                    e4:58:55:7f:d3:e5:c9:ea:d9:44:03:c0:c0:7e:8d:
                    8b:10:87:b5:33:91:70:7a:ee:02:32:75:4b:af:76:
                    6b:c4:e9:5e:40:0f:ec:60:08:ea:5f:0f:97:32:2f:
                    f4:61:8d:fc:0b:4d:f6:d6:fe:b3:f3:4d:5b:78:bf:
                    f1:b7:2a:0d:73:df:fc:9a:d1:05:64:62:10:8f:3b:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:D4:8C:53:FD:E3:1E:69:D5:3E:31:07:D7:AA:77:A0:0A:8A:7B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134372e34362e302f32332d3234203d3e20313339393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:69:75:80:e7:c0:44:8d:cd:64:19:78:23:6f:be:4b:e0:04:
         db:a9:5f:68:3a:aa:99:ff:4b:2d:d2:88:f4:36:38:b7:76:a6:
         ac:0c:50:5c:3c:d4:66:75:30:2a:cf:5a:22:fb:85:37:0d:ba:
         6b:ca:a2:5b:96:f6:58:ef:e4:c1:1f:36:03:d2:2f:ff:2c:fd:
         7c:13:44:5e:cb:0b:7c:b8:e1:c1:31:94:79:f3:7d:32:57:b1:
         77:ad:46:38:a5:a0:b5:19:6e:b4:20:ab:3d:19:f2:e9:42:5c:
         1c:b5:35:4e:1d:31:d2:01:b4:27:f5:00:6b:78:ac:bf:ff:b1:
         f0:e3:a9:d0:5b:49:5e:f5:e3:a3:63:8d:66:bc:a5:c5:31:bb:
         d2:54:9f:88:37:1d:2b:88:56:ee:8e:bf:cb:77:cb:3b:d1:93:
         b0:c0:95:a5:2f:13:74:eb:c0:9f:84:97:39:7e:fa:21:20:25:
         af:53:ae:52:8e:23:49:9b:9e:ac:5b:46:cc:5c:28:c5:db:47:
         6b:29:96:a2:3d:03:c2:21:96:96:37:06:fd:7c:db:7b:35:ab:
         95:7a:70:fe:85:a2:fd:eb:dd:b1:3d:9e:bd:6f:66:46:5c:10:
         5a:db:a4:00:d6:0b:b0:41:79:b6:ba:59:96:75:88:d9:c5:13:
         4b:d8:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----