Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38382e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3135302e38382e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          NpZQNquc0g3ngsil2uoUvPhhl7FNjh5ZHAB3Ydat9XQ=
Subject key identifier:   9A:33:00:D1:E8:91:59:C8:A4:FF:1A:05:14:DE:CA:02:78:EB:7C:60
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57E061AA5AE2CCDAA427448AB13642E20E16AF4D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38382e302f32332d3234203d3e20313333383030.roa
Signing time:             Sun 17 Oct 2021 07:00:02 +0000
ROA not before:           Sun 17 Oct 2021 06:55:02 +0000
ROA not after:            Mon 17 Oct 2022 07:00:02 +0000
asID:                     133800
IP address blocks:        103.150.88.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e0:61:aa:5a:e2:cc:da:a4:27:44:8a:b1:36:42:e2:0e:16:af:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 17 06:55:02 2021 GMT
            Not After : Oct 17 07:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:91:b0:16:f4:ab:a7:88:9e:39:cc:95:8e:
                    fb:71:62:4e:00:d7:8d:d3:51:c3:33:0d:b7:7b:8a:
                    98:65:c2:ad:0b:6b:4f:c0:1a:3d:6f:42:bc:cd:70:
                    f6:29:80:6b:40:4c:fb:cc:d6:2a:b3:1b:88:20:be:
                    3d:1e:2d:30:f7:1b:cc:31:c2:20:65:4b:02:4a:da:
                    6c:61:7f:de:d0:77:51:bf:a5:9e:45:9e:bf:bd:29:
                    aa:ae:a5:ea:fe:a1:09:65:0e:6d:4c:90:b7:5a:1c:
                    08:26:01:6f:aa:dd:a1:9b:00:59:1e:89:d2:bf:03:
                    9c:88:7f:1e:30:eb:2a:83:6b:88:a8:a2:6e:97:1b:
                    98:21:12:9a:36:e6:bf:35:3b:18:0e:d1:81:86:d8:
                    2c:4b:31:20:ff:69:4d:64:2a:5e:b2:e1:b7:f6:74:
                    82:50:ca:ad:0c:10:0c:e9:96:ac:a7:7c:06:9f:2d:
                    2f:0d:a2:ad:c3:26:fa:c6:1b:27:12:1a:37:de:21:
                    4e:a0:8b:f4:09:4a:96:e7:3c:36:91:16:86:9e:b5:
                    d5:1b:2a:e8:56:8a:5e:74:51:c6:af:7e:18:fc:8f:
                    11:ed:3e:47:6a:88:fc:42:50:50:8a:24:4e:dc:31:
                    7f:e7:3c:f4:fb:70:2a:cf:52:d1:23:98:50:ed:fe:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:33:00:D1:E8:91:59:C8:A4:FF:1A:05:14:DE:CA:02:78:EB:7C:60
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e38382e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:c3:a0:30:eb:31:df:80:ef:26:a1:c4:3f:03:e2:95:68:
         5c:82:4e:a9:7b:eb:e9:0f:1f:12:e6:cb:71:70:b3:79:21:82:
         9f:c7:58:8e:d7:3a:b1:49:0e:47:bb:26:51:62:d9:d5:65:2a:
         26:dc:3e:1d:07:c0:cc:72:3d:b6:fb:b9:bf:9f:ad:17:b9:85:
         00:6a:dc:4e:ca:b3:8e:b3:57:71:19:80:12:50:6a:cd:73:98:
         9b:6d:f9:f8:38:3a:2c:df:45:21:1f:a9:38:ed:ad:b5:5f:72:
         10:31:38:50:cf:a8:37:6b:8f:76:42:82:a6:41:8b:26:62:3e:
         01:86:7d:c3:d4:b5:65:b1:c1:c0:fb:ee:63:6e:97:cd:4d:df:
         cb:c2:ea:df:91:07:b1:8b:80:a0:36:de:a0:b3:c1:84:14:9d:
         71:f3:b8:a3:07:c4:29:cc:59:d3:75:b0:c5:84:aa:4c:ec:70:
         de:8c:d9:cc:71:59:75:a7:77:0b:45:45:a0:63:e8:b3:0d:36:
         92:40:54:d7:5d:fc:3f:d5:00:2a:e3:78:d3:86:e4:b4:35:60:
         04:8a:78:ae:99:a6:ce:bb:ef:4f:56:6e:36:a3:b2:f2:22:bc:
         cf:fa:30:02:5e:21:dc:ba:3e:c7:db:7d:08:1e:b6:44:56:7c:
         46:02:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----