Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3231382e302f32332d3234203d3e203538343935.roa
File:                     3130332e3135312e3231382e302f32332d3234203d3e203538343935.roa (raw, json)
Hash identifier:          3qjXv3fRW+CCHgK8DwHEvq32CAioiGSOLRZRYfsnXwQ=
Subject key identifier:   2A:D0:E6:C7:B3:DC:12:61:B6:79:70:F7:38:9D:6E:82:46:60:2A:E6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16B3ABCD518722BF06C6A0923E39343554219D51
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3231382e302f32332d3234203d3e203538343935.roa
Signing time:             Tue 20 Apr 2021 02:32:34 +0000
ROA not before:           Tue 20 Apr 2021 02:27:34 +0000
ROA not after:            Wed 20 Apr 2022 02:32:34 +0000
asID:                     58495
IP address blocks:        103.151.218.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:ab:cd:51:87:22:bf:06:c6:a0:92:3e:39:34:35:54:21:9d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 20 02:27:34 2021 GMT
            Not After : Apr 20 02:32:34 2022 GMT
        Subject: CN=3082010A0282010100C30118D91103A1DC62D8AFED3FC9C97A526048E88CE7110B0AB454A9250B1613C8E4BED4EB7FBD96725D3473EBCCCCEFB721E93408A2C7C51D4C6D98CFE305C40F2B9AAD99A1B7CEFEBBAD62CAC09CF12104073D2B9DE523C5E043988E7143149616564006A27BA740112290AAC81366F627DBB3E64FD4834AEAF5F8637B7BFBF82280699ECB5425A9903A21F4BA862D738C390DBDD7C5A97BAE7D35CA081A012D6F67CADF68465CB925D0FA5C97660A1D691ED7B91D88FF51276522A06798EA248DF80E6BB43C43BC09FBAE87EF12C40067CA0627393EDA1FA0207F91D02605DCC315960E0E228139B0F6897E0576B69ACAF3A56F701A8CE81255C65E92FE4F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:18:d9:11:03:a1:dc:62:d8:af:ed:3f:c9:
                    c9:7a:52:60:48:e8:8c:e7:11:0b:0a:b4:54:a9:25:
                    0b:16:13:c8:e4:be:d4:eb:7f:bd:96:72:5d:34:73:
                    eb:cc:cc:ef:b7:21:e9:34:08:a2:c7:c5:1d:4c:6d:
                    98:cf:e3:05:c4:0f:2b:9a:ad:99:a1:b7:ce:fe:bb:
                    ad:62:ca:c0:9c:f1:21:04:07:3d:2b:9d:e5:23:c5:
                    e0:43:98:8e:71:43:14:96:16:56:40:06:a2:7b:a7:
                    40:11:22:90:aa:c8:13:66:f6:27:db:b3:e6:4f:d4:
                    83:4a:ea:f5:f8:63:7b:7b:fb:f8:22:80:69:9e:cb:
                    54:25:a9:90:3a:21:f4:ba:86:2d:73:8c:39:0d:bd:
                    d7:c5:a9:7b:ae:7d:35:ca:08:1a:01:2d:6f:67:ca:
                    df:68:46:5c:b9:25:d0:fa:5c:97:66:0a:1d:69:1e:
                    d7:b9:1d:88:ff:51:27:65:22:a0:67:98:ea:24:8d:
                    f8:0e:6b:b4:3c:43:bc:09:fb:ae:87:ef:12:c4:00:
                    67:ca:06:27:39:3e:da:1f:a0:20:7f:91:d0:26:05:
                    dc:c3:15:96:0e:0e:22:81:39:b0:f6:89:7e:05:76:
                    b6:9a:ca:f3:a5:6f:70:1a:8c:e8:12:55:c6:5e:92:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D0:E6:C7:B3:DC:12:61:B6:79:70:F7:38:9D:6E:82:46:60:2A:E6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3231382e302f32332d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:b2:b7:dd:72:08:3d:a1:90:96:78:ac:3a:e4:2e:1a:e2:
         4c:30:e7:33:de:08:35:2b:1d:f9:27:88:f3:b3:12:95:ad:40:
         3f:7e:cb:7d:76:1a:6f:6e:b5:c4:bb:73:26:b1:af:17:f7:8a:
         38:10:2b:6d:2d:cf:f7:49:c0:e4:b9:4c:3c:ac:73:42:37:88:
         9b:1b:3b:9f:d1:59:c3:2e:3a:d0:01:4c:ac:76:a9:be:97:55:
         d8:fc:42:02:1f:70:de:a3:ca:c3:96:b1:14:95:b1:9e:a6:e7:
         06:79:fb:58:b7:bf:f5:ba:da:2a:30:dd:d5:86:d1:9e:ff:b0:
         32:bf:27:5a:2d:32:b4:92:d7:20:c8:0c:9b:f5:20:2d:47:5c:
         92:8a:77:b5:86:eb:9c:35:c6:63:01:d0:75:fe:54:c9:e9:f1:
         98:57:cd:81:90:0f:2a:67:d4:b2:fd:ab:49:67:76:b1:d0:f1:
         dd:be:2c:cd:a8:ef:d2:84:b6:c4:83:a3:d6:64:ca:7d:36:ca:
         1d:67:e2:24:9d:b1:e5:81:13:ba:6f:32:b9:59:d0:cd:ca:07:
         e8:11:18:e3:10:65:ce:bd:d0:af:68:93:c8:1d:bf:80:20:31:
         5d:d1:17:4e:89:d2:a4:85:2c:98:9c:0c:4c:a5:33:74:08:16:
         e2:1f:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----