Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3233322e302f32332d3234203d3e203538333639.roa
File:                     3130332e3134382e3233322e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          oMqAHKdwyvrPWCqKZNLtmNHFgnAtMHPmDKfnalQ8qPw=
Subject key identifier:   82:D2:32:1A:92:C5:EE:03:D5:E1:05:56:4D:FE:51:6A:84:53:3D:16
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       02EE734469117D5AB6F0DDD6B108FE7BA5796881
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3233322e302f32332d3234203d3e203538333639.roa
Signing time:             Mon 23 Aug 2021 03:50:39 +0000
ROA not before:           Mon 23 Aug 2021 03:45:39 +0000
ROA not after:            Tue 23 Aug 2022 03:50:39 +0000
asID:                     58369
IP address blocks:        103.148.232.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ee:73:44:69:11:7d:5a:b6:f0:dd:d6:b1:08:fe:7b:a5:79:68:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 03:45:39 2021 GMT
            Not After : Aug 23 03:50:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1a:63:a2:43:8c:7f:6f:f2:8b:ac:b8:46:b5:
                    ee:0b:a4:68:bd:56:13:16:7e:3e:8e:25:6a:48:a9:
                    89:11:0c:50:22:c1:19:19:dc:ad:04:81:d1:25:6b:
                    8e:13:71:d0:a9:ba:eb:df:22:3c:e4:a8:df:2f:a0:
                    20:19:09:96:f5:3c:d6:8a:33:1e:5a:6e:10:19:a8:
                    7d:b6:9e:e7:dc:02:64:d3:75:02:79:19:8f:8e:bb:
                    89:fd:53:3b:9a:14:11:05:57:71:83:2c:45:e3:bb:
                    56:8d:dc:26:02:55:8d:a1:c5:e5:4a:98:63:f0:73:
                    b5:06:82:6e:ad:0f:e4:dc:49:b7:28:74:f9:a3:02:
                    8a:e3:61:f7:55:07:a0:f9:60:eb:49:15:ea:32:6d:
                    d6:4a:ce:ee:31:18:ca:a7:5e:0e:09:28:bc:b0:76:
                    c3:66:3d:f0:ae:c5:af:89:7d:df:b6:38:71:29:2d:
                    36:e7:e2:98:ba:0c:18:19:81:a7:5c:f4:ca:93:5f:
                    71:5f:ad:9c:49:1a:f4:cf:e4:a6:b3:14:e8:a7:d5:
                    6c:e0:c9:fc:16:be:72:a8:05:44:d1:65:e5:2f:a4:
                    00:e3:50:d9:51:fa:6c:c4:dc:5e:72:dc:89:2e:45:
                    09:74:b6:2d:62:24:26:01:31:50:6b:f9:1a:29:06:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:32:1A:92:C5:EE:03:D5:E1:05:56:4D:FE:51:6A:84:53:3D:16
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3233322e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:34:e0:b7:4b:3c:42:38:83:4e:96:31:60:9a:cd:b6:7a:29:
         de:a0:fa:09:cb:c2:88:f6:92:00:f0:73:d8:f3:cb:1b:80:47:
         e3:88:45:6f:18:c6:dc:f2:6b:46:71:31:9f:b1:9f:8f:ef:4b:
         cb:0b:21:f4:2b:ea:d2:39:fa:15:5e:f2:50:e2:ff:c4:5f:2d:
         aa:e7:96:26:11:2a:7a:98:a5:ce:ad:f8:16:11:68:8d:27:b8:
         04:b9:ea:c8:5b:e2:46:be:d3:4a:c1:91:75:06:e6:bf:ba:ec:
         8b:24:34:f9:25:ac:9e:75:03:d6:46:d5:4d:75:29:85:a3:77:
         a0:83:18:f0:1b:a4:6b:a7:2a:56:75:74:0f:69:d3:6a:37:53:
         90:d0:4b:30:ab:8e:4c:5f:a5:34:db:0f:24:95:2d:2b:ab:60:
         f7:46:ae:0a:6c:a2:d8:26:66:4b:1b:54:dd:c6:5b:fc:6f:21:
         db:45:61:f2:26:5c:ef:68:79:5a:c7:d6:a9:6d:87:f5:3a:3f:
         31:4a:da:b6:27:66:8a:93:7c:4d:a7:1b:69:1a:c6:ad:dd:8b:
         d0:6c:58:34:13:06:98:65:bf:e7:a5:fb:01:4c:e7:2a:f8:8d:
         76:1f:ce:cc:73:e3:d6:4e:13:8d:3f:fe:f8:50:41:97:73:23:
         d6:d9:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----