Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132382e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3132382e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          N3M6VUmD3mux2lQqjzFUfr1oebiae14wKP2Kd836pSI=
Subject key identifier:   49:F1:7F:E8:57:77:86:F0:F8:6F:80:3B:16:A5:9C:FD:E4:41:1D:D0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6A4094A5191E88E9B63EA36F2DE07B9F169B0E3B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132382e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:15 +0000
ROA not before:           Mon 28 Jun 2021 16:47:15 +0000
ROA not after:            Tue 28 Jun 2022 16:52:15 +0000
asID:                     4800
IP address blocks:        103.168.128.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:94:a5:19:1e:88:e9:b6:3e:a3:6f:2d:e0:7b:9f:16:9b:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:15 2021 GMT
            Not After : Jun 28 16:52:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:4f:99:be:01:c9:1e:87:b7:fc:c1:eb:6e:
                    bd:0a:99:8a:c7:55:33:89:a4:50:07:ff:22:45:a8:
                    e1:e5:08:b9:5c:8c:0b:2b:3b:a2:6b:b1:3b:bb:a7:
                    bf:53:c8:41:31:c2:f8:e8:33:a9:62:09:68:af:81:
                    a8:3f:86:85:95:d4:1c:b2:20:63:f6:02:e2:9f:19:
                    9e:92:c1:f6:d6:ca:93:e0:a0:44:38:04:c0:dc:d4:
                    6f:75:fd:7e:ce:b8:c7:0c:b6:ca:b3:71:50:42:34:
                    bb:02:8d:4f:58:10:d4:44:f1:b9:75:54:21:6d:83:
                    6d:ab:2f:eb:b8:42:5b:36:19:ba:19:7b:bf:30:4e:
                    00:9b:de:41:59:79:dd:19:1a:53:33:a5:5b:51:f1:
                    f7:a4:da:5f:4a:43:18:93:d6:5b:30:fe:69:68:17:
                    64:7d:ae:dd:fb:ae:e0:de:87:f3:42:8f:59:81:7a:
                    86:bd:af:b3:a1:70:42:ed:10:9a:18:aa:93:9d:4c:
                    d0:54:2d:76:9d:95:36:08:05:ef:0b:bf:81:f9:d3:
                    3b:6c:78:9e:2a:81:80:13:2d:e2:2b:69:02:23:7a:
                    c2:78:de:83:5f:e0:95:53:af:d1:84:4a:2e:cd:46:
                    37:54:1a:3b:e0:22:2d:a7:6f:70:e3:ea:e8:54:4e:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:7F:E8:57:77:86:F0:F8:6F:80:3B:16:A5:9C:FD:E4:41:1D:D0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3132382e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:3a:2f:4b:7d:35:da:7f:6a:38:73:d7:7d:f5:10:55:72:
         e6:05:0e:d0:e8:8c:7e:0d:81:54:9d:e7:c7:8e:af:a8:cf:e3:
         8f:a2:52:4c:95:58:4a:6a:35:67:3a:1d:8a:cd:02:e0:0d:b8:
         b1:9d:ef:1a:2e:0a:34:90:61:41:ab:f2:c9:be:d7:a6:cf:10:
         fd:ad:63:68:18:fe:e6:1f:ad:51:7e:c4:a4:1f:d0:7a:48:ec:
         ad:f8:34:e3:c8:61:28:15:f2:96:0e:7c:41:9b:b2:86:46:d9:
         f9:ce:30:7a:f0:5e:5a:a3:75:da:cf:85:2d:89:19:ab:12:8f:
         e8:15:9a:26:59:05:70:88:bd:65:b2:b9:f4:2c:f7:d6:a3:08:
         88:fc:38:54:21:b3:ed:34:f8:94:fe:a0:36:26:ce:df:dc:3b:
         42:c3:f9:56:b2:0a:1f:d4:a3:02:6c:43:5a:44:2b:97:6e:d0:
         dc:be:8b:63:91:b5:2f:a5:f8:78:48:92:c4:f9:bf:25:e2:e4:
         99:13:89:ab:0d:a0:61:b6:03:42:77:59:c9:5f:29:65:da:82:
         e4:6e:a6:d7:df:f3:8d:44:d2:be:45:04:6c:89:11:50:96:ae:
         1c:cf:ae:04:95:24:a9:29:43:c0:4e:7b:4c:36:f8:52:15:2d:
         99:e8:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----