Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3231302e302f32332d3234203d3e203538333639.roa
File:                     3130332e3136362e3231302e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          wCQq+uzAgxsKZbjuuGPfKCGo4WwkBnfLPcamA2GLVN0=
Subject key identifier:   B6:FF:8A:84:BB:8F:F8:B1:78:E4:EB:9C:A7:AB:5D:62:97:B7:34:29
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7CD81EA4C3C1078C1B586CE89B2BB757F450DB85
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3231302e302f32332d3234203d3e203538333639.roa
Signing time:             Mon 23 Aug 2021 03:37:18 +0000
ROA not before:           Mon 23 Aug 2021 03:32:18 +0000
ROA not after:            Tue 23 Aug 2022 03:37:18 +0000
asID:                     58369
IP address blocks:        103.166.210.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:1e:a4:c3:c1:07:8c:1b:58:6c:e8:9b:2b:b7:57:f4:50:db:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 03:32:18 2021 GMT
            Not After : Aug 23 03:37:18 2022 GMT
        Subject: CN=3082010A0282010100A372A1351CA9B2812C4F166115D3B21B86F561FCD9BE107B9CE7B68E5A2015005729756DB9000456185A335724F4E9496C786EC95E583F323848FAD2F4EFF2D4E4220D0D866C9210859AB24D57573AC3FE2E052729E64511FA13E7C4505FF68EB3A734BA6AF44B2C3D43F1C0E7495BD0F64348C4E0FE7A0E99C1464458E4E9811FD5444BCAA762E304C9D8D02AE15B902D6286330B3DFA0CD9E8D3263E869CFA79A07027B37D61B015DDBF6E8D17F7481255B8EE2E9221C4969A7C75FF148413F5C93631785CCF158855AB5F86E5537A8DF520504F1C34E6D603E1C5F6F5ED4060185EA5BDCBDF1E1454AB9FDED0CB14942439E8D6C55418414540EDBEF8CAF50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:a1:35:1c:a9:b2:81:2c:4f:16:61:15:d3:
                    b2:1b:86:f5:61:fc:d9:be:10:7b:9c:e7:b6:8e:5a:
                    20:15:00:57:29:75:6d:b9:00:04:56:18:5a:33:57:
                    24:f4:e9:49:6c:78:6e:c9:5e:58:3f:32:38:48:fa:
                    d2:f4:ef:f2:d4:e4:22:0d:0d:86:6c:92:10:85:9a:
                    b2:4d:57:57:3a:c3:fe:2e:05:27:29:e6:45:11:fa:
                    13:e7:c4:50:5f:f6:8e:b3:a7:34:ba:6a:f4:4b:2c:
                    3d:43:f1:c0:e7:49:5b:d0:f6:43:48:c4:e0:fe:7a:
                    0e:99:c1:46:44:58:e4:e9:81:1f:d5:44:4b:ca:a7:
                    62:e3:04:c9:d8:d0:2a:e1:5b:90:2d:62:86:33:0b:
                    3d:fa:0c:d9:e8:d3:26:3e:86:9c:fa:79:a0:70:27:
                    b3:7d:61:b0:15:dd:bf:6e:8d:17:f7:48:12:55:b8:
                    ee:2e:92:21:c4:96:9a:7c:75:ff:14:84:13:f5:c9:
                    36:31:78:5c:cf:15:88:55:ab:5f:86:e5:53:7a:8d:
                    f5:20:50:4f:1c:34:e6:d6:03:e1:c5:f6:f5:ed:40:
                    60:18:5e:a5:bd:cb:df:1e:14:54:ab:9f:de:d0:cb:
                    14:94:24:39:e8:d6:c5:54:18:41:45:40:ed:be:f8:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:8A:84:BB:8F:F8:B1:78:E4:EB:9C:A7:AB:5D:62:97:B7:34:29
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3231302e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:53:a4:c3:ce:01:e6:09:28:71:75:d5:68:7b:a7:cd:4c:54:
         f7:fe:e3:28:8a:c3:a3:a4:ba:06:7d:e7:35:36:1b:44:93:10:
         48:09:48:80:d8:a1:d3:03:78:21:98:ac:0d:f4:92:3f:89:b9:
         56:14:e0:28:a8:3d:e9:83:23:0f:99:66:95:89:44:86:26:9f:
         b6:35:68:c1:e2:9a:fd:71:05:29:f5:d0:c6:02:c0:76:ac:ce:
         86:4a:c9:88:59:73:2b:24:41:bd:b9:34:ce:08:16:c9:90:44:
         d0:76:4b:f3:86:3f:89:6b:4a:3e:e3:53:57:ac:af:a0:de:a9:
         90:f5:4c:2e:ef:7e:74:38:ed:fb:cf:83:ed:aa:f1:ea:c2:48:
         1f:ea:f7:13:36:97:74:f8:3e:51:af:f6:3c:5f:15:46:6e:46:
         c6:e3:c8:32:7b:f0:da:0c:db:30:93:58:c8:74:83:99:dd:e5:
         c3:36:ad:83:cf:06:6e:cc:5f:70:35:26:be:8c:52:1f:8f:2a:
         cc:c7:e1:a1:50:04:a9:b0:f9:aa:6b:44:69:c2:ec:a5:7f:9f:
         d2:15:6e:a3:8d:6c:7c:83:2f:81:58:5f:e8:2f:2d:ab:38:9d:
         28:bc:32:c6:99:9e:6c:ca:50:26:9e:8a:90:5f:8d:58:f5:14:
         8f:8b:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----