Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37362e302f32332d3234203d3e20313430343831.roa
File:                     3130332e3135342e37362e302f32332d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          y+cZP7D5OtUVZs61JhdWYbrcg2q6eYopwAFdgw9Om78=
Subject key identifier:   38:AA:A0:44:1A:24:63:A9:87:9D:F3:86:F1:9D:6C:48:24:4E:FC:04
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       43B749DEE7F7BCCB61B6DE84BA0C3B0AF69D99A9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37362e302f32332d3234203d3e20313430343831.roa
Signing time:             Thu 29 Jul 2021 04:40:35 +0000
ROA not before:           Thu 29 Jul 2021 04:35:35 +0000
ROA not after:            Fri 29 Jul 2022 04:40:35 +0000
asID:                     140481
IP address blocks:        103.154.76.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b7:49:de:e7:f7:bc:cb:61:b6:de:84:ba:0c:3b:0a:f6:9d:99:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 29 04:35:35 2021 GMT
            Not After : Jul 29 04:40:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:4f:55:9c:5c:90:b1:8c:23:90:6c:85:d4:
                    f1:91:00:4f:96:ad:1e:0d:91:9c:e1:40:62:29:70:
                    27:bc:2f:50:44:fe:08:8a:5a:ef:6c:b2:7f:85:86:
                    6f:f7:55:0e:1b:6e:2d:05:13:23:fd:23:a4:2a:46:
                    1d:5c:bc:ad:94:1e:93:00:a1:f9:96:b3:53:22:9f:
                    bc:cf:de:0f:d3:8b:13:54:6d:6e:f7:e0:35:b5:78:
                    b3:58:d7:40:c5:8e:51:f9:1d:ab:e0:ec:2b:85:83:
                    34:9e:5f:40:30:53:2e:79:57:3b:39:15:4b:2b:e5:
                    20:dd:96:9b:b2:3f:7b:d2:8f:df:c7:6c:2f:e4:ef:
                    8f:19:b1:0c:7d:0a:8a:ab:4f:4a:02:e8:8e:9d:74:
                    20:8c:be:30:2e:e3:4d:64:2f:1e:bf:77:31:c4:a6:
                    be:37:0f:76:40:0a:6e:c4:d7:70:11:53:be:c1:91:
                    97:bb:b2:98:36:d5:c1:fe:9c:48:4d:a9:a7:3d:6a:
                    a0:65:ef:d5:8f:87:29:be:13:a0:87:ec:f0:e8:9d:
                    44:7c:32:99:59:66:d1:f4:55:4c:a1:90:79:ba:b9:
                    6d:f1:3e:88:cc:50:fe:31:2c:5f:c5:59:b2:6b:a9:
                    40:e7:3c:e2:b4:d7:31:63:78:42:0b:d5:0b:cf:91:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AA:A0:44:1A:24:63:A9:87:9D:F3:86:F1:9D:6C:48:24:4E:FC:04
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37362e302f32332d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:20:8a:b2:80:7d:a9:4d:85:32:d0:6c:ee:c9:f4:5f:59:29:
         23:e1:6a:b9:9f:cb:62:0b:bc:b3:6e:4a:68:d7:9a:ec:a8:b3:
         ae:e3:f7:6a:ef:6c:b0:79:ed:9c:40:22:d3:e3:14:bd:b6:0a:
         7a:20:84:0c:ac:02:d3:3a:b1:8c:c2:7b:1d:23:36:6a:f8:c9:
         a2:b7:84:8f:a9:63:80:61:e9:57:45:d7:5f:12:6f:9d:fd:8b:
         46:7e:18:02:f7:c9:1a:5e:f1:f9:3e:0a:04:c5:23:5d:21:32:
         10:f6:c3:90:53:0c:57:42:75:27:7a:95:0c:b8:7b:37:06:aa:
         53:ca:8c:9a:b8:02:e4:0b:eb:29:c0:ef:b8:8f:68:cf:79:c9:
         ea:98:99:4d:e8:06:4d:0d:d9:ef:e3:b5:f6:6d:b7:0a:17:ab:
         a8:db:41:d8:58:4c:f5:9c:9f:d4:e8:ae:8e:4c:52:0b:73:4b:
         a5:c1:a7:a7:ee:e0:2f:2b:bf:5f:77:62:e8:bc:7c:f7:0b:50:
         0d:59:4b:5c:75:e8:02:c5:59:d5:4e:f0:c9:ca:9c:13:65:55:
         f0:92:d3:cf:69:56:80:5c:1b:0c:a4:95:d3:a5:f6:c0:fb:dd:
         39:2b:eb:2a:b9:7f:be:eb:79:73:15:fb:26:e9:5f:b3:90:46:
         76:52:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----