Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e35362e302f32332d3234203d3e203137383834.roa
File:                     3130332e3135382e35362e302f32332d3234203d3e203137383834.roa (raw, json)
Hash identifier:          RQKuKVBhLsO4bfmkPTlHCWOA6Q/McYnw3lde5F8CKpg=
Subject key identifier:   F8:6A:38:AD:83:AA:90:24:C4:F2:6E:C6:B7:88:68:9D:C4:77:CE:EA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7DE1CE4603BDF7599FE7572FA0D58E11C5291248
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e35362e302f32332d3234203d3e203137383834.roa
Signing time:             Thu 30 Sep 2021 04:34:33 +0000
ROA not before:           Thu 30 Sep 2021 04:29:33 +0000
ROA not after:            Fri 30 Sep 2022 04:34:33 +0000
asID:                     17884
IP address blocks:        103.158.56.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:ce:46:03:bd:f7:59:9f:e7:57:2f:a0:d5:8e:11:c5:29:12:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 30 04:29:33 2021 GMT
            Not After : Sep 30 04:34:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:5d:5d:a8:79:92:46:a0:f9:8b:28:d4:07:
                    e5:9b:da:62:0f:55:e7:cc:3b:79:19:f7:16:8f:a7:
                    2f:64:36:ad:9e:d0:27:a8:85:e2:c7:9a:96:98:81:
                    3e:5f:c5:6e:1f:76:1a:54:de:7b:55:09:4e:b8:94:
                    2c:18:4d:31:b9:a1:2b:64:5f:da:59:38:c8:d3:92:
                    25:10:78:aa:27:5c:3d:8d:a3:b4:a5:02:1b:85:fd:
                    61:56:61:84:db:a5:64:0a:1b:94:df:75:1c:32:23:
                    e4:5f:54:e9:7d:6a:5c:06:c1:c7:e4:7e:98:df:d6:
                    fa:d8:75:53:2b:9e:62:c0:ea:b9:58:73:04:ea:11:
                    68:c3:66:c8:a1:10:e5:13:d9:ca:8e:a9:96:1e:87:
                    c6:5b:37:03:c7:f4:36:17:5c:c0:5b:f9:9f:ce:d3:
                    f9:01:e1:36:a4:72:0d:d7:e7:d0:36:dc:5a:bb:f2:
                    eb:1a:78:59:86:6c:10:22:03:9b:54:56:d9:a2:ae:
                    f4:c9:4b:60:c0:75:ed:6d:18:e2:6c:d3:b6:6e:8e:
                    51:f0:2e:f3:7b:fe:79:60:cc:29:8e:48:61:2e:17:
                    c9:85:76:cc:dc:2c:24:d7:31:dc:52:f5:52:e0:c7:
                    75:77:52:60:1b:4d:cb:3f:81:bd:3c:de:6c:68:85:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:38:AD:83:AA:90:24:C4:F2:6E:C6:B7:88:68:9D:C4:77:CE:EA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135382e35362e302f32332d3234203d3e203137383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:47:cc:fb:53:56:34:ff:d5:ec:9e:10:c6:c7:a3:f5:a5:88:
         f5:6e:c3:5d:c7:75:ae:34:95:6c:d9:fc:a8:19:0f:47:eb:83:
         af:a4:66:2f:db:5a:89:7f:d8:a9:13:ad:a9:f5:3c:c5:56:e9:
         39:93:d5:0e:88:f0:94:cb:a3:a6:c9:37:c4:1a:3d:69:91:f3:
         50:3f:de:64:55:18:0b:7d:60:86:04:9a:51:9b:38:be:73:f0:
         37:b7:6b:82:5f:d0:e9:a6:95:a8:8a:49:ac:04:99:d3:ed:d1:
         0d:44:bc:32:96:ac:28:29:99:c1:fc:f2:6e:74:d1:7a:4d:73:
         70:0a:07:9e:c8:4b:67:2c:fe:9a:88:cb:2e:e9:23:b7:40:0e:
         c9:37:c9:de:49:cb:f9:20:e1:e2:cb:6b:d0:c5:78:c2:7e:84:
         e0:ac:65:72:55:98:aa:5e:12:f0:e8:95:9a:11:00:ae:71:dd:
         40:22:f9:bd:be:2e:a8:40:c8:d1:ca:41:d6:3b:87:e1:8e:e4:
         62:dd:36:15:bb:90:72:34:73:46:4f:50:fc:a5:a1:f2:84:63:
         a8:b2:a3:97:a8:07:a2:5b:a3:86:b0:02:bd:52:8a:fd:9e:90:
         91:92:44:20:40:1d:46:f4:c9:e4:9c:12:a0:ca:c0:d2:d7:58:
         4e:3e:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----