Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3133302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          nKW7FhxMVHR0Oo0fJctsNH7ChvqSBc+jjaQivE6wy/g=
Subject key identifier:   1C:61:41:18:E1:69:7C:E7:BC:2E:D5:5D:BC:27:3F:EC:6B:6F:80:D7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       469CBDED01804CEB3D2FD4A294EE6B42E3B5D69E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133302e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:14 +0000
ROA not before:           Mon 28 Jun 2021 16:47:14 +0000
ROA not after:            Tue 28 Jun 2022 16:52:14 +0000
asID:                     4800
IP address blocks:        103.168.130.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:bd:ed:01:80:4c:eb:3d:2f:d4:a2:94:ee:6b:42:e3:b5:d6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:14 2021 GMT
            Not After : Jun 28 16:52:14 2022 GMT
        Subject: CN=3082010A0282010100D5DA9D96017CAF49B2202617C4F82BD2D9E4868893F46191A234B673F068CCFA0A609620135861EE9CBA4928CE7039FCB71140DE61E036822506BA150BB37159ABC88E62B1D7CE82224CE924E0C1ED2E8292E21987089F4BD3D3AE211F0E35EDF4833C38F0B4FF355ABCD1BD8CF9DAA5B3D46C0A77C511D27AA245736DD8B4F43E07BBD54E6B3F7285DC8A393292A3943E11DB3514BC8096A94D82467EC0E48B3EA5D94749724C4BE3313A6C960F772E5BA3EDBC7A628021120B80ECBA73248A774AE6A325018BC7CB0C5D20EDBBB16BAEBE831118E115AE0F960796B52E6E624743AF03B04BBAF72A5147C62EF17A9B90EF50E758A64952FD390923C80681750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:9d:96:01:7c:af:49:b2:20:26:17:c4:f8:
                    2b:d2:d9:e4:86:88:93:f4:61:91:a2:34:b6:73:f0:
                    68:cc:fa:0a:60:96:20:13:58:61:ee:9c:ba:49:28:
                    ce:70:39:fc:b7:11:40:de:61:e0:36:82:25:06:ba:
                    15:0b:b3:71:59:ab:c8:8e:62:b1:d7:ce:82:22:4c:
                    e9:24:e0:c1:ed:2e:82:92:e2:19:87:08:9f:4b:d3:
                    d3:ae:21:1f:0e:35:ed:f4:83:3c:38:f0:b4:ff:35:
                    5a:bc:d1:bd:8c:f9:da:a5:b3:d4:6c:0a:77:c5:11:
                    d2:7a:a2:45:73:6d:d8:b4:f4:3e:07:bb:d5:4e:6b:
                    3f:72:85:dc:8a:39:32:92:a3:94:3e:11:db:35:14:
                    bc:80:96:a9:4d:82:46:7e:c0:e4:8b:3e:a5:d9:47:
                    49:72:4c:4b:e3:31:3a:6c:96:0f:77:2e:5b:a3:ed:
                    bc:7a:62:80:21:12:0b:80:ec:ba:73:24:8a:77:4a:
                    e6:a3:25:01:8b:c7:cb:0c:5d:20:ed:bb:b1:6b:ae:
                    be:83:11:18:e1:15:ae:0f:96:07:96:b5:2e:6e:62:
                    47:43:af:03:b0:4b:ba:f7:2a:51:47:c6:2e:f1:7a:
                    9b:90:ef:50:e7:58:a6:49:52:fd:39:09:23:c8:06:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:61:41:18:E1:69:7C:E7:BC:2E:D5:5D:BC:27:3F:EC:6B:6F:80:D7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:fd:42:a6:04:3f:0b:4e:be:ce:da:73:46:8f:5e:0e:df:
         dc:13:ab:ea:c1:7e:4d:9d:84:8a:e4:aa:e6:26:a2:9d:2c:27:
         98:8d:ea:0a:fb:64:4e:e4:05:4e:d5:e5:45:ef:8d:65:72:37:
         f1:b4:dc:1a:b4:a0:c5:84:d9:b6:a3:31:23:b3:66:e0:f4:70:
         a3:77:dc:8a:58:a5:ab:f0:12:4c:f5:c9:0f:fe:88:ca:be:94:
         52:fb:5e:d3:f7:06:0b:bd:fc:4d:33:65:2e:57:80:59:38:ba:
         29:b0:d6:24:48:d1:52:ec:fe:e8:64:45:8d:e5:9f:b0:99:90:
         9c:42:70:83:0b:57:5f:f3:55:53:ed:c7:db:51:a5:de:55:6d:
         20:e3:89:35:04:f8:fa:31:e3:34:d0:ff:ce:89:81:81:ad:d0:
         47:9f:20:9b:11:9e:2b:28:de:e3:d8:c0:c9:b1:75:ae:17:18:
         ad:cd:b0:de:01:8f:d2:38:63:73:44:e5:35:17:90:e1:1c:69:
         24:db:18:f3:99:9d:5b:12:1c:1c:eb:3e:5f:7f:46:db:1d:c9:
         90:95:15:de:fe:c2:79:f7:a8:5c:0d:d9:3b:94:d2:b0:7d:ac:
         50:02:80:b3:98:54:88:36:5a:95:d0:82:b8:25:19:2f:b8:df:
         e3:77:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----