Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131342e302f32332d3234203d3e203138303539.roa
File:                     3130332e3136382e3131342e302f32332d3234203d3e203138303539.roa (raw, json)
Hash identifier:          h3YFURHVsopERQoEwQ51N8qCvzSncOntjwaqgUDiUTQ=
Subject key identifier:   3E:77:50:52:4F:D7:AD:C2:13:1E:5F:E3:21:A1:A4:A2:68:19:74:4D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0EB6EB38D5CF833977C8E896CEB22C56385153D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131342e302f32332d3234203d3e203138303539.roa
Signing time:             Mon 21 Jun 2021 05:57:00 +0000
ROA not before:           Mon 21 Jun 2021 05:52:00 +0000
ROA not after:            Tue 21 Jun 2022 05:57:00 +0000
asID:                     18059
IP address blocks:        103.168.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:eb:38:d5:cf:83:39:77:c8:e8:96:ce:b2:2c:56:38:51:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 21 05:52:00 2021 GMT
            Not After : Jun 21 05:57:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:79:d5:e2:8f:1b:fb:94:b2:e8:f4:fe:db:
                    37:ed:6e:09:fb:33:7f:4e:3a:8e:54:8e:ae:76:34:
                    e9:29:29:56:32:da:10:6d:23:25:ac:ac:a4:79:d9:
                    4f:b6:b3:89:a0:81:53:e4:3a:b4:9b:c8:22:c8:54:
                    d5:d7:5f:a8:60:c1:f8:5c:03:30:1f:05:79:06:ae:
                    0d:9e:fd:24:b4:9e:ae:d6:9d:dd:4f:29:49:61:94:
                    84:85:e0:fd:f2:10:13:56:d7:0a:e1:15:94:c3:7b:
                    2b:54:21:f3:8a:66:92:7f:5a:16:01:43:62:d7:a5:
                    f5:85:7c:6a:9d:5f:2e:7a:87:a1:38:ec:f4:5b:6b:
                    ac:10:8f:a4:9a:69:f5:44:76:58:2f:e3:2d:dc:2e:
                    3f:55:75:03:11:1e:d4:83:0f:de:10:83:3b:9a:a0:
                    4f:4b:d7:39:68:10:b4:ea:1c:0a:4e:33:02:4e:76:
                    17:b5:07:21:fa:41:b4:d5:0a:5b:04:c1:15:e7:90:
                    89:b6:33:b2:24:b2:ae:fb:98:02:5d:de:d3:0e:0d:
                    63:07:05:61:c5:32:1f:2a:70:48:0e:d6:99:2f:4a:
                    0c:59:04:22:3d:d7:6d:e0:f3:f6:9e:82:6a:12:7c:
                    9f:79:73:d5:c1:af:73:5b:37:2e:e1:a6:b3:4b:b4:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:50:52:4F:D7:AD:C2:13:1E:5F:E3:21:A1:A4:A2:68:19:74:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131342e302f32332d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:77:4c:dd:34:db:a0:13:85:8c:46:e0:1d:64:af:39:1d:29:
         69:2a:d8:3f:96:dd:7d:15:b2:3c:81:5b:33:1b:d7:f5:5f:db:
         f9:4b:29:b9:5b:42:ea:c4:8b:c0:a9:2f:9a:96:b4:e3:93:1f:
         97:c8:a8:e7:0e:44:69:be:8b:53:71:1e:1e:2d:ed:1c:bf:61:
         1f:39:e2:ed:60:a3:8c:39:51:cc:77:e5:07:65:97:89:9c:e4:
         75:69:95:22:8c:83:ec:fd:73:e4:f7:19:53:19:1c:fd:20:a5:
         19:66:f9:c3:34:2b:c6:fd:17:e9:2a:9c:4d:0b:24:b6:11:76:
         2f:13:cb:5f:0c:7f:24:7c:9f:4f:3b:b1:6f:76:27:59:81:7f:
         10:de:7e:7c:81:f2:a7:e4:a5:e8:2d:65:18:f9:9a:f3:af:fa:
         76:ee:fb:16:4b:c9:15:a4:dc:95:87:94:d8:1e:eb:1a:29:6d:
         d1:64:75:3e:e6:34:b9:e0:c9:ef:93:78:d0:44:db:25:3c:e6:
         f7:9c:95:7e:84:f9:22:f1:3d:ce:9e:d1:8d:fd:07:df:33:44:
         c0:dd:99:a6:aa:c8:73:53:9c:3d:67:9b:98:19:6d:f5:fd:24:
         5d:79:44:74:a2:78:93:69:ad:e1:72:eb:bc:b1:49:6d:7a:f1:
         b1:88:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----