Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36382e302f32332d3234203d3e20313431363037.roa
File:                     3130332e3136302e36382e302f32332d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          E9ldjS/wavj+VHU2HTUdBXAB3z1O4YmkXO394gGr+a4=
Subject key identifier:   46:F5:27:32:CB:DB:84:27:1A:26:10:38:15:3E:94:69:69:E8:07:6E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       64AD365412D9A0E96EA53C76852A93583941F80B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36382e302f32332d3234203d3e20313431363037.roa
Signing time:             Mon 12 Apr 2021 07:25:49 +0000
ROA not before:           Mon 12 Apr 2021 07:20:49 +0000
ROA not after:            Tue 12 Apr 2022 07:25:49 +0000
asID:                     141607
IP address blocks:        103.160.68.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ad:36:54:12:d9:a0:e9:6e:a5:3c:76:85:2a:93:58:39:41:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 12 07:20:49 2021 GMT
            Not After : Apr 12 07:25:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:8f:3e:ed:b4:89:a9:4a:65:21:73:9d:9a:
                    8c:89:18:18:6b:c2:d6:0a:4f:52:09:57:b6:40:c8:
                    58:76:83:2e:f2:a9:9c:89:13:fa:99:47:34:c6:a2:
                    4e:4a:af:55:35:f5:fb:9c:64:4c:5a:90:fe:96:9f:
                    fd:08:6a:8b:85:d4:9f:f6:c8:57:b6:13:f3:cf:07:
                    c3:04:ec:af:c6:e6:22:59:fb:97:12:f3:d4:99:9d:
                    b0:0b:20:c0:d1:9b:49:06:2e:65:25:11:eb:34:01:
                    fe:ad:ca:53:9d:ad:97:f5:75:48:5c:b5:bb:29:e0:
                    91:62:9e:a0:80:2f:fa:b2:87:02:1d:d3:9d:88:d6:
                    ce:3a:3f:f2:74:2e:fc:21:38:2d:36:d8:a2:19:71:
                    08:d7:94:c7:ec:47:26:82:31:6a:64:35:53:f3:0f:
                    dd:fe:68:1b:3b:1f:24:d8:1a:7d:38:b1:c7:bf:0c:
                    d9:89:72:bb:c9:0f:fc:f8:b1:42:1a:d0:30:12:4f:
                    d5:af:4e:92:99:9d:69:ec:ca:f5:7b:1e:d2:dd:4b:
                    91:29:b5:dc:a1:8f:01:c6:ea:66:d9:cc:0b:c6:79:
                    41:6e:3e:7f:35:9e:d6:b1:1f:b9:d2:17:1e:74:68:
                    bf:71:91:f4:2d:53:ba:cf:3b:1f:42:6d:7d:65:0e:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:27:32:CB:DB:84:27:1A:26:10:38:15:3E:94:69:69:E8:07:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136302e36382e302f32332d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:0a:98:c7:d0:77:05:af:33:2a:50:05:52:9d:69:6c:c0:
         a1:a2:c5:ea:18:27:09:22:e2:d5:40:e6:71:92:e6:96:1d:18:
         62:8c:e2:2b:fc:74:9c:a5:40:84:9a:b1:d9:5f:e1:5e:ff:eb:
         1f:72:b0:f3:66:74:e6:83:da:13:ea:b7:05:3f:36:09:4a:2d:
         3b:d4:4d:f0:67:b5:2b:01:cf:77:3e:b7:be:c8:e9:4b:c5:7b:
         7d:6c:1d:5f:3c:4a:9b:b0:e6:57:5f:aa:e2:44:41:de:60:d2:
         2a:44:bf:57:a2:df:04:8f:c7:19:2b:cc:83:e4:50:ac:43:48:
         60:11:2b:f3:c4:ca:b2:45:c1:62:62:ae:40:87:fb:aa:8d:6d:
         f5:5d:c3:0b:c6:7c:02:cc:b7:a6:8a:15:8a:46:1d:84:2b:d2:
         7b:9d:a3:24:21:e9:a6:19:b9:9a:6b:16:b3:a5:99:53:f6:c3:
         bd:96:05:53:1a:11:55:2e:14:5c:58:17:8d:a5:6b:11:3c:84:
         c0:ab:43:19:61:8d:3a:30:0e:3f:20:42:07:d3:a8:05:f0:d0:
         1a:80:3c:6c:cd:43:be:9d:81:25:5c:01:63:e2:7e:1b:c6:36:
         ee:39:8d:c6:18:66:ac:be:61:fa:12:14:1d:30:22:81:67:16:
         f4:e2:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----