Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134302e302f32342d3234203d3e203435333235.roa
File:                     3130332e3135312e3134302e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          gKLpPCE2cfHamKq3zmFpudVHD28WK7E8I5T+r3CMV/w=
Subject key identifier:   DB:A6:95:D9:9A:ED:BC:82:39:F2:96:27:74:88:D3:54:76:F0:F0:A6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       178DBE085737858C14249870197F1F8CC4E23574
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134302e302f32342d3234203d3e203435333235.roa
Signing time:             Mon 20 Sep 2021 03:20:06 +0000
ROA not before:           Mon 20 Sep 2021 03:15:06 +0000
ROA not after:            Tue 20 Sep 2022 03:20:06 +0000
asID:                     45325
IP address blocks:        103.151.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:be:08:57:37:85:8c:14:24:98:70:19:7f:1f:8c:c4:e2:35:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 20 03:15:06 2021 GMT
            Not After : Sep 20 03:20:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:8f:e6:b2:c5:3f:38:33:42:f3:2d:66:77:
                    d8:d2:d5:52:3e:d0:67:1b:e9:68:94:4a:b7:f6:fb:
                    51:d8:a3:20:fa:2f:4d:b2:d0:e2:76:99:88:15:c6:
                    1d:ef:9d:0a:d1:f2:d2:ad:f1:b1:25:66:a3:ed:2b:
                    04:19:7a:97:22:42:08:77:8b:a9:32:ee:74:29:2b:
                    dd:fd:eb:18:87:61:90:29:ff:eb:bd:05:18:8d:98:
                    50:60:ca:e3:53:a0:a2:e0:dc:78:d5:43:f4:b7:9c:
                    47:43:f7:36:76:61:69:14:c8:4e:a1:6a:32:38:95:
                    32:39:84:85:11:5a:bf:5b:07:31:d8:73:5e:e1:c4:
                    9e:62:e3:46:99:63:7d:46:75:3e:e8:e5:c1:e9:fe:
                    91:5b:6c:0a:41:36:7d:e1:66:d2:ee:5c:f1:94:70:
                    24:38:75:15:52:0b:9b:e5:6d:d4:bd:41:2d:43:36:
                    a1:41:fd:fb:71:b6:d5:81:af:bb:ea:42:36:c8:39:
                    67:f3:ab:f6:ee:70:5d:26:84:c1:31:49:1d:07:09:
                    04:7a:bf:38:82:d8:f5:63:45:fe:bd:43:76:5d:64:
                    d7:9c:fe:da:f1:82:8b:db:46:80:db:3f:0e:3f:3f:
                    09:04:4b:60:00:09:a6:2d:c5:04:35:5b:b0:ab:36:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:95:D9:9A:ED:BC:82:39:F2:96:27:74:88:D3:54:76:F0:F0:A6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134302e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:ed:58:86:df:ed:ce:56:13:c7:b0:55:d1:cc:dd:e9:44:
         0a:fe:cc:46:50:01:b9:06:b1:b0:5e:3e:f6:da:67:94:59:0f:
         ed:af:9c:73:73:de:52:19:80:4a:7b:1f:31:0f:ea:b6:e4:f8:
         37:d9:ab:96:49:fe:64:44:e4:e6:9b:77:10:c0:ac:d5:ad:ff:
         99:8a:94:55:9e:53:d0:25:17:49:1b:71:7e:2e:a7:fa:d6:f4:
         a4:bc:1a:72:7e:7b:a1:b6:01:c4:79:c6:50:2a:64:b5:c3:a1:
         df:83:55:a2:f4:9f:bb:94:cd:c3:4c:e7:1d:fd:da:61:36:38:
         c4:e3:62:fd:ce:31:3a:99:8a:02:38:90:a8:3d:e6:f1:1b:5e:
         8b:77:e2:59:e4:8b:33:15:c5:5b:9c:74:c2:21:d6:a9:34:04:
         1d:0e:7e:40:5b:b0:97:6a:5d:97:0a:39:ff:36:2c:06:13:ed:
         e3:35:c9:34:05:d6:4a:8c:1f:c0:43:fc:c6:44:ea:e4:51:82:
         a4:a0:de:ba:95:80:7f:25:92:ea:d5:d1:94:b6:d9:cb:6f:fc:
         81:0c:f7:d1:af:f2:34:e4:88:f7:1d:bc:04:db:df:29:2e:a1:
         e2:a8:aa:03:10:e9:fa:63:7f:5e:d0:cd:64:f3:52:23:cc:7a:
         27:18:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----