Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132342e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136392e3132342e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          ZqrG3O1lcJu5bHbyQcPn6tmsf0W829lKuhMSsY6oGCU=
Subject key identifier:   F2:B0:BA:7D:A8:2C:10:9E:16:5F:76:39:31:B0:83:1E:CA:53:B7:35
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E43F80BACECBE31E77F939C14C092F4FD42D1C1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132342e302f32332d3234203d3e2039383735.roa
Signing time:             Wed 29 Sep 2021 01:11:40 +0000
ROA not before:           Wed 29 Sep 2021 01:06:40 +0000
ROA not after:            Thu 29 Sep 2022 01:11:40 +0000
asID:                     9875
IP address blocks:        103.169.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:43:f8:0b:ac:ec:be:31:e7:7f:93:9c:14:c0:92:f4:fd:42:d1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 29 01:06:40 2021 GMT
            Not After : Sep 29 01:11:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:ca:ac:1a:5b:8b:9f:e5:b3:1f:35:35:bc:
                    f2:20:3d:68:08:e6:f6:89:61:00:dc:82:aa:f7:69:
                    3c:99:ad:cd:ed:13:ee:5c:d5:91:a8:ea:03:50:5f:
                    89:78:2c:d1:3b:e8:1b:b0:c0:3e:ec:16:5f:e2:24:
                    37:11:3d:0c:8d:f4:e3:d9:20:d5:8e:52:f2:1c:35:
                    4d:02:6c:96:5f:d5:0b:55:3c:94:ff:e7:51:2b:e1:
                    71:6c:a6:e8:f2:e5:76:51:64:bb:50:99:00:27:69:
                    a5:68:be:24:88:69:ba:76:68:e9:0a:d0:16:34:25:
                    d9:03:1f:6e:ce:28:e2:dc:8e:b2:d2:c8:8f:38:c0:
                    1b:3c:79:2c:d1:d0:e6:b5:32:b7:b9:3d:bf:a8:f8:
                    be:d5:0f:59:37:5c:c1:05:f6:4a:43:2a:d7:d8:03:
                    50:6d:81:81:51:6d:f3:f1:e9:f1:17:fb:f9:eb:22:
                    4b:08:67:cf:8f:25:0a:98:ed:3f:14:fd:cf:76:4e:
                    01:0b:ba:7e:fd:54:9d:41:79:49:2e:27:00:f5:3e:
                    ba:1a:17:c6:fe:8c:47:ce:86:5c:d6:a1:72:34:85:
                    79:68:35:fb:92:a7:fe:b7:7e:31:b0:41:d3:59:82:
                    98:86:f2:ba:3b:57:11:bf:71:cb:89:ab:3f:e3:9b:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B0:BA:7D:A8:2C:10:9E:16:5F:76:39:31:B0:83:1E:CA:53:B7:35
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e3132342e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:aa:97:26:29:6d:9e:59:ed:9c:90:60:db:aa:c4:86:c8:db:
         4c:2b:a9:7a:20:b9:40:1a:58:50:09:b1:e7:11:24:a0:69:11:
         f1:b5:fe:48:77:bc:3f:26:35:15:ed:fe:b5:82:ed:d7:7f:36:
         52:93:28:97:29:4d:d9:28:03:4d:05:48:79:58:e1:de:d8:9b:
         2c:ee:35:3a:d4:83:a4:09:e4:ad:59:73:20:06:d2:b0:77:ef:
         b6:de:21:33:8c:79:75:3e:0f:04:ad:bb:66:f7:fc:8b:8c:f6:
         c0:2f:94:20:98:8a:84:b5:7f:93:70:0f:f5:e6:68:7e:f2:ff:
         8d:fc:d8:41:b5:9e:14:cf:50:93:be:31:1c:3d:04:37:d7:1d:
         97:02:fd:01:c4:90:dc:b3:f7:f8:0e:6a:b2:da:8a:83:5d:ef:
         3a:bb:33:a3:49:68:21:6a:04:f2:81:df:18:8b:1d:34:68:22:
         cb:f6:bd:c9:ac:09:cc:fe:ec:0a:89:f9:1e:fb:27:f4:eb:23:
         36:8b:65:39:ca:91:d3:da:8a:86:02:6c:93:b2:c6:4d:f6:d4:
         f6:45:39:11:12:c3:f9:b1:dd:b7:c0:6c:71:f5:fa:13:92:90:
         ac:72:46:ec:b3:be:7c:92:b4:3b:22:d6:03:15:82:4e:a0:55:
         51:fd:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----