Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3232362e302f32332d3234203d3e203435373031.roa
File:                     3130332e3135362e3232362e302f32332d3234203d3e203435373031.roa (raw, json)
Hash identifier:          oP/YRZehT6NHI4qElmKo2Z3A1R50ezkC29upJLVQgKM=
Subject key identifier:   B4:25:82:05:9A:02:29:06:BD:E6:1A:54:DF:C1:95:62:7F:91:73:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54F0403A000F7C334518D1FD2ACEE9DC7C3ECCAB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3232362e302f32332d3234203d3e203435373031.roa
Signing time:             Mon 19 Jul 2021 03:52:49 +0000
ROA not before:           Mon 19 Jul 2021 03:47:49 +0000
ROA not after:            Tue 19 Jul 2022 03:52:49 +0000
asID:                     45701
IP address blocks:        103.156.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f0:40:3a:00:0f:7c:33:45:18:d1:fd:2a:ce:e9:dc:7c:3e:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 19 03:47:49 2021 GMT
            Not After : Jul 19 03:52:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:df:6b:63:45:64:43:60:92:aa:70:a4:52:
                    20:6a:af:67:ae:08:77:92:7b:f4:df:0f:dd:ec:7c:
                    2b:ea:6d:d4:23:85:36:39:b1:c3:7d:5c:d4:4e:af:
                    7c:89:3e:06:81:9d:07:69:99:fd:2b:8d:01:dd:56:
                    d1:68:f1:f6:b8:97:c0:b5:94:da:ea:ec:31:05:63:
                    30:31:37:ca:a1:35:b4:e0:a2:2e:c6:a8:45:cc:2e:
                    3c:78:29:1a:86:b4:c8:f4:13:17:d5:ee:9b:32:a0:
                    6f:a6:20:dd:8f:06:6d:06:66:37:54:d9:7d:93:bb:
                    1a:25:41:3c:e9:da:b8:ad:ae:16:e1:44:07:a4:9a:
                    c7:0f:58:65:86:24:7a:34:6a:4a:c8:8c:0a:f9:67:
                    07:ed:fc:92:70:dd:0e:ca:85:0e:39:2e:05:fe:5a:
                    c0:3a:94:d2:30:14:18:d7:0d:2b:12:1a:3c:ff:93:
                    a1:23:b1:6a:ac:2a:19:70:09:2c:1b:88:3e:b7:3a:
                    11:8a:37:34:5e:92:13:cc:c9:fc:94:a3:93:4e:96:
                    c1:1f:c8:1e:40:6b:58:25:1c:d1:80:49:b9:a3:21:
                    5d:95:1a:ab:00:29:07:67:41:ee:ac:44:57:07:09:
                    36:d7:ff:1f:a1:31:ce:5b:f9:d7:9f:cf:cb:55:fa:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:82:05:9A:02:29:06:BD:E6:1A:54:DF:C1:95:62:7F:91:73:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3232362e302f32332d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:86:f1:1d:f8:99:e2:36:ab:cb:ec:c0:66:c6:b2:03:ba:
         49:f5:4f:b5:2c:df:38:c9:ba:8b:1c:4a:ad:69:e5:ce:24:ce:
         28:28:f4:d4:b5:bd:02:2c:04:98:08:d2:b7:01:80:0b:64:0d:
         6c:80:4d:5e:6d:f6:be:b8:ae:e9:f2:df:75:46:4b:6c:66:de:
         cb:f9:36:0f:95:34:1b:e0:3e:a4:9e:51:76:15:50:0f:33:f3:
         99:c9:d9:ef:82:4b:89:51:f6:ed:b2:e2:71:34:b1:8d:55:a2:
         1a:86:0c:7f:11:68:06:26:3d:18:60:09:41:b2:d7:a9:2d:c5:
         4f:fc:45:b3:09:9e:25:2c:9d:c8:4f:70:a5:97:23:09:b1:8b:
         61:1b:0c:36:27:4f:df:95:dc:6a:52:5b:1f:d1:4e:d4:73:77:
         73:8b:9e:ad:f0:8e:8f:42:26:79:0d:3b:fe:47:d4:ce:df:cf:
         ca:56:84:5b:7f:b0:6e:5f:6c:5f:d5:cb:a3:07:74:12:11:54:
         17:e4:65:87:24:47:c5:18:a9:29:f5:db:94:bf:19:9c:2d:80:
         49:d2:94:73:04:3e:97:02:e3:52:ad:ce:ef:9c:4c:51:fb:92:
         a0:ae:d3:6c:a7:01:ba:73:75:cb:b4:e8:f2:e7:e5:96:d3:e8:
         47:71:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----