Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32342d3234203d3e203538333639.roa
File:                     3130332e3136372e31322e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          3Xz0NR62D1BbxVzTp7DM0xmHZxLZKcC4fZhQLP82Z5o=
Subject key identifier:   B7:AE:95:A7:C3:28:74:56:0B:F2:1A:51:0B:DE:0E:56:DA:44:4D:DC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       027D00554D22DA77E25E3328DDF8849E7FFF536C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 22 Jun 2021 04:03:01 +0000
ROA not before:           Tue 22 Jun 2021 03:58:01 +0000
ROA not after:            Wed 22 Jun 2022 04:03:01 +0000
asID:                     58369
IP address blocks:        103.167.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7d:00:55:4d:22:da:77:e2:5e:33:28:dd:f8:84:9e:7f:ff:53:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 22 03:58:01 2021 GMT
            Not After : Jun 22 04:03:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:57:5a:fa:5c:f3:33:d2:c6:28:44:3b:1d:
                    c9:79:a3:98:a7:b6:2e:51:31:be:65:bf:16:e6:4f:
                    bd:eb:39:de:df:c7:4f:ba:15:e5:46:05:f8:e9:e1:
                    49:f3:97:5d:fc:16:f5:c9:b3:58:10:d3:55:3b:61:
                    ff:0d:9b:e3:c8:49:2e:0a:33:78:02:dc:8f:f6:b8:
                    e4:cf:0a:b0:85:cd:0e:ad:c6:e7:84:36:d8:da:64:
                    5b:1b:cc:b2:03:2e:69:4d:80:03:1e:9a:7d:3a:05:
                    11:23:16:32:cd:d1:96:35:45:7a:a2:95:af:8a:31:
                    34:91:1b:67:89:1c:60:5f:9b:5c:7f:08:d4:98:e5:
                    c6:fc:e0:fd:69:68:92:a8:f8:87:c3:03:ee:5f:ac:
                    2b:72:80:d0:84:23:51:10:d0:61:8a:dd:6f:41:dc:
                    08:5d:55:6c:c1:a5:da:7a:b6:69:47:25:eb:d5:79:
                    c8:ab:61:aa:93:4a:08:1d:99:98:d2:54:0f:12:ca:
                    0a:47:4a:ff:9e:b3:12:be:4d:c4:11:92:32:21:56:
                    6c:d3:c3:95:d0:e1:7d:9b:73:a8:16:44:0d:e7:99:
                    21:1d:f1:ac:2a:64:5a:c9:a1:32:60:8d:9a:66:65:
                    6f:e0:36:7f:53:80:5b:96:fd:16:4d:1f:94:e8:67:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:95:A7:C3:28:74:56:0B:F2:1A:51:0B:DE:0E:56:DA:44:4D:DC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e31322e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:68:26:26:4b:80:27:a3:1a:aa:0f:8a:6c:0c:9e:ae:b5:6f:
         bf:e5:15:ac:60:5f:5b:5b:79:64:61:f5:80:32:24:77:56:34:
         d8:10:95:d4:af:8c:49:38:3a:2e:73:67:4f:dc:15:1f:87:4a:
         86:a7:1b:0a:43:5c:e3:e8:33:09:19:00:72:34:4a:7d:ca:87:
         7e:90:fd:bf:b1:d9:73:94:1a:84:78:68:98:4d:2c:19:2d:d0:
         9b:16:8b:5b:35:e5:b4:dd:a8:4c:a9:83:03:ac:e4:45:79:2f:
         e1:7e:72:e2:93:88:36:db:66:b4:99:2f:0c:d5:d0:c1:c8:5e:
         a6:d9:6b:65:b7:7b:63:54:69:7c:44:22:4d:03:26:bb:60:26:
         88:94:e8:6b:f5:0e:dd:26:aa:a4:95:27:b2:b6:e7:b0:47:eb:
         2b:7c:4b:6b:f7:7c:9b:53:15:e1:2b:9c:aa:90:a9:09:6e:57:
         46:a5:05:71:c2:11:af:58:09:dd:cf:fc:8b:7a:cb:19:2c:54:
         9b:99:71:06:48:88:68:40:8e:d6:c5:c6:7d:4a:51:a5:1e:65:
         cb:0f:b5:b1:f5:46:96:ad:b3:81:6e:4b:7d:8b:e5:e6:55:86:
         a8:21:af:4a:8f:42:45:c6:09:85:23:f8:98:aa:48:a5:fd:03:
         ad:27:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----