Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32312e302f32342d3234203d3e20313432333239.roa
File:                     3130332e3136382e32312e302f32342d3234203d3e20313432333239.roa (raw, json)
Hash identifier:          Q0UEWMzak2pxR4BExpm1Y1AR3gqZRolmGaj8WaBUP6E=
Subject key identifier:   3F:44:25:F9:83:40:D1:7F:77:B6:24:F6:DF:AC:71:2B:D2:17:03:0D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5D8F377928CA3998D1234E59D58E7B1A738B7EC2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32312e302f32342d3234203d3e20313432333239.roa
Signing time:             Mon 19 Jul 2021 09:42:09 +0000
ROA not before:           Mon 19 Jul 2021 09:37:09 +0000
ROA not after:            Tue 19 Jul 2022 09:42:09 +0000
asID:                     142329
IP address blocks:        103.168.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8f:37:79:28:ca:39:98:d1:23:4e:59:d5:8e:7b:1a:73:8b:7e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 19 09:37:09 2021 GMT
            Not After : Jul 19 09:42:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:ed:07:2e:89:8e:c6:27:89:45:a2:3c:c2:
                    fd:75:d6:51:e3:66:97:07:60:cc:60:3a:7b:ca:e4:
                    ed:68:9f:fd:7c:e5:e0:e7:50:d3:fb:77:07:26:79:
                    f2:85:61:cc:05:87:1d:1b:9f:62:f2:d8:98:d3:55:
                    d0:18:e7:72:cc:d8:f7:19:09:01:70:60:03:48:01:
                    8b:1e:e0:e7:eb:95:09:26:5a:62:b1:c1:83:d9:71:
                    ef:68:db:11:a1:3c:ad:eb:2c:0b:fc:87:6b:87:08:
                    75:b0:81:b8:eb:a3:01:10:11:e0:8a:c9:b2:ca:af:
                    60:51:e4:ba:eb:9f:08:2d:89:2c:d6:ce:50:37:d6:
                    d1:82:64:3b:b4:70:24:0d:d0:11:5a:b1:fe:ba:68:
                    b7:98:0b:7f:cb:a5:e7:ff:d8:2d:28:f3:ac:a2:68:
                    0f:96:66:3b:e4:b5:27:dd:3a:f0:68:36:3d:3a:7e:
                    68:6b:ea:80:5b:d7:00:97:94:3e:62:6d:44:09:70:
                    20:00:c4:e9:63:22:70:f7:93:78:1a:2c:71:b0:b7:
                    6a:e7:89:57:6b:f2:cb:35:0d:1c:ab:c7:37:67:1a:
                    2b:68:f5:ee:d5:d0:b1:1f:f5:81:47:ac:18:27:f7:
                    58:0b:9f:3d:e0:37:25:78:57:b6:04:97:c0:69:ea:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:25:F9:83:40:D1:7F:77:B6:24:F6:DF:AC:71:2B:D2:17:03:0D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32312e302f32342d3234203d3e20313432333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:30:8f:38:e2:ea:a4:41:79:1e:5c:da:9f:f6:34:64:31:f7:
         06:db:c4:cb:4c:c1:55:38:a9:11:b3:0f:6f:e9:c4:e5:0d:06:
         f6:85:b9:d7:d4:30:2a:d4:9e:a2:eb:c6:47:3f:bc:fa:a0:90:
         60:39:cb:fc:95:b7:ea:25:2d:cd:e8:1d:6e:9e:a4:3e:38:17:
         59:3c:7f:2a:fd:b1:75:24:26:19:05:be:dd:01:39:28:0f:12:
         36:9a:01:a0:01:8a:29:38:0b:31:7e:b4:34:bd:3a:0a:28:9f:
         d0:41:d8:2c:33:bf:28:68:e9:ce:2d:38:79:48:28:ce:a4:69:
         e0:c2:90:fd:29:d4:df:8a:33:c0:05:fb:de:02:d0:52:11:62:
         83:86:06:15:44:1c:40:fb:51:a7:7a:fe:55:94:7c:ee:3e:f4:
         53:fe:96:88:86:ad:7b:20:0e:ab:d1:75:ed:13:33:53:73:4e:
         d3:29:d4:22:4a:b6:5a:1d:d3:58:a0:73:99:c0:79:3b:e2:95:
         8d:d5:95:f4:ab:07:f4:bf:78:88:ab:a8:a3:84:cb:b6:a2:93:
         9d:f9:da:e6:73:32:4e:49:80:09:52:21:fa:4c:23:57:ae:3e:
         07:ac:5e:0a:ea:7d:03:13:59:3c:ce:64:be:a9:fc:12:83:0d:
         ed:e9:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----