Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3235332e302f32342d3234203d3e20313431393630.roa
File:                     3130332e3136352e3235332e302f32342d3234203d3e20313431393630.roa (raw, json)
Hash identifier:          Di0bjvGXEITZgpH+QvP6no8IBJqCiF7+5MKAlWklxrY=
Subject key identifier:   67:19:55:CE:BB:5C:B6:D7:35:E3:2A:5A:36:98:94:D8:69:93:AA:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65F83A3A69F3C9D00F4F347F4858D14AA36B2CD7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3235332e302f32342d3234203d3e20313431393630.roa
Signing time:             Thu 17 Jun 2021 09:48:52 +0000
ROA not before:           Thu 17 Jun 2021 09:43:52 +0000
ROA not after:            Fri 17 Jun 2022 09:48:52 +0000
asID:                     141960
IP address blocks:        103.165.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f8:3a:3a:69:f3:c9:d0:0f:4f:34:7f:48:58:d1:4a:a3:6b:2c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 09:43:52 2021 GMT
            Not After : Jun 17 09:48:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:f8:73:30:ac:fc:c2:39:d1:d7:f3:ce:e6:
                    0b:41:d9:9f:a1:16:85:e4:49:83:41:86:e2:fd:b3:
                    60:ae:51:eb:3f:af:89:46:46:59:66:08:dd:f9:92:
                    64:0e:67:b8:b5:da:ff:35:3b:6d:c8:09:4a:d6:2f:
                    9a:47:37:25:7f:30:ed:b2:82:92:c9:c7:71:a3:a7:
                    88:b4:97:3f:c2:95:c0:d5:c0:35:a3:7b:2f:25:df:
                    03:83:1b:2a:f5:09:27:d1:0b:75:c3:c8:23:34:26:
                    cc:23:2c:a4:00:8b:f9:ea:e8:df:68:36:63:98:14:
                    a6:30:0f:f0:28:c4:0c:c9:7a:1d:e8:68:00:8f:c3:
                    fb:eb:d0:78:e8:59:68:ba:df:de:51:f1:b6:69:17:
                    9b:8d:e8:73:45:13:6c:24:d4:8e:49:fb:17:9a:a8:
                    de:a9:31:79:bc:db:b6:44:f5:5e:fb:1c:47:c5:a3:
                    75:0d:46:a4:fa:8f:dc:f4:17:16:78:1e:5d:56:fd:
                    0c:4a:7d:c5:5c:7f:9c:84:78:c1:f9:13:9a:3f:81:
                    9f:2e:6e:32:85:42:49:6f:dd:08:b1:43:23:a7:c2:
                    5e:e8:73:36:5d:9b:6d:bc:1b:6d:40:b7:62:b7:c4:
                    81:1c:e0:4f:2d:1e:15:1e:6e:ea:e6:11:5c:6a:2b:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:55:CE:BB:5C:B6:D7:35:E3:2A:5A:36:98:94:D8:69:93:AA:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3235332e302f32342d3234203d3e20313431393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:8a:01:b4:5e:4b:27:40:93:db:7c:86:b1:cf:09:6b:8b:
         34:63:6b:6b:4d:5c:02:d6:eb:c9:51:83:e6:6c:4d:b1:12:ce:
         d4:9b:60:f5:a6:87:36:af:68:55:c5:cd:e4:cb:25:0e:8f:c7:
         a3:78:2c:3a:0b:42:3a:65:aa:6a:62:80:77:b6:71:68:c8:2e:
         9b:f9:bb:97:01:70:89:77:98:a1:02:e0:4a:df:04:02:7e:71:
         d2:46:37:4c:39:34:ae:25:48:f1:30:07:14:47:64:9b:e3:7f:
         20:2f:7b:8e:16:e6:de:31:40:7a:07:c5:16:a1:2c:03:70:b5:
         29:83:4e:5e:16:72:0e:59:f2:9a:1d:f1:79:99:b6:13:73:56:
         cf:a1:c0:67:41:de:d9:ec:56:5e:87:f2:19:4f:e5:76:d3:ea:
         e6:a6:5f:05:dd:08:08:cb:1b:12:6b:cb:08:90:f8:6f:07:81:
         80:4c:de:13:0f:67:6e:f0:70:a4:f6:87:f7:cd:21:5f:0d:18:
         ec:36:46:fa:72:4f:09:6e:ec:9c:08:f2:47:b5:2b:f6:a6:bb:
         4c:05:84:39:b3:c8:44:fe:5b:b3:f2:98:2b:a7:0c:ef:d8:3e:
         01:68:b7:14:23:18:39:ba:2b:b6:fc:9a:a6:c9:bc:c3:6c:fb:
         a2:1a:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----