Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e32322e302f32332d3234203d3e20313431353930.roa
File:                     3130332e3135382e32322e302f32332d3234203d3e20313431353930.roa (raw, json)
Hash identifier:          l+zMw5Rw4fANemWiWf1b7u2/dpV+WBxxurHFzh0Saew=
Subject key identifier:   E7:69:45:44:D1:AD:1E:D4:D6:89:F2:75:7C:7A:8E:18:E5:9F:48:9E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       62DDFF763EAF5E0BA3D69343322120EAF95CA266
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e32322e302f32332d3234203d3e20313431353930.roa
Signing time:             Fri 18 Jun 2021 07:31:19 +0000
ROA not before:           Fri 18 Jun 2021 07:26:19 +0000
ROA not after:            Sat 18 Jun 2022 07:31:19 +0000
asID:                     141590
IP address blocks:        103.158.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:dd:ff:76:3e:af:5e:0b:a3:d6:93:43:32:21:20:ea:f9:5c:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 18 07:26:19 2021 GMT
            Not After : Jun 18 07:31:19 2022 GMT
        Subject: CN=3082010A0282010100C3015278514BF2D4A8E0BCE9B5F4850B0A7A4D8D7720A58F359784C8CBB908491FB9C91ACDFF78398FE795B05DAFD60DE03A8100B4CB7D28922131372497F38FC54B4C9149CC792BCB9B805130CFE76FB1CC43B3C685C53994947E1563B142173C14984C020BD18CA16A2D065E64E2333221114DF897A0685F54559E00C9AF62C0DA1804A827D0B1C52DB4A42DABC13956AB648296468E8479260EA4D18CAFDCBE7EBAF3867F3479F0F6FCFF024AB3BC24CAB87EA1DA735DBB602AB0BEDAA0DF496FCF010ED49DFF263362819D82F453264303FB55841B3F03EE97619A67C6ECEB5DB8C7CB9990866283993D3D7E37937F2A61D2F7EC019FCEDFF091B48604AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:52:78:51:4b:f2:d4:a8:e0:bc:e9:b5:f4:
                    85:0b:0a:7a:4d:8d:77:20:a5:8f:35:97:84:c8:cb:
                    b9:08:49:1f:b9:c9:1a:cd:ff:78:39:8f:e7:95:b0:
                    5d:af:d6:0d:e0:3a:81:00:b4:cb:7d:28:92:21:31:
                    37:24:97:f3:8f:c5:4b:4c:91:49:cc:79:2b:cb:9b:
                    80:51:30:cf:e7:6f:b1:cc:43:b3:c6:85:c5:39:94:
                    94:7e:15:63:b1:42:17:3c:14:98:4c:02:0b:d1:8c:
                    a1:6a:2d:06:5e:64:e2:33:32:21:11:4d:f8:97:a0:
                    68:5f:54:55:9e:00:c9:af:62:c0:da:18:04:a8:27:
                    d0:b1:c5:2d:b4:a4:2d:ab:c1:39:56:ab:64:82:96:
                    46:8e:84:79:26:0e:a4:d1:8c:af:dc:be:7e:ba:f3:
                    86:7f:34:79:f0:f6:fc:ff:02:4a:b3:bc:24:ca:b8:
                    7e:a1:da:73:5d:bb:60:2a:b0:be:da:a0:df:49:6f:
                    cf:01:0e:d4:9d:ff:26:33:62:81:9d:82:f4:53:26:
                    43:03:fb:55:84:1b:3f:03:ee:97:61:9a:67:c6:ec:
                    eb:5d:b8:c7:cb:99:90:86:62:83:99:3d:3d:7e:37:
                    93:7f:2a:61:d2:f7:ec:01:9f:ce:df:f0:91:b4:86:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:45:44:D1:AD:1E:D4:D6:89:F2:75:7C:7A:8E:18:E5:9F:48:9E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e32322e302f32332d3234203d3e20313431353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:62:e7:af:75:2a:76:de:c0:01:56:60:9f:82:9a:9c:59:
         88:4d:fd:49:c7:6d:77:b3:4e:37:cd:e3:6f:82:1f:db:59:27:
         20:bc:19:4c:47:2e:2a:47:40:71:af:96:9e:5b:8e:fe:d7:6a:
         dd:9a:44:df:f7:51:80:74:df:1b:03:95:df:f3:54:e3:fb:e4:
         b7:9d:b3:91:e5:a3:91:f4:73:f9:09:fe:37:67:6b:3c:23:c8:
         83:1d:0b:17:a3:36:a6:6a:5d:6f:85:44:a4:ab:8d:5d:a5:28:
         f6:79:bd:b1:5f:26:fb:11:0b:b9:5d:14:b9:7b:1f:03:c4:84:
         f2:53:d1:bb:fe:00:ee:70:48:7c:44:15:19:d4:ce:0f:34:5b:
         0b:49:df:1f:4e:21:e8:ca:7a:b3:d0:0f:ef:d5:bd:34:52:f4:
         ee:cf:87:38:fc:3f:e5:86:f7:94:aa:0e:7b:01:de:51:85:29:
         2d:7c:0a:45:36:3c:1c:94:e0:8b:13:77:5d:41:2e:53:73:89:
         db:7c:b4:68:8a:ed:9f:c7:a3:3d:b5:40:2a:85:9e:b1:72:2f:
         00:ee:1d:d0:32:0a:90:9c:5c:53:9c:f7:1c:40:a6:2e:eb:50:
         e9:32:81:f8:f4:41:4c:2b:6e:d4:85:00:14:05:13:97:44:06:
         e1:1c:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----