Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3134302e302f32332d3234203d3e20313431303932.roa
File:                     3130332e3135362e3134302e302f32332d3234203d3e20313431303932.roa (raw, json)
Hash identifier:          22mTssYKwy42mwyjWrhUNCwpp/xo3gmhiy27RT8z7Uo=
Subject key identifier:   4B:F9:84:92:C7:70:99:AB:4B:60:4E:DB:93:1C:AD:98:55:E6:AC:0D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7EC9DD1A0CFDF9EEF698C4745D762A1DAFECDEE9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3134302e302f32332d3234203d3e20313431303932.roa
Signing time:             Mon 26 Jul 2021 09:28:34 +0000
ROA not before:           Mon 26 Jul 2021 09:23:34 +0000
ROA not after:            Tue 26 Jul 2022 09:28:34 +0000
asID:                     141092
IP address blocks:        103.156.140.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:dd:1a:0c:fd:f9:ee:f6:98:c4:74:5d:76:2a:1d:af:ec:de:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 26 09:23:34 2021 GMT
            Not After : Jul 26 09:28:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:7d:e1:a6:4a:a6:f6:d0:f9:9d:50:87:64:
                    09:2b:2e:81:14:34:99:37:ab:36:e3:21:21:fa:60:
                    e6:49:e9:f3:ca:59:c6:e7:4b:1f:99:25:71:26:99:
                    2f:2e:5b:b1:40:e5:21:ac:f9:1c:af:39:6a:82:66:
                    db:98:96:ad:f6:42:8e:5a:b7:3b:6e:32:79:80:b1:
                    d6:bb:cd:15:fe:3b:6e:2c:40:7a:c7:b0:b1:cb:4e:
                    b4:b3:4d:86:9b:d9:5e:b9:ef:dc:66:bc:0a:15:93:
                    bb:1b:81:80:da:8e:ec:7f:db:d2:4c:13:3e:35:47:
                    91:fc:ca:53:51:22:97:5b:dc:16:35:b5:7c:87:57:
                    62:ed:dd:55:8d:9f:51:00:04:67:6d:e6:79:88:18:
                    40:d9:c4:f4:82:14:50:85:63:96:48:96:a0:c7:3b:
                    e6:c0:39:75:5b:54:90:c5:0b:57:56:64:8f:30:26:
                    32:75:47:74:8d:42:35:a7:e0:24:36:e8:17:fb:c5:
                    11:15:66:39:eb:7f:69:5b:42:70:ac:71:fb:ce:d7:
                    83:44:08:9b:81:3b:1d:be:7a:70:f5:b7:d0:1f:b1:
                    88:09:94:77:60:27:76:c7:1a:8a:48:c3:cf:98:2e:
                    20:59:73:00:07:d2:22:3f:8b:10:33:7a:ef:12:f8:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:84:92:C7:70:99:AB:4B:60:4E:DB:93:1C:AD:98:55:E6:AC:0D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3134302e302f32332d3234203d3e20313431303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:a9:80:62:fe:c7:33:2f:50:c5:2a:8b:61:66:26:47:cd:
         6e:4f:7c:a7:a8:4a:10:83:50:64:17:7a:cc:a5:a3:e3:a9:c9:
         52:a3:f8:c7:82:63:32:25:48:f1:1a:b1:b2:60:3b:24:4f:99:
         ea:ca:3a:6a:cb:bc:07:66:a6:c3:e5:6b:c3:3a:94:c7:2d:1a:
         5a:f7:06:17:18:18:ee:2f:ff:d0:62:c3:cc:35:15:a5:6f:b0:
         b1:f4:56:a6:aa:91:fe:d6:a8:d3:55:a6:5a:73:a5:86:3f:b0:
         8a:e1:0a:49:5a:67:67:6a:b3:33:4e:37:97:26:69:cf:8d:d6:
         06:3d:7d:33:89:55:3e:9f:12:5c:f0:4e:40:28:c4:1e:a6:83:
         42:42:4c:ab:b3:95:f3:71:d1:b3:ca:02:24:62:6f:00:f7:56:
         88:4e:62:18:cc:26:cc:dc:9e:6b:d4:83:14:4e:5c:eb:82:42:
         9d:06:bd:3c:40:eb:65:d1:67:c7:5f:ad:db:d1:97:17:e1:f1:
         c2:59:24:f6:6a:25:6e:92:ae:9e:60:b3:e1:60:e1:79:6e:1c:
         47:2d:7c:e5:7a:4c:8f:93:5e:3b:25:d4:1a:42:73:2e:0a:83:
         98:83:08:12:34:45:14:8d:10:a1:eb:89:ad:bd:80:8b:c9:d3:
         f1:6a:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----