Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136362e302f32342d3234203d3e20313432333138.roa
File:                     3130332e3136382e3136362e302f32342d3234203d3e20313432333138.roa (raw, json)
Hash identifier:          +tvYxhhgCfrtSbgYZ70j04DpioonmZ3u0txBka6H+BA=
Subject key identifier:   FE:60:42:6E:38:42:B5:42:E6:7C:DD:3C:76:77:C7:86:48:F2:DD:C9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6935968E9106B9E93283BFAB5CF578E3796E1347
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136362e302f32342d3234203d3e20313432333138.roa
Signing time:             Fri 16 Jul 2021 07:41:07 +0000
ROA not before:           Fri 16 Jul 2021 07:36:07 +0000
ROA not after:            Sat 16 Jul 2022 07:41:07 +0000
asID:                     142318
IP address blocks:        103.168.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:35:96:8e:91:06:b9:e9:32:83:bf:ab:5c:f5:78:e3:79:6e:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 16 07:36:07 2021 GMT
            Not After : Jul 16 07:41:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:1c:14:73:b3:9d:76:31:7e:6f:df:0d:23:
                    b8:33:57:82:bb:de:57:59:58:c8:02:22:78:f9:a1:
                    ea:49:1e:b4:c9:6e:cc:81:c5:65:ac:31:01:74:31:
                    ed:b3:f5:4d:47:f5:a4:c7:7b:ca:21:4e:08:da:89:
                    5f:03:f3:90:5e:3f:c4:51:ad:f7:5d:6b:63:96:4e:
                    e5:a8:65:1e:d7:36:3e:0c:94:88:19:77:b7:a6:d2:
                    02:c8:21:9e:30:c2:71:1f:88:9a:8f:6f:90:f3:07:
                    17:d7:5b:8e:ba:f5:fb:ba:5d:04:95:a9:d2:fe:db:
                    61:ec:97:65:2e:80:cc:e5:52:83:1e:30:a3:b3:59:
                    36:fc:03:74:e0:9c:f1:9c:f0:d8:45:8a:29:d5:31:
                    8e:d2:fe:df:9d:da:66:fa:67:96:df:9d:1e:bf:dd:
                    9b:61:77:7e:d3:11:f1:2b:fd:12:63:c1:dd:2f:01:
                    b2:b0:ce:41:2a:f8:54:d4:53:ed:fc:a1:9d:9d:b5:
                    42:63:fe:08:d8:82:c9:f4:29:30:bf:da:45:34:23:
                    4f:43:c2:94:91:c7:cd:37:ff:05:a9:ce:df:ac:61:
                    d0:09:07:0a:d2:70:38:f5:ea:ed:e9:35:a6:26:9d:
                    15:0d:b9:3e:74:50:a7:bc:93:07:6c:97:7e:a0:ab:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:42:6E:38:42:B5:42:E6:7C:DD:3C:76:77:C7:86:48:F2:DD:C9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e3136362e302f32342d3234203d3e20313432333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:ab:ff:b7:c2:1c:06:b3:a4:e3:5f:6c:91:71:29:16:36:
         2c:b0:36:9a:dd:8c:34:6d:94:6c:6a:06:ac:ec:e9:d6:43:11:
         62:6f:5b:71:0d:69:74:01:71:ac:0e:dd:60:89:56:0e:9a:a6:
         a8:5a:ba:b4:70:f1:34:c3:e5:f9:03:45:c9:b5:34:5a:96:e4:
         21:9f:9d:8f:3f:e4:b7:6f:2b:d1:98:6b:27:57:4e:ac:ba:34:
         41:85:f4:52:6a:88:50:2a:b8:3f:84:57:97:55:3d:1d:e8:5d:
         75:c8:28:46:f2:8e:6c:ca:7c:60:ea:03:da:5d:53:68:dc:cd:
         8f:b2:4b:f7:08:e6:36:ec:9a:4b:c9:0c:f0:11:7a:76:c4:0a:
         c6:e5:e2:04:54:42:fa:4a:11:ad:e9:c3:3a:b2:fc:38:cd:5b:
         f6:04:b2:fc:8d:97:74:f7:2a:98:81:e5:58:87:5d:d9:bc:f8:
         f6:35:95:8f:ec:ae:49:ed:c2:73:8b:8a:d6:53:7a:82:6a:e2:
         64:b8:19:45:c9:6a:be:89:7e:e1:59:25:1b:8a:df:f3:8b:29:
         4e:ef:26:c8:b2:74:d4:74:39:85:3a:36:9c:af:c1:8e:36:f0:
         d1:6c:33:67:3e:ad:4b:bc:15:dc:eb:f0:6b:79:2a:fb:70:00:
         0a:a6:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----