Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3132362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          SVGMW0Q8pGg7tb/gaNGAfOe8b2Jur9ThMVFTOxsMbb0=
Subject key identifier:   6C:6A:DA:D6:EA:29:5A:FA:C0:46:B3:F9:D3:35:C0:30:78:64:AE:07
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7AB6BEAB7C3CDDA664CCABCF7B4439755B480B1F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:15 +0000
ROA not before:           Mon 28 Jun 2021 16:47:15 +0000
ROA not after:            Tue 28 Jun 2022 16:52:15 +0000
asID:                     4800
IP address blocks:        103.168.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:be:ab:7c:3c:dd:a6:64:cc:ab:cf:7b:44:39:75:5b:48:0b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:15 2021 GMT
            Not After : Jun 28 16:52:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:a9:dd:ec:af:25:5b:b2:a8:5f:4c:e5:64:
                    30:8e:93:b1:ad:69:f8:11:49:a1:4b:2e:db:fb:d3:
                    07:db:be:7a:bf:a4:15:29:d5:15:7e:cd:5b:07:53:
                    db:51:1c:c9:fd:4f:7c:2c:d2:e5:e3:9c:30:59:d1:
                    93:87:18:2c:58:10:88:46:4b:b9:9d:7b:f1:52:ef:
                    30:06:cf:41:12:b7:e1:70:15:5b:ca:9a:72:85:af:
                    fc:da:23:48:eb:f8:10:79:a0:bf:4b:7c:55:83:e3:
                    fb:72:02:fd:a9:e9:3b:23:7a:4a:98:a2:8f:21:59:
                    45:89:2f:ea:5b:63:cf:b2:b5:56:30:d4:b3:d2:c9:
                    96:e0:85:03:22:fe:9a:cc:3a:26:26:12:87:87:aa:
                    ab:a2:31:9d:25:07:2f:de:57:0f:f2:e0:65:c8:4c:
                    c9:30:84:2d:58:23:1a:89:e6:31:cf:86:77:ed:9f:
                    59:5f:13:51:ae:60:e6:29:61:93:00:10:4b:3f:0f:
                    03:33:ba:54:b7:13:d1:65:1a:bf:97:aa:08:10:ea:
                    89:1b:9d:45:74:c5:64:de:d1:b2:5a:2f:e3:25:6c:
                    30:cd:c9:5b:37:f8:6c:78:f9:9d:60:8f:15:37:7c:
                    e1:75:e1:37:e0:21:04:fa:1d:a3:cc:64:d9:62:b9:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6A:DA:D6:EA:29:5A:FA:C0:46:B3:F9:D3:35:C0:30:78:64:AE:07
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:23:82:37:06:3f:ee:c9:39:dd:7e:2b:d2:db:31:fa:e1:6b:
         72:49:ec:c2:02:89:f8:81:45:45:f3:1a:6b:20:44:1c:ac:37:
         6f:21:be:e3:75:82:a3:75:02:09:83:af:eb:46:04:bd:a2:ff:
         3e:c8:84:20:0e:6f:28:da:f8:9c:f9:cb:ac:60:73:7d:47:b0:
         7f:2f:48:30:5d:25:27:41:23:b9:40:7d:bb:9f:7a:cc:27:dd:
         a9:20:38:d7:89:6e:09:9e:31:b1:96:38:ae:77:8a:01:0e:9a:
         07:f0:44:c1:fc:93:6a:1c:5a:40:f5:7a:a2:7e:ff:69:7f:7b:
         21:ae:4e:e5:af:a5:40:de:20:03:c7:d5:06:13:f4:0a:08:73:
         2a:7f:9d:5f:ce:8f:c0:53:2e:8d:b5:8a:1b:fe:90:85:d1:56:
         db:9a:5d:99:b5:b2:7f:ac:6b:cc:c9:76:a8:32:a5:b5:ac:d6:
         f9:d8:8d:9c:94:3e:a7:c8:47:76:67:22:eb:47:b3:10:51:69:
         3d:d0:2b:bb:22:c0:76:0a:9e:78:5e:fc:a5:97:5d:e8:0b:5c:
         c2:fe:b8:cb:03:f5:4f:10:d1:14:1b:50:d2:5d:81:0f:04:17:
         29:2f:b7:0a:7a:79:76:77:07:e3:a1:2b:e5:76:aa:bc:1a:b8:
         a3:d3:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----