Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e32302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          W6taS5mL6oQGZc3GUxzVr97EMgEp9k7xTB5WER8JyKk=
Subject key identifier:   C2:92:87:A4:27:3C:1B:CE:84:2C:42:FA:82:03:07:82:82:6F:94:13
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5DEC886F563380517C1EAC832CFCF13EE3B3B53C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32302e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:15 +0000
ROA not before:           Mon 28 Jun 2021 16:47:15 +0000
ROA not after:            Tue 28 Jun 2022 16:52:15 +0000
asID:                     4800
IP address blocks:        103.169.20.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ec:88:6f:56:33:80:51:7c:1e:ac:83:2c:fc:f1:3e:e3:b3:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:15 2021 GMT
            Not After : Jun 28 16:52:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:ea:38:85:3d:e5:cc:b6:77:39:12:bf:6e:
                    2b:25:7e:8e:ab:01:8d:7a:0e:d1:09:e3:ef:d1:04:
                    63:90:e8:67:ae:82:9f:9e:0e:5a:42:c6:cc:f8:1a:
                    b2:43:3f:bf:e6:29:47:40:56:76:aa:58:a2:7c:72:
                    f3:9f:fb:7b:9a:b7:34:6c:99:04:50:05:9f:4f:56:
                    00:e4:c9:1a:63:cf:ba:3c:74:11:61:a0:f4:4f:02:
                    29:e9:09:e9:1f:9a:fa:69:5d:f9:9f:75:a1:cf:7a:
                    90:b6:74:e1:47:0c:17:f0:8d:9d:5f:cf:96:25:8e:
                    c5:8a:61:92:8f:95:e7:d6:f9:9a:b8:f1:7e:d4:8a:
                    61:e5:19:e1:cb:1b:35:42:1e:03:5c:6f:52:a8:ad:
                    ad:a4:bd:d1:27:34:68:89:9d:73:d1:e4:3e:b3:d0:
                    4b:9d:c9:3b:56:c1:39:f8:8d:e3:32:d5:bd:71:a6:
                    6f:c3:d1:68:cc:26:2a:dc:b1:ad:c3:a8:d8:72:f1:
                    fd:94:38:9b:cc:f9:38:bf:96:98:d5:d7:2c:17:e6:
                    58:f0:f9:72:c2:0e:4b:e2:c9:15:30:f4:82:d6:bf:
                    e2:ca:61:e7:58:fb:54:81:8c:39:07:fe:11:85:f9:
                    42:31:ec:b3:c1:92:fa:44:d9:d9:89:c9:9f:a4:2a:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:92:87:A4:27:3C:1B:CE:84:2C:42:FA:82:03:07:82:82:6F:94:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:6d:55:b3:15:07:a3:95:3d:88:de:ec:99:44:07:b2:eb:
         6e:ef:47:9e:6d:33:75:98:7b:86:31:80:59:16:97:9f:de:a6:
         97:b2:a9:2d:da:a4:9b:b9:5f:d2:e2:5c:cb:ab:94:5a:71:49:
         56:a9:0c:48:5e:dc:76:f1:ab:17:18:c0:8b:d9:26:83:e1:11:
         a9:a5:cc:87:aa:c5:9b:8d:e2:4a:57:f1:4a:16:c3:78:bf:f5:
         07:b8:b2:10:ca:70:5c:85:88:73:6c:a1:b1:1e:cc:fc:69:26:
         6f:15:c4:ce:02:e9:02:f6:f4:a3:db:9c:cb:e3:c0:e8:79:f4:
         76:ff:ea:ad:d1:b3:af:1d:1c:37:26:d4:cb:06:c6:97:2d:91:
         96:25:b7:34:46:90:cd:9d:0f:34:49:03:0a:25:7c:8d:09:5b:
         30:88:7b:3e:dc:41:9f:4b:ad:97:14:fc:ba:df:5f:82:28:f0:
         5b:71:3b:57:b8:c6:7d:a8:63:2c:ff:82:31:b6:01:60:5d:d6:
         68:25:a6:d3:73:ca:bf:e5:44:a9:47:74:3e:b9:27:c2:51:57:
         15:eb:89:58:f3:cb:a9:b3:c1:68:34:2c:5f:64:4c:33:3b:73:
         ff:6a:e6:70:0b:46:3f:aa:a0:f7:b1:10:0b:63:9c:72:f8:56:
         0b:fb:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----