Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3134312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          oSahvjmJhlRPl0uhH6JxCEn3dlNLi6KPN1oMomHA/0o=
Subject key identifier:   61:67:C7:41:84:65:28:1D:47:A5:FC:6E:4F:D3:31:D7:B4:82:91:FA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       53A9521BF8E6F6330659B715E06329F849BC8119
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:12 +0000
ROA not before:           Thu 01 Jul 2021 07:55:12 +0000
ROA not after:            Fri 01 Jul 2022 08:00:12 +0000
asID:                     131111
IP address blocks:        103.154.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a9:52:1b:f8:e6:f6:33:06:59:b7:15:e0:63:29:f8:49:bc:81:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:12 2021 GMT
            Not After : Jul  1 08:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:70:6e:83:b7:f5:0a:df:79:ba:bc:89:0b:
                    70:b9:24:bd:a2:c7:88:0a:38:06:8b:39:66:5c:b8:
                    27:d7:46:88:82:a1:27:18:0c:14:d1:b6:f8:b7:72:
                    81:08:6e:dc:b0:fe:b9:a0:a4:9e:56:94:f4:28:25:
                    0f:af:40:50:51:4a:46:4a:ea:6f:fd:54:67:b2:31:
                    ca:22:fa:aa:08:d4:9b:53:22:8a:50:71:7c:8e:aa:
                    61:93:c7:07:49:8c:e8:6c:56:33:b4:12:e3:b1:b3:
                    b2:8c:b2:3e:71:d3:2a:95:18:ae:67:c6:89:7d:b9:
                    97:61:74:61:2a:51:0d:29:37:37:09:88:81:fc:d7:
                    b9:b7:72:6e:52:53:d3:bd:06:bd:e1:99:2f:30:fc:
                    f1:ec:22:96:c5:c5:c3:c0:15:40:c8:41:51:21:4e:
                    cd:ad:2d:42:45:9d:af:b2:43:84:40:15:b1:1c:e8:
                    0c:c9:7b:aa:01:e8:ce:24:a3:37:51:bd:32:d9:40:
                    05:9e:22:a5:3f:5e:4d:90:bb:64:e9:1c:92:f4:ab:
                    ea:38:13:84:0f:bf:01:2c:1e:08:3c:b8:17:1d:b7:
                    b3:8b:e6:9d:93:49:ef:e0:05:25:1c:02:8b:74:43:
                    d0:84:a7:96:85:2c:52:67:9e:94:4e:5d:d1:7a:d2:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:67:C7:41:84:65:28:1D:47:A5:FC:6E:4F:D3:31:D7:B4:82:91:FA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3134312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:14:9c:9f:34:c3:8d:74:09:6f:ce:ef:a0:a8:2d:86:28:20:
         37:94:8a:08:5a:5c:f1:7c:29:c2:20:d8:69:a5:c5:18:e0:8a:
         f5:75:d2:de:63:63:9b:aa:a6:fd:b5:0e:9c:8d:1b:12:e2:ce:
         c6:fb:f9:cf:7a:a0:fc:c7:f9:b2:97:f2:4c:cf:97:9b:2e:a0:
         49:b0:9e:a0:c2:1f:38:c7:a2:f3:aa:1d:6e:e2:67:aa:53:2e:
         55:46:eb:0c:0c:dd:32:ac:a1:4c:3f:6a:b2:81:d0:c0:92:cb:
         e7:1e:3c:39:c5:1b:14:2d:6e:f5:1b:59:25:27:10:79:b3:40:
         d2:28:b7:dd:16:79:f9:9c:5b:d9:b6:ed:c4:ec:e3:0e:e5:c7:
         b1:d1:aa:79:e9:56:df:2c:74:62:a8:3d:b9:af:d1:57:52:bc:
         67:6a:f5:14:9f:59:d8:9a:46:06:97:61:94:40:ed:d8:f7:23:
         1b:51:25:a8:e8:b8:cd:01:5f:97:5d:7f:75:c1:92:ee:bc:3d:
         c6:da:83:1a:b8:03:70:93:be:25:e3:aa:bb:4d:f7:7b:49:bd:
         fb:4a:56:40:ac:40:a9:89:bf:79:5c:e5:60:08:d6:9c:68:69:
         25:23:39:32:ee:2c:93:16:13:3d:a4:f3:cf:7e:75:ba:24:82:
         2d:94:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----