Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130382e302f32342d3234203d3e203538333639.roa
File:                     3130332e3136372e3130382e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          /0pZUxdZM0hFu7n/iLhjdDIyErxThQVGn45zqmRTYJE=
Subject key identifier:   FF:FD:BF:A2:E8:E1:7D:F7:D7:60:A4:01:C0:E9:4E:AE:7E:AA:7C:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       599200C06A8DBF6A7B8675866FAAB1091E3F3362
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130382e302f32342d3234203d3e203538333639.roa
Signing time:             Wed 30 Jun 2021 08:47:08 +0000
ROA not before:           Wed 30 Jun 2021 08:42:08 +0000
ROA not after:            Thu 30 Jun 2022 08:47:08 +0000
asID:                     58369
IP address blocks:        103.167.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:92:00:c0:6a:8d:bf:6a:7b:86:75:86:6f:aa:b1:09:1e:3f:33:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 30 08:42:08 2021 GMT
            Not After : Jun 30 08:47:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:b7:0d:78:6b:fa:fa:ad:bb:53:03:c1:81:
                    3b:1b:7e:47:bd:76:f9:42:3c:45:b9:31:83:23:66:
                    79:0e:74:47:d5:31:0d:e2:53:58:d6:96:ea:b1:f0:
                    d5:b1:87:03:68:ca:6d:c3:fd:96:ed:91:7e:ae:89:
                    6c:d3:70:4e:b7:12:ca:ae:48:74:bc:b6:a5:7d:0d:
                    17:4d:68:92:2c:47:e6:55:a4:10:5e:60:76:25:13:
                    e5:cf:16:84:79:35:8a:91:0c:f2:cf:0a:7d:78:d6:
                    0b:93:f2:96:ca:ba:d8:16:e2:4f:ea:85:89:f5:d1:
                    9d:8d:54:99:ce:dd:88:71:1f:b1:11:fa:1f:f8:8f:
                    cc:ec:75:b5:f4:b3:08:8e:6d:33:e1:a1:47:07:5b:
                    1c:2e:fe:24:25:57:dc:08:7d:eb:01:70:12:47:ef:
                    3c:89:94:89:a9:fe:ea:09:75:89:ae:52:b6:99:a5:
                    59:16:22:28:e7:aa:24:0b:12:8d:0b:0d:09:24:6b:
                    17:99:3e:88:37:8f:4e:f9:83:2b:1a:3e:59:47:29:
                    d1:25:1b:7f:b0:47:6a:7a:43:58:39:40:a8:9f:44:
                    7b:96:ed:b9:36:42:34:54:1c:4f:97:ff:2d:ca:e5:
                    31:c8:08:98:6e:33:58:b5:b4:be:63:3b:d3:16:1f:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:BF:A2:E8:E1:7D:F7:D7:60:A4:01:C0:E9:4E:AE:7E:AA:7C:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3130382e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:fd:0b:89:7f:30:71:b3:47:fe:be:9a:90:65:84:96:31:
         17:ab:c5:f8:95:95:b0:ca:15:22:e7:ae:34:b7:68:83:3c:88:
         e4:da:3e:37:41:97:c2:ac:9a:d4:f5:c0:3e:05:f5:4d:98:48:
         12:17:94:82:33:ad:bf:34:07:01:dc:b6:75:0c:7f:8b:fb:fe:
         ba:a5:2e:b3:24:75:38:a4:42:31:99:6f:62:63:fc:55:97:37:
         a6:bb:cd:9b:34:31:37:43:b4:c6:47:cc:91:06:21:ee:df:07:
         43:19:05:71:29:20:c6:38:36:8b:20:64:c0:fa:8d:65:52:b7:
         a5:1d:e2:40:b8:f9:ff:91:74:f3:2d:53:af:66:c6:85:2b:c3:
         ef:e4:0c:bf:51:d7:aa:c0:d4:02:99:97:a1:d1:32:85:cd:77:
         39:ce:b1:98:f7:f8:5e:e5:9a:17:f3:74:51:23:44:fd:87:d1:
         46:be:ee:d6:c1:62:31:31:71:44:b9:c5:00:b1:a8:80:29:35:
         ec:bd:32:de:46:9d:b7:7d:c5:3d:31:97:09:ee:c3:bc:36:80:
         a9:89:6a:65:49:3f:60:7d:a8:68:de:d9:6e:71:be:53:01:4f:
         22:53:c1:c9:48:72:14:6a:09:21:ad:d9:27:6e:d1:a8:f8:7d:
         c2:05:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----