Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e33362e302f32342d3234203d3e20313336383431.roa
File:                     3130332e3135312e33362e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier:          Wwb7cxvo4m8Y/BtX4fI2be3eL46+si3e18XOWoQHXi8=
Subject key identifier:   58:4D:8D:FD:96:49:D7:E5:1F:BF:BB:95:E6:8A:4E:F1:1D:8D:E7:A1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       110715D108CA8EA8B03F8B33D2ABF7CE1FFC5673
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e33362e302f32342d3234203d3e20313336383431.roa
Signing time:             Tue 29 Jun 2021 02:58:38 +0000
ROA not before:           Tue 29 Jun 2021 02:53:38 +0000
ROA not after:            Wed 29 Jun 2022 02:58:38 +0000
asID:                     136841
IP address blocks:        103.151.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:07:15:d1:08:ca:8e:a8:b0:3f:8b:33:d2:ab:f7:ce:1f:fc:56:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 02:53:38 2021 GMT
            Not After : Jun 29 02:58:38 2022 GMT
        Subject: CN=3082010A0282010100A5A74079C61AED5190830BBFD15D6A933D62F38EF89DD40AC8BEA91BAA7015C829EAFFBBCB3229443BCF040B698FFE83D7A65EFC2D3D78578A0313855CDF341EF7B959FE95EACF67710BA680701ABCFFD8E2D1414AB4C2D94A72CAB2BDC3C8745026A187403F079B70F7ED747A6EAA4AC94D0E3BFE56390FBED400AC974E14DE8920CAA793E06B8A66119D6D5137B348E88C14796539833EC1A27D42EC98B34B0729EE8C292D18CECCA2A29417D3464174D8EDE339AA6DEB74C0E371747676CBCBBE746887E7F0C969F872BAC7A8DD9AADA0962D802528E77E0249410657D51AF1A2765A1953CA040C83015BF05D227AFB39E87DF903299DC64B5A93B4D8674D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:40:79:c6:1a:ed:51:90:83:0b:bf:d1:5d:
                    6a:93:3d:62:f3:8e:f8:9d:d4:0a:c8:be:a9:1b:aa:
                    70:15:c8:29:ea:ff:bb:cb:32:29:44:3b:cf:04:0b:
                    69:8f:fe:83:d7:a6:5e:fc:2d:3d:78:57:8a:03:13:
                    85:5c:df:34:1e:f7:b9:59:fe:95:ea:cf:67:71:0b:
                    a6:80:70:1a:bc:ff:d8:e2:d1:41:4a:b4:c2:d9:4a:
                    72:ca:b2:bd:c3:c8:74:50:26:a1:87:40:3f:07:9b:
                    70:f7:ed:74:7a:6e:aa:4a:c9:4d:0e:3b:fe:56:39:
                    0f:be:d4:00:ac:97:4e:14:de:89:20:ca:a7:93:e0:
                    6b:8a:66:11:9d:6d:51:37:b3:48:e8:8c:14:79:65:
                    39:83:3e:c1:a2:7d:42:ec:98:b3:4b:07:29:ee:8c:
                    29:2d:18:ce:cc:a2:a2:94:17:d3:46:41:74:d8:ed:
                    e3:39:aa:6d:eb:74:c0:e3:71:74:76:76:cb:cb:be:
                    74:68:87:e7:f0:c9:69:f8:72:ba:c7:a8:dd:9a:ad:
                    a0:96:2d:80:25:28:e7:7e:02:49:41:06:57:d5:1a:
                    f1:a2:76:5a:19:53:ca:04:0c:83:01:5b:f0:5d:22:
                    7a:fb:39:e8:7d:f9:03:29:9d:c6:4b:5a:93:b4:d8:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:8D:FD:96:49:D7:E5:1F:BF:BB:95:E6:8A:4E:F1:1D:8D:E7:A1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e33362e302f32342d3234203d3e20313336383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:02:d7:de:a2:b6:04:b3:34:58:b8:ca:8b:a8:7e:d2:37:
         7f:eb:75:97:fb:8e:76:b2:23:2b:00:bb:14:ba:74:5d:2f:f4:
         6c:0f:f8:b9:53:bc:df:f6:de:85:86:ae:16:3a:ad:57:ba:ec:
         b3:97:ef:ad:5e:00:ef:f0:41:e3:2c:6e:78:30:52:c1:6d:b1:
         1b:84:60:28:b2:19:28:69:18:46:79:b2:b1:31:26:d2:a1:df:
         7f:a8:38:db:8a:a8:da:5a:b6:d5:2b:a4:15:1c:da:54:99:4a:
         b3:82:ae:cc:e5:c9:a6:2e:8e:1f:67:77:46:da:1c:1b:41:28:
         b8:a7:3b:f1:14:be:29:1f:e9:00:9d:b8:2e:57:d1:bb:ac:a3:
         dc:d7:23:0d:12:8c:db:25:7b:96:71:05:b0:27:1b:05:7b:15:
         63:f6:7b:ba:70:92:bc:64:b6:7c:f2:7f:99:c3:a9:e9:91:b5:
         1d:38:48:0e:38:aa:cd:8f:12:d7:5b:ba:a3:99:f1:f2:93:a5:
         b2:f8:b0:f3:32:ac:cd:61:26:3f:92:0b:99:5d:de:42:41:0a:
         21:9e:aa:32:3d:cb:91:3a:68:93:64:ce:af:c3:eb:77:70:be:
         e0:ef:92:22:99:7e:d9:ea:87:15:73:7c:e7:58:40:f7:65:e7:
         9b:4a:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----