Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134312e302f32342d3234203d3e203435333235.roa
File:                     3130332e3135312e3134312e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          G4hT4CvJ263Fj4AUqpexXeT0II51dajnKF3DXVkn7tY=
Subject key identifier:   0C:C2:86:70:80:71:9E:0D:6E:9A:F7:8A:47:D3:1C:C1:89:20:AF:DC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A46FEC0D233D6890EA0C2076D83C330C1DF1831
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134312e302f32342d3234203d3e203435333235.roa
Signing time:             Mon 20 Sep 2021 03:20:41 +0000
ROA not before:           Mon 20 Sep 2021 03:15:41 +0000
ROA not after:            Tue 20 Sep 2022 03:20:41 +0000
asID:                     45325
IP address blocks:        103.151.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:46:fe:c0:d2:33:d6:89:0e:a0:c2:07:6d:83:c3:30:c1:df:18:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 20 03:15:41 2021 GMT
            Not After : Sep 20 03:20:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:dc:98:a0:00:51:5c:9c:80:68:1e:6c:43:
                    e5:28:e1:2e:da:60:11:5b:28:a8:41:e2:24:fa:07:
                    79:c3:5e:55:ad:f7:93:48:73:7c:42:c3:50:be:01:
                    1b:65:ec:fc:2b:dc:c3:0e:7c:f4:1b:2a:9f:c3:94:
                    19:aa:b7:05:b7:a6:e2:c7:37:c6:03:18:fd:3a:00:
                    10:cf:97:b8:46:f7:11:d9:89:83:02:3c:c0:d5:56:
                    e1:5c:f1:c1:2c:a6:5e:ce:43:34:68:61:16:81:a3:
                    5f:1a:73:ef:f3:52:b5:1f:73:57:37:d5:f9:1c:95:
                    6c:0b:ba:95:fb:71:ea:6d:d2:78:04:7b:17:eb:c4:
                    3f:f1:38:1c:3c:43:36:7c:c1:71:52:ea:8d:ed:f1:
                    d6:29:87:23:b2:28:6c:eb:2c:b0:06:48:7e:7d:f2:
                    54:c4:0a:a3:ca:24:22:cf:e1:ed:5f:bf:bd:ca:69:
                    75:10:8a:77:31:fa:4a:76:9f:0c:89:ff:c2:51:4f:
                    44:d0:ca:ca:c4:a2:ac:4a:f8:d8:fc:bb:ae:c4:20:
                    30:fa:78:40:b4:e6:5c:4d:19:7b:2d:42:a6:1a:35:
                    a5:b2:9a:f3:c7:39:42:35:7c:b3:4d:19:5a:d6:a9:
                    36:d2:b7:f8:a7:a9:a7:88:4a:7c:ac:ec:ad:95:bd:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:86:70:80:71:9E:0D:6E:9A:F7:8A:47:D3:1C:C1:89:20:AF:DC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3134312e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:4e:2c:d9:b6:77:f1:51:a3:1b:c5:a9:b2:e5:c5:fd:c5:
         5d:1d:a7:0e:9a:c3:a0:0b:00:2f:a7:c0:b2:15:8f:33:7a:0c:
         bf:b4:f5:2d:e5:f8:b8:da:c3:1d:3c:a8:b1:95:d8:28:e7:82:
         57:62:b9:f3:62:79:c8:43:a0:28:3b:18:a0:a9:69:a2:8e:9c:
         79:0d:fd:48:97:6c:01:1d:14:d9:1d:0d:34:d2:90:6f:df:18:
         3b:70:5a:ae:03:1a:fd:ac:a7:ae:11:61:40:c5:94:cf:7d:31:
         78:63:74:b5:23:5a:e4:a0:e2:1e:5c:4e:72:2d:ed:52:28:49:
         87:ed:40:6c:81:f2:ca:26:91:48:8f:b6:f5:76:ba:32:16:e9:
         dc:5c:24:42:33:d3:ca:d6:28:06:60:55:83:28:99:e3:18:cb:
         e5:43:51:e7:58:44:56:3a:91:45:f4:80:dc:bc:29:67:5f:1e:
         77:fc:02:c6:62:c6:87:ca:f4:92:2f:24:8e:af:16:ee:8f:3e:
         d4:5f:59:b0:d2:60:fe:3e:ee:9b:29:f8:ec:e9:6c:30:b6:03:
         c8:44:72:28:68:23:34:f7:31:bf:51:18:49:e5:31:eb:44:13:
         ac:b2:c5:22:cd:16:e9:02:83:a0:46:8b:73:16:75:65:74:6b:
         0b:50:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----