Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3130382e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136382e3130382e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          K/DRNFI92mS11FzeP6vJ9pdbf90uPyxGpqW4+umaKaE=
Subject key identifier:   98:F7:01:3E:EB:2A:20:03:64:DC:D9:5F:73:BF:39:82:07:F5:43:31
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       07AB0FB3AA48DB063B41FE894F0C575832F12E19
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3130382e302f32332d3234203d3e2039383735.roa
Signing time:             Thu 17 Jun 2021 01:44:48 +0000
ROA not before:           Thu 17 Jun 2021 01:39:48 +0000
ROA not after:            Fri 17 Jun 2022 01:44:48 +0000
asID:                     9875
IP address blocks:        103.168.108.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ab:0f:b3:aa:48:db:06:3b:41:fe:89:4f:0c:57:58:32:f1:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 01:39:48 2021 GMT
            Not After : Jun 17 01:44:48 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:76:51:2f:ab:4e:bf:de:00:96:ba:67:f3:
                    1b:86:d5:70:55:7c:7e:9a:73:2b:6e:b0:81:c2:ef:
                    20:72:ef:a5:24:78:ad:f0:5a:d7:27:f8:9e:cc:ea:
                    b6:c7:dd:b4:38:f8:5b:51:80:54:ad:18:ad:48:bb:
                    d0:8d:26:67:f7:6e:95:95:ed:a9:58:fe:0e:2b:bd:
                    db:0f:07:ee:d0:f1:fd:a8:38:02:24:60:43:c8:51:
                    9e:73:83:c4:af:4b:14:87:7f:56:9c:ee:e7:d0:14:
                    9f:c7:0c:59:6d:8c:73:2c:bf:0e:01:02:39:b2:fe:
                    d1:ac:6d:cf:30:4c:ed:63:91:3b:18:9d:2a:21:04:
                    8f:e9:91:02:ae:4c:1d:60:a5:2b:85:8c:c6:64:03:
                    92:8a:4e:e0:69:e4:ef:4d:e3:04:7e:c0:ee:ea:8a:
                    f3:9d:ce:54:da:38:95:af:92:15:dd:b5:57:dc:8d:
                    35:ed:57:39:ee:de:78:46:6e:76:0f:18:d3:d2:6a:
                    4f:93:33:78:e3:7a:0d:e8:e5:50:b3:d0:1c:5a:8a:
                    3d:47:16:32:ab:12:0b:33:4c:77:4f:8e:a7:60:e1:
                    94:ed:41:e4:33:24:8b:56:ee:e0:30:9c:03:97:32:
                    17:4c:12:63:b4:0d:78:71:91:35:f5:a9:e3:8f:8b:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:01:3E:EB:2A:20:03:64:DC:D9:5F:73:BF:39:82:07:F5:43:31
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3130382e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:7e:3d:16:07:1a:f8:ca:54:89:d2:9c:c9:bb:ce:46:5b:
         16:67:38:8b:99:2a:49:11:42:cf:0f:8a:38:50:89:97:c1:38:
         91:9c:c4:f2:28:fc:2b:ab:a3:31:c6:bb:45:9c:1d:a9:fd:68:
         22:2c:ec:92:10:fe:4a:5d:e2:1e:a3:c3:e0:88:ea:d9:da:cf:
         37:5e:7a:0b:de:8a:34:2c:31:0e:bf:a7:be:fa:bd:aa:ce:4d:
         2b:f2:a4:28:10:47:99:c4:28:38:eb:42:03:59:51:26:57:f0:
         9c:3a:06:ed:66:00:ec:a9:a6:25:5e:f5:d9:30:42:a4:d7:d6:
         ff:80:32:d7:77:d1:13:21:e4:a0:32:a6:c5:4f:ab:fa:95:fe:
         02:6f:32:57:b1:24:e1:28:c1:38:fc:eb:2b:d1:4f:6b:12:b5:
         4b:3a:21:43:48:93:de:d1:f5:4f:4d:b4:2d:5f:4c:da:bc:91:
         cf:79:ce:14:6a:7b:65:89:58:ea:49:89:5a:36:62:42:f1:15:
         7a:e6:03:51:83:51:f0:33:f4:db:94:e5:7d:40:51:d1:b9:ce:
         3a:1a:9a:d8:e6:23:3b:5c:8f:44:e0:16:d7:45:fb:0b:17:61:
         33:b3:ab:96:4c:11:73:81:9e:df:dd:38:f9:f8:30:98:bf:58:
         e5:01:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----