Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131362e302f32332d3234203d3e203138303539.roa
File:                     3130332e3136382e3131362e302f32332d3234203d3e203138303539.roa (raw, json)
Hash identifier:          QYSZ3KdodnxWT9vFJvZbl1Bwyp+xtTkF2a1mHFG7W6s=
Subject key identifier:   94:27:4B:C9:E6:D1:BC:C1:B9:BC:9A:2F:69:C8:FD:E6:F1:E0:17:87
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D9ACFD83FE6C62FF653BD9953FF163E526E08E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131362e302f32332d3234203d3e203138303539.roa
Signing time:             Mon 21 Jun 2021 05:57:13 +0000
ROA not before:           Mon 21 Jun 2021 05:52:13 +0000
ROA not after:            Tue 21 Jun 2022 05:57:13 +0000
asID:                     18059
IP address blocks:        103.168.116.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:cf:d8:3f:e6:c6:2f:f6:53:bd:99:53:ff:16:3e:52:6e:08:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 21 05:52:13 2021 GMT
            Not After : Jun 21 05:57:13 2022 GMT
        Subject: CN=3082010A0282010100F36AAA694AB21A4F2A22BABBF002DB6C11BC64673641C400F5AC589D21B4D4ECFD7139897BB3C44E2261606B6B14B1F5BDF6B90B08261F657889B26CC8E10DA10DCB92148A1C3BC942CA8C29F0CE54D977C338BF04C888A369EB45391B7FDC8F89EEF7B3A9668BB8A40E62484A698698E36B0226E27FB30FA2865B4D83D604C2FEBB5B0CA701DE1E5365BB616AE9A75EB471D88DE0508355243782DA216FCCFB7ECCC6EB486EC451D76C24F1916690767B45823691716D167C22523E7434EBD09C77F0171D7EE4130AAB8A15C1C5E088A73D8F3DAE6FC2D62AD85E9AB6DF19515F9137B7BEBDAD3BAD263B5BEB08567B9E3D25F7E1857013F25EDF3ECA0F7F570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6a:aa:69:4a:b2:1a:4f:2a:22:ba:bb:f0:02:
                    db:6c:11:bc:64:67:36:41:c4:00:f5:ac:58:9d:21:
                    b4:d4:ec:fd:71:39:89:7b:b3:c4:4e:22:61:60:6b:
                    6b:14:b1:f5:bd:f6:b9:0b:08:26:1f:65:78:89:b2:
                    6c:c8:e1:0d:a1:0d:cb:92:14:8a:1c:3b:c9:42:ca:
                    8c:29:f0:ce:54:d9:77:c3:38:bf:04:c8:88:a3:69:
                    eb:45:39:1b:7f:dc:8f:89:ee:f7:b3:a9:66:8b:b8:
                    a4:0e:62:48:4a:69:86:98:e3:6b:02:26:e2:7f:b3:
                    0f:a2:86:5b:4d:83:d6:04:c2:fe:bb:5b:0c:a7:01:
                    de:1e:53:65:bb:61:6a:e9:a7:5e:b4:71:d8:8d:e0:
                    50:83:55:24:37:82:da:21:6f:cc:fb:7e:cc:c6:eb:
                    48:6e:c4:51:d7:6c:24:f1:91:66:90:76:7b:45:82:
                    36:91:71:6d:16:7c:22:52:3e:74:34:eb:d0:9c:77:
                    f0:17:1d:7e:e4:13:0a:ab:8a:15:c1:c5:e0:88:a7:
                    3d:8f:3d:ae:6f:c2:d6:2a:d8:5e:9a:b6:df:19:51:
                    5f:91:37:b7:be:bd:ad:3b:ad:26:3b:5b:eb:08:56:
                    7b:9e:3d:25:f7:e1:85:70:13:f2:5e:df:3e:ca:0f:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:27:4B:C9:E6:D1:BC:C1:B9:BC:9A:2F:69:C8:FD:E6:F1:E0:17:87
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3131362e302f32332d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:30:2e:b3:fa:d5:e7:90:ca:38:59:ad:c1:87:00:e0:76:01:
         fe:e6:7e:74:13:74:57:ba:4d:41:af:65:43:df:a0:2f:55:24:
         b7:fb:3c:78:82:5f:fa:e7:43:54:07:ca:d0:e5:0f:ff:db:b9:
         e2:7e:8a:5b:44:da:53:fb:d5:f8:2a:8a:8f:3c:31:ef:15:10:
         1e:6a:c8:b4:c9:0e:7e:ca:fe:5a:d4:37:5b:00:a4:f0:f9:7b:
         77:a4:45:ec:e5:06:2b:23:c3:41:ba:53:63:d0:6e:bc:ac:27:
         29:c3:b0:21:24:c8:a9:0d:eb:0d:b0:b3:d5:02:7c:80:b4:10:
         da:07:da:86:91:77:7e:3c:95:0c:2d:63:1c:b5:aa:f8:b6:f0:
         a6:06:7b:92:40:a6:61:38:4f:e2:fb:b8:8a:b9:0c:13:d6:77:
         d3:87:b3:b7:8e:50:f0:c4:6b:57:07:5f:d6:4c:5c:d3:80:63:
         13:c6:5b:e9:00:0c:bf:94:0c:c3:91:dc:09:6e:19:85:77:13:
         ac:a7:7a:f6:15:a1:8d:d6:70:87:09:87:84:95:61:a8:f5:93:
         5b:be:19:1f:69:7b:6c:1c:4e:d1:5d:2e:b4:6a:92:15:8e:3d:
         fd:68:c2:fa:5b:f3:b1:65:cb:92:fe:de:1e:5d:64:1e:8f:d1:
         24:ed:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----