Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e31302e302f32332d3234203d3e20313339393637.roa
File:                     3130332e3136362e31302e302f32332d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          h+s2dqK2/wfiyfqI5s0qIejJ2x4JcRfQtYJjNLaK38Q=
Subject key identifier:   94:66:1D:8F:90:E7:CD:AA:C9:6B:BD:6F:78:49:3C:91:72:B1:8B:55
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       30EA874FD230D98E0A4BAAF4019B19732C1EF28A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e31302e302f32332d3234203d3e20313339393637.roa
Signing time:             Wed 28 Apr 2021 02:52:46 +0000
ROA not before:           Wed 28 Apr 2021 02:47:46 +0000
ROA not after:            Thu 28 Apr 2022 02:52:46 +0000
asID:                     139967
IP address blocks:        103.166.10.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ea:87:4f:d2:30:d9:8e:0a:4b:aa:f4:01:9b:19:73:2c:1e:f2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 02:47:46 2021 GMT
            Not After : Apr 28 02:52:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:02:91:dc:5b:b7:5c:b0:e0:84:06:74:28:
                    1a:df:57:20:ee:7a:8f:bb:cf:50:64:ab:85:47:cc:
                    43:9a:37:c2:81:28:42:1c:83:83:fd:ab:05:97:32:
                    f5:e1:00:1d:1e:a5:bf:b6:e8:82:14:ac:c6:f0:f1:
                    fb:4d:bc:18:9f:03:ea:a0:53:bd:c9:59:1a:f0:83:
                    83:57:78:25:b9:b2:d8:77:e1:b0:c6:70:e2:8d:b7:
                    13:55:e1:9d:20:cf:33:f1:8a:e0:2e:5d:12:28:2a:
                    8f:59:3a:74:5d:67:9e:43:73:3f:12:fa:61:1e:f0:
                    f0:52:de:cb:f4:6c:56:c4:05:ca:5d:1a:f0:33:5d:
                    6f:1e:1b:76:d1:c6:26:a3:9f:73:74:72:0e:15:15:
                    42:4c:a5:23:a4:8c:c2:a3:3c:35:53:92:58:04:1f:
                    c8:de:6d:69:c4:53:40:a2:07:0e:ac:05:31:d1:e5:
                    f0:ea:31:e1:3a:7f:9c:53:44:d9:81:34:7d:bc:74:
                    e4:c9:c9:43:6c:60:02:b5:61:01:16:1a:9e:e5:9f:
                    47:45:f6:e9:5f:f2:c7:32:82:99:ad:97:bb:f8:31:
                    64:8d:84:ec:07:47:20:48:65:75:5a:5e:64:19:02:
                    fb:59:15:2e:90:f5:55:5d:de:d9:f8:4d:77:91:60:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:1D:8F:90:E7:CD:AA:C9:6B:BD:6F:78:49:3C:91:72:B1:8B:55
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e31302e302f32332d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:7c:e8:25:1a:03:70:cf:66:2e:79:25:9f:9e:80:f0:b5:
         c4:66:3e:09:38:75:1e:62:9f:e8:60:36:7b:61:35:05:16:10:
         bd:8e:39:56:8e:a1:92:7a:1a:e8:ba:4d:61:eb:e8:eb:fb:2a:
         d6:e6:98:08:31:26:e2:7a:22:f4:df:1a:98:37:7f:95:2e:71:
         43:23:55:46:19:ae:4f:fe:8f:54:2e:a2:5f:f1:72:6d:fa:49:
         b2:9c:53:0a:1a:6e:27:6a:03:64:cf:5c:29:00:bb:dc:c8:16:
         27:dc:48:c8:42:0c:07:80:ab:47:2d:89:49:eb:b1:e9:f6:c0:
         7b:5e:85:a8:b7:1c:8c:7d:33:d7:a6:92:29:00:c9:e2:55:fc:
         a4:76:b8:cd:7b:64:28:46:4f:49:f9:7d:ea:76:e1:7f:97:b6:
         d5:49:0d:7e:65:05:24:ef:0c:25:57:36:bf:b9:fc:22:4e:02:
         b6:00:a1:73:ac:e5:ec:70:a8:38:a6:d3:c7:8d:48:bd:12:ba:
         25:d2:33:33:e0:52:29:57:a6:80:4d:fb:cf:72:68:37:8b:34:
         5b:3c:e1:8a:ae:ab:01:18:c7:3b:03:7a:cd:a1:ef:7e:4e:b3:
         a1:32:c8:a0:27:d2:da:00:16:c8:78:79:17:da:2e:4a:f7:55:
         a6:d1:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----