Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132302e302f32332d3234203d3e203138303539.roa
File:                     3130332e3136382e3132302e302f32332d3234203d3e203138303539.roa (raw, json)
Hash identifier:          hJeC6uo4du5Wn/unalMWkhv19aNwiFoZzItx0ZQOq44=
Subject key identifier:   0E:0A:8A:AC:EC:93:85:CB:E7:FD:5E:E9:50:D4:F9:92:44:1F:68:05
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E794338747D2A7F8F66E807594F62A62D562134
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132302e302f32332d3234203d3e203138303539.roa
Signing time:             Mon 21 Jun 2021 06:00:11 +0000
ROA not before:           Mon 21 Jun 2021 05:55:11 +0000
ROA not after:            Tue 21 Jun 2022 06:00:11 +0000
asID:                     18059
IP address blocks:        103.168.120.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:43:38:74:7d:2a:7f:8f:66:e8:07:59:4f:62:a6:2d:56:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 21 05:55:11 2021 GMT
            Not After : Jun 21 06:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:34:c0:64:42:e6:8d:3f:c3:79:37:ff:d3:
                    0e:24:cd:b3:a1:19:b0:f9:d2:d6:78:9d:54:7e:75:
                    27:7e:1a:92:a4:95:a1:98:e5:af:8e:2d:b2:c3:02:
                    06:81:e7:ee:aa:9d:0d:2d:a7:04:f4:d9:e4:35:20:
                    2d:6f:ab:fb:02:3d:b1:ae:36:12:06:1b:97:89:b4:
                    dc:ce:6b:8d:cc:fa:96:ec:94:06:4c:05:55:dc:ee:
                    79:57:d0:94:51:ff:94:b9:e7:a5:61:20:60:34:d9:
                    77:03:ef:cb:ea:0a:ec:4a:a1:e2:bf:78:07:bc:53:
                    a9:fb:54:4a:e1:84:6e:df:a5:a9:64:42:03:53:13:
                    ac:8d:0c:8b:f8:50:2f:97:5b:78:6f:7c:d9:d6:ef:
                    e3:37:36:c2:35:58:c1:e9:8e:5c:37:38:09:40:d6:
                    c8:28:c3:30:e7:eb:f6:73:23:71:8e:e3:5a:3a:5c:
                    2b:94:17:8d:f2:15:de:98:d0:81:25:a8:56:4d:63:
                    4e:9c:0f:4a:61:2a:7b:42:8a:b4:b4:f8:29:58:bb:
                    5b:73:79:3b:a4:8c:77:dd:c2:08:d4:9c:43:64:a4:
                    d9:77:d9:b4:03:2a:85:b5:94:37:03:ad:27:cc:e4:
                    62:64:25:f0:e2:48:6b:42:70:ba:79:66:d8:f1:5d:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:8A:AC:EC:93:85:CB:E7:FD:5E:E9:50:D4:F9:92:44:1F:68:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132302e302f32332d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:10:63:34:0c:ea:be:97:3a:e6:1b:b0:24:37:ba:d4:59:
         42:57:29:3f:0c:d6:3c:a8:a6:90:a7:22:fe:6c:23:e6:43:5f:
         66:21:c8:78:98:34:12:16:5e:30:c2:93:aa:1f:1a:56:dd:62:
         78:fc:80:23:1d:ac:a0:68:ac:9c:e6:b6:9c:0e:1b:b8:7e:c9:
         0d:5d:a5:1d:23:61:d5:62:a5:39:58:4a:c7:69:fd:19:cb:0b:
         25:22:c0:e1:15:81:7d:a5:ea:56:38:89:81:1a:1e:4b:7a:36:
         40:03:ce:0b:e1:fa:df:1e:86:bc:66:f1:34:5b:15:5e:8f:bc:
         e6:25:aa:6b:d7:05:14:39:f9:a0:5b:f0:f2:f1:a6:87:86:2c:
         a0:75:57:de:37:ef:b0:26:40:30:c8:3d:01:54:4b:2e:08:a3:
         92:18:f5:00:7f:1b:c2:c5:e0:03:15:20:f9:cf:5a:ed:ad:7c:
         8e:d4:4c:88:9e:61:bd:f9:fe:2d:0f:da:d3:06:26:ae:09:2e:
         c3:b8:67:a9:6d:7e:33:68:19:31:cb:a7:d8:64:a9:ae:5b:a2:
         6c:24:4b:b2:13:a8:82:49:98:c0:17:8c:15:54:96:da:f2:3b:
         29:b2:85:af:9e:96:7a:25:c1:83:a5:e5:07:43:70:b2:5b:be:
         d8:c3:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----