Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa
File:                     3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (raw, json)
Hash identifier:          hj5ivMpJHIyH+vtJOBN+LHBA1zd9Zwo/f0iis4p0WT8=
Subject key identifier:   8A:48:3F:B0:2D:7C:C0:C0:0B:34:4E:5F:0B:4B:67:A0:D7:D6:E5:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2ECA3BD8E39E0BCE7C212F78C036E2FB09A76D5F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa
Signing time:             Wed 14 Apr 2021 07:18:19 +0000
ROA not before:           Wed 14 Apr 2021 07:13:19 +0000
ROA not after:            Thu 14 Apr 2022 07:18:19 +0000
asID:                     141645
IP address blocks:        103.162.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ca:3b:d8:e3:9e:0b:ce:7c:21:2f:78:c0:36:e2:fb:09:a7:6d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 14 07:13:19 2021 GMT
            Not After : Apr 14 07:18:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:68:53:cf:cb:d0:f4:5a:69:e7:dd:16:bc:
                    f1:2f:72:ab:85:b4:0a:08:7c:f3:1a:f6:9e:7b:03:
                    e8:08:eb:b1:45:6a:f4:b2:ca:bc:8d:63:cb:2e:ca:
                    fa:94:2f:02:f9:d5:68:95:dd:33:24:0f:fa:90:33:
                    f0:06:06:5d:94:ad:32:04:46:55:a4:3b:4c:60:10:
                    02:fa:4c:23:77:b0:5d:83:d7:1b:66:4b:2f:8b:2a:
                    20:3f:f2:76:bd:67:7c:2c:c4:e9:6e:ff:85:d1:06:
                    d2:6d:41:b1:2b:28:9c:cf:2c:a5:30:96:30:e2:93:
                    13:fa:a4:c5:cb:32:7d:a9:48:61:ce:24:e2:d2:e1:
                    f4:47:1e:40:8c:24:70:1a:37:fe:49:f8:07:64:df:
                    4b:06:8d:d0:92:23:69:a2:97:a0:9e:ed:56:11:ef:
                    37:29:bd:a9:85:77:5a:99:93:8f:e5:43:f9:ab:88:
                    11:2c:60:52:8b:79:fe:1a:f0:36:02:52:61:b0:99:
                    35:cb:16:79:00:dc:59:51:be:0c:a2:b9:66:76:ea:
                    77:63:13:44:a4:f2:c4:b4:24:2b:af:c5:a6:d6:26:
                    69:0d:a6:8d:46:cb:fc:5d:c4:1d:7c:ea:93:fd:e4:
                    68:19:c9:84:be:7b:c5:b3:02:35:4d:d3:c7:11:c0:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:48:3F:B0:2D:7C:C0:C0:0B:34:4E:5F:0B:4B:67:A0:D7:D6:E5:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:20:25:d3:55:dd:16:6c:6a:8b:c9:8d:1e:aa:5f:f6:bb:
         3e:40:80:1d:ac:0b:46:a8:96:59:27:24:d5:e6:6a:5c:7a:f6:
         a0:ee:06:3b:de:cc:db:cd:c0:bd:50:c8:a9:3b:69:52:35:c4:
         8c:ea:97:a6:d1:4c:bb:a3:61:13:d4:4c:64:1d:60:79:7d:30:
         16:6c:64:6c:e1:56:bd:35:30:d1:6d:44:bd:3e:71:71:d1:06:
         0b:64:cf:70:c9:29:fd:b8:35:8d:9a:33:bd:13:d5:f5:4e:33:
         af:8d:ce:57:ad:e4:2c:8c:e9:a2:9f:e5:04:51:72:bb:5a:06:
         b5:68:19:12:ad:bf:03:44:68:44:48:f4:d9:76:c4:65:80:7a:
         47:fb:b6:7a:7e:4d:71:5e:dc:a2:f6:af:9f:00:f6:ba:31:f3:
         73:12:e9:d3:06:93:89:45:0c:5f:bd:a8:40:0c:ef:69:bc:10:
         ba:38:a8:6b:4f:46:01:2a:6c:00:8b:5f:3a:f2:77:60:42:06:
         56:3b:85:00:27:7e:4f:09:99:a1:6e:1c:3f:3b:20:83:9a:e5:
         49:b1:c5:fe:d6:0d:28:d8:68:5e:9d:cb:be:fa:0b:e5:c9:b5:
         6a:b9:aa:ae:19:cf:c4:c5:36:ed:d4:7b:12:d2:c5:b5:a4:f2:
         2e:07:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----