Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136382e3133362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          CBLwX/E0rOeSHRlKBTBjnXHG6m5qDiCWCfdUDqgUcRQ=
Subject key identifier:   F2:23:E0:36:87:C9:C8:0D:42:85:BA:CB:4B:E3:F6:9B:96:01:28:D6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1A69E4C2668EFD6F9B67EE64C579103C5173E090
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:15 +0000
ROA not before:           Mon 28 Jun 2021 16:47:15 +0000
ROA not after:            Tue 28 Jun 2022 16:52:15 +0000
asID:                     4800
IP address blocks:        103.168.136.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:69:e4:c2:66:8e:fd:6f:9b:67:ee:64:c5:79:10:3c:51:73:e0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:15 2021 GMT
            Not After : Jun 28 16:52:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:cb:72:f3:27:b6:e7:97:66:bf:63:5e:46:
                    c4:36:a2:a1:55:0d:e7:30:bb:a5:18:3c:9c:91:60:
                    9e:88:01:66:13:51:aa:1d:20:a2:63:18:d7:e8:06:
                    bb:83:e2:b6:3f:e2:a1:49:fa:1c:e6:f0:1f:83:3b:
                    55:31:15:d9:cf:9c:8c:ef:6f:58:cf:54:15:9a:c8:
                    49:ab:ce:25:35:a3:41:ca:cd:0f:26:49:35:1d:f6:
                    11:1b:b0:95:f5:87:f7:cd:cb:0d:22:5d:e8:e0:9b:
                    ca:10:a7:a9:bf:49:bd:8d:6e:d2:0d:24:eb:ac:de:
                    be:55:8e:24:d0:35:53:e6:d2:f1:79:ce:4e:80:d9:
                    fc:6f:8e:df:8a:f2:cd:c1:ce:48:4c:1a:85:8f:c6:
                    00:8c:e0:a5:2f:a4:d0:4d:b7:af:de:1d:db:3e:48:
                    04:20:bf:52:98:05:0c:40:f2:a2:13:47:de:f2:51:
                    0c:c6:6a:63:c4:83:43:47:fb:20:24:17:d1:fb:02:
                    57:2d:4b:11:b6:f9:f2:6b:51:0b:6b:81:16:1a:02:
                    9b:62:f4:be:08:d3:d9:6f:82:81:8f:67:2e:13:16:
                    e8:9a:73:34:77:23:98:30:32:7f:d5:6b:26:32:49:
                    13:34:0d:52:ca:71:f5:b4:eb:c6:73:98:b5:bd:c1:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:E0:36:87:C9:C8:0D:42:85:BA:CB:4B:E3:F6:9B:96:01:28:D6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3133362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:09:ed:04:50:bf:c9:b1:69:82:cd:86:62:50:f8:af:18:
         b7:ad:6b:57:4e:64:99:45:1a:c8:ef:b2:51:fc:10:f3:2f:23:
         8a:ae:0e:e5:29:dd:db:26:e2:4f:60:50:5b:86:35:fa:12:c3:
         95:1f:5f:05:3a:23:f9:49:f8:a1:b9:18:83:9d:68:64:26:b4:
         78:20:d9:87:c5:80:c9:26:3c:85:76:05:16:82:ae:8c:63:8d:
         ec:b9:d1:bc:14:c8:6f:73:30:5a:95:78:dc:2e:7d:bb:a8:b1:
         67:ca:58:3b:28:3f:d5:25:52:f4:db:d3:ef:41:0a:40:2d:8c:
         76:2f:7f:d2:9b:6a:58:8d:48:39:e9:26:28:e3:6c:73:da:c0:
         79:5e:93:0c:53:db:10:76:bb:2c:6d:a0:51:5f:43:86:03:2d:
         48:5e:0a:54:fd:f7:90:ab:e2:01:73:ef:ac:bb:c6:09:31:25:
         70:fb:e7:94:2a:7f:af:62:25:bd:a1:9f:61:54:bb:6c:e8:8d:
         da:86:f2:a1:d3:9d:f3:24:2f:07:8d:13:c3:7f:60:37:aa:4d:
         67:d1:f7:55:a6:5e:cd:74:fa:7d:89:78:d6:f0:da:ac:38:5c:
         32:c9:cc:1e:f6:f4:67:61:5d:bc:51:7b:43:ed:58:b8:5f:8c:
         2b:dd:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----