Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          PhomMeAKFSl6rsc71l6+AUScOJifPEakbUqGzxHZdes=
Subject key identifier:   AC:DC:B5:5A:98:03:47:2D:AE:82:94:51:2D:3E:F0:A6:C1:36:E8:98
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C248FB8A39DF5C4F84A565648D77DE778049724
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:24:8f:b8:a3:9d:f5:c4:f8:4a:56:56:48:d7:7d:e7:78:04:97:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject: CN=3082010A0282010100C9B5B4B9DD1A9902FA836847DB74C36BAEE2F3AE7C2AAC42D467631FF05F9B7FF6C36C541CF09E18D360E0670D2E5EB682EB8C3D337395D7F7142B9BC216FC900154C854C69444CCC9121210C76398A63CE83972A2F1BA1A1380424F7E0955FCB1FA1152B138405788588BE90E4E2A45C8A132230FD9D0D11D084C08171A1FDFE340259E68F891CA7BE4ED0653E7D72AA6B71BF8DBB65EABD8A68192A2AC5DB5DF5EA6B1F8189B6D362318140E868E71205BB4084B7B8DB27AF42B33E5900C6EAAC3700F9468D97B89F1D89B3B6E3FD8C077788EC7DCA988CB92383BE2C10332556FA05BE99577FDEC2182CCC28BD7CF6D13FCBA7D382F3F891935312140F0A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:b4:b9:dd:1a:99:02:fa:83:68:47:db:74:
                    c3:6b:ae:e2:f3:ae:7c:2a:ac:42:d4:67:63:1f:f0:
                    5f:9b:7f:f6:c3:6c:54:1c:f0:9e:18:d3:60:e0:67:
                    0d:2e:5e:b6:82:eb:8c:3d:33:73:95:d7:f7:14:2b:
                    9b:c2:16:fc:90:01:54:c8:54:c6:94:44:cc:c9:12:
                    12:10:c7:63:98:a6:3c:e8:39:72:a2:f1:ba:1a:13:
                    80:42:4f:7e:09:55:fc:b1:fa:11:52:b1:38:40:57:
                    88:58:8b:e9:0e:4e:2a:45:c8:a1:32:23:0f:d9:d0:
                    d1:1d:08:4c:08:17:1a:1f:df:e3:40:25:9e:68:f8:
                    91:ca:7b:e4:ed:06:53:e7:d7:2a:a6:b7:1b:f8:db:
                    b6:5e:ab:d8:a6:81:92:a2:ac:5d:b5:df:5e:a6:b1:
                    f8:18:9b:6d:36:23:18:14:0e:86:8e:71:20:5b:b4:
                    08:4b:7b:8d:b2:7a:f4:2b:33:e5:90:0c:6e:aa:c3:
                    70:0f:94:68:d9:7b:89:f1:d8:9b:3b:6e:3f:d8:c0:
                    77:78:8e:c7:dc:a9:88:cb:92:38:3b:e2:c1:03:32:
                    55:6f:a0:5b:e9:95:77:fd:ec:21:82:cc:c2:8b:d7:
                    cf:6d:13:fc:ba:7d:38:2f:3f:89:19:35:31:21:40:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:B5:5A:98:03:47:2D:AE:82:94:51:2D:3E:F0:A6:C1:36:E8:98
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:fd:ec:ec:ae:41:9f:ee:71:eb:52:fc:65:13:08:f5:da:
         1f:f8:1b:61:6b:7a:90:38:7a:f1:b6:5a:12:58:8a:87:83:47:
         0c:e6:69:79:1d:61:b1:fe:45:64:c6:5f:e9:bd:6c:a6:40:55:
         cf:2e:57:13:09:e3:ce:95:80:70:09:ec:2a:ad:9e:57:78:15:
         c8:5f:e7:96:e6:b1:2d:04:2d:b5:01:60:ff:a7:19:ea:56:ab:
         01:33:3e:29:b6:bb:c9:f2:02:a5:60:d7:f4:14:f6:53:52:23:
         5c:b3:cf:15:08:cb:7a:86:30:7a:a3:d8:3c:bd:95:3b:88:a2:
         74:4b:74:12:cb:36:84:7e:e9:57:ed:b2:80:33:99:ad:fe:fc:
         9d:44:3b:c2:8d:2f:bf:b0:3f:c3:b5:f7:a3:35:c2:95:aa:a5:
         56:89:a9:68:94:0f:60:12:0b:8f:14:a2:45:a8:26:6a:4d:e7:
         f2:e4:e9:81:62:c0:5f:b3:57:ab:e9:3e:d8:14:35:b0:74:06:
         28:ce:d1:e5:18:17:2d:fe:53:6b:08:15:96:a7:3d:d0:d8:f0:
         c2:3f:5a:e7:5e:f1:fc:d6:87:f0:ae:5c:12:ca:d5:ac:fa:f3:
         05:24:13:2c:0d:6d:71:cc:ff:a8:ff:e9:37:8e:61:eb:cd:49:
         d0:8c:48:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----