Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139322e302f32342d3234203d3e20313431393631.roa
File:                     3130332e3136362e3139322e302f32342d3234203d3e20313431393631.roa (raw, json)
Hash identifier:          tA9SPC14ENp+pwQZbyyC8hqFXn3ClXH4KWKQ0++Htx8=
Subject key identifier:   DB:0A:B8:30:16:60:78:AE:AB:84:5E:D7:25:52:3C:E5:F1:99:84:31
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       20221C718800E77CC1C11EC32C006C1440837AD7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139322e302f32342d3234203d3e20313431393631.roa
Signing time:             Thu 17 Jun 2021 06:40:44 +0000
ROA not before:           Thu 17 Jun 2021 06:35:44 +0000
ROA not after:            Fri 17 Jun 2022 06:40:44 +0000
asID:                     141961
IP address blocks:        103.166.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:22:1c:71:88:00:e7:7c:c1:c1:1e:c3:2c:00:6c:14:40:83:7a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 06:35:44 2021 GMT
            Not After : Jun 17 06:40:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:25:19:b1:16:ee:2a:ef:56:9a:35:9e:53:
                    a4:e2:af:74:a1:40:eb:fb:92:99:7d:03:97:0a:17:
                    44:5f:ed:b7:96:19:8f:9b:3f:e9:5d:35:8f:a0:ba:
                    d7:4b:fe:cf:3f:2d:fc:88:d9:41:f2:13:ab:8f:98:
                    4f:47:da:92:03:7c:97:25:e1:93:f1:26:29:50:3b:
                    08:2d:2f:3d:54:ab:ac:d2:7b:fd:d2:cd:cb:28:f1:
                    b3:85:61:c6:2d:28:3d:03:95:6b:b9:fb:4a:6b:e7:
                    d9:cc:50:44:d7:4b:7c:bc:02:58:f4:4f:c2:c3:4d:
                    39:fd:e3:dd:78:ea:53:27:77:09:19:66:ba:51:da:
                    d5:a9:f8:1c:d3:78:9d:76:7e:e3:c2:74:0c:fb:3d:
                    d7:d6:4a:16:78:8e:a8:e9:8f:a9:72:33:9c:86:c8:
                    12:76:49:f3:fe:3d:f8:16:20:2d:f9:03:bd:a2:16:
                    63:76:df:23:19:87:fe:d1:22:44:48:5c:a7:06:75:
                    6b:b4:4e:e4:9c:87:7f:78:3c:bc:73:70:1f:cc:67:
                    0b:5d:dd:7d:7a:5d:20:00:33:41:9a:a7:81:7d:68:
                    d6:cc:8d:87:ab:21:53:66:43:b2:ba:e4:b2:cf:d9:
                    34:f3:d1:09:03:f1:ce:fc:2b:03:36:1e:43:39:f7:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0A:B8:30:16:60:78:AE:AB:84:5E:D7:25:52:3C:E5:F1:99:84:31
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3139322e302f32342d3234203d3e20313431393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:85:27:0e:0a:25:55:04:7c:f0:5d:d0:87:aa:8f:9f:d1:
         a2:97:b2:42:56:3b:3b:b3:3b:ca:a9:9d:25:ab:5e:5b:09:ac:
         50:75:51:45:0a:d1:9c:f3:77:9a:8d:5b:67:6d:c3:53:b6:6c:
         9f:88:d1:88:a5:66:2c:8f:9a:03:8a:85:e9:86:45:5d:dc:81:
         3d:5c:0d:f9:77:1b:dc:f8:0c:5a:a2:b6:15:33:16:8b:a9:3c:
         0b:86:e5:72:4e:f1:e8:aa:5a:b8:6c:73:b0:b9:83:96:3b:86:
         48:d9:86:e3:08:2c:77:a5:fa:f2:8f:f0:a6:2a:15:94:42:96:
         49:ab:50:b8:c8:9a:8a:d6:ca:dc:b6:e3:16:a2:56:e9:e2:1e:
         bf:04:5d:11:94:a0:ba:62:c9:b3:c5:3e:b9:19:33:9e:08:33:
         54:c3:75:49:d5:72:29:07:87:1f:63:6b:98:44:8d:9e:81:2b:
         74:dd:a8:36:22:b8:ac:56:3a:b4:4d:08:7e:6f:0d:d5:aa:1c:
         e6:01:69:89:bf:88:8f:4e:7b:c4:4b:30:f1:50:17:e1:8c:e9:
         42:dc:e2:aa:27:5c:27:88:13:64:d3:b2:2c:73:75:0b:05:d3:
         44:d1:16:65:c2:21:fa:11:0e:05:bf:a9:eb:98:30:74:4c:28:
         75:aa:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----