Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e38302e302f32332d3234203d3e203538333639.roa
File:                     3130332e3135372e38302e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          JwQNOXj6eDtrYmiz45tYkMOItBE4U1J2uiom8TrfjHo=
Subject key identifier:   C6:F1:38:F5:7A:F4:49:78:73:6A:BE:8A:F8:4E:5B:A8:59:73:4D:FD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4170B5BABDD6ADB63B0B04012DD8E7C8A3F76387
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e38302e302f32332d3234203d3e203538333639.roa
Signing time:             Mon 23 Aug 2021 04:02:56 +0000
ROA not before:           Mon 23 Aug 2021 03:57:56 +0000
ROA not after:            Tue 23 Aug 2022 04:02:56 +0000
asID:                     58369
IP address blocks:        103.157.80.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:b5:ba:bd:d6:ad:b6:3b:0b:04:01:2d:d8:e7:c8:a3:f7:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 03:57:56 2021 GMT
            Not After : Aug 23 04:02:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:86:cc:0a:4e:31:d2:76:49:44:05:dc:47:
                    2c:d4:6a:f4:9f:a7:26:4b:08:b5:b3:b7:10:ea:fe:
                    ab:c1:97:b4:32:e2:91:0e:86:51:1d:cc:42:d7:76:
                    44:cc:7c:0d:03:b8:01:92:e7:e3:0d:88:9a:11:9f:
                    c1:6b:ac:42:cc:3b:1a:f3:f2:9e:cd:ee:40:63:91:
                    05:42:db:81:a4:ec:05:15:b7:cb:f6:61:ce:5e:29:
                    97:22:48:79:aa:df:6b:d2:0a:8d:5c:80:58:69:f0:
                    ba:fb:08:15:56:03:ea:80:a1:4f:60:c4:8b:45:4f:
                    da:3c:e0:32:cd:95:07:0d:b6:5a:38:dc:04:12:bd:
                    38:e2:de:cb:2d:e0:d1:ea:1e:a3:9b:fa:46:d9:1b:
                    1a:ef:8d:6b:5a:4e:77:38:c5:b4:44:90:66:55:19:
                    f1:f4:cb:bb:ae:61:7d:a2:21:cf:f0:2a:3c:2c:a4:
                    19:dc:a5:7c:52:92:8e:c7:1e:28:68:df:fc:2c:34:
                    f2:9f:06:6d:68:27:53:ea:b0:6b:fb:85:e7:88:5f:
                    c4:eb:3b:85:0a:ca:59:94:ad:47:5d:71:64:93:03:
                    c2:57:f9:c1:0c:50:a6:12:df:ee:f3:65:1f:aa:5c:
                    86:f0:66:75:83:95:10:33:20:f8:88:10:99:9e:97:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:38:F5:7A:F4:49:78:73:6A:BE:8A:F8:4E:5B:A8:59:73:4D:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e38302e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7d:49:e0:dd:31:51:38:b3:76:bb:58:74:45:0f:a1:89:44:
         3d:8c:5e:8e:d8:30:69:9f:75:78:88:59:76:34:ed:ce:0f:98:
         a7:de:df:f3:77:a6:15:c5:90:a0:f6:8d:39:b5:41:a7:43:66:
         57:09:49:de:5f:88:a8:c3:80:a3:39:dd:85:6d:58:43:06:48:
         1e:6e:0a:f5:43:4b:8a:51:4b:3c:1e:12:3d:5a:cf:92:95:20:
         45:f9:aa:ea:9a:32:75:6c:4d:45:7c:c7:e4:63:ae:8a:8b:f5:
         08:28:a0:29:13:61:6f:bb:46:e1:2f:42:57:7c:14:b8:07:bc:
         63:53:c5:a0:cb:af:0d:89:c1:7e:d6:54:dd:82:c3:47:8a:87:
         81:18:02:9b:f6:84:f3:8f:34:52:74:72:a9:b0:17:0c:8c:60:
         57:b4:79:39:dc:6e:11:d0:5d:1e:af:b4:6e:f6:22:02:79:39:
         05:f6:4b:4b:3e:b6:ad:a3:35:7a:03:ac:3f:07:65:4e:a4:fc:
         fd:be:f9:49:12:53:a4:e3:f7:03:15:2e:33:d3:09:f3:66:dd:
         dd:04:a6:d9:ae:31:bf:6c:8d:7a:61:f9:44:ed:00:56:2d:b6:
         37:2a:b2:34:8c:eb:b8:c2:13:fc:18:6a:98:2d:d4:4d:83:eb:
         4d:56:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----