Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32342e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e32342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          RL49ddmGQNhGu/4emxPNlHDMwfS26kK932zs7xvg04I=
Subject key identifier:   9C:DC:E3:6D:37:C0:9C:F7:CA:74:4B:D8:EE:83:A5:46:B6:C8:D3:9F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1296F141E1D55EC7202CB9DAC30EDC0C074DBBA6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32342e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:13 +0000
ROA not before:           Mon 28 Jun 2021 16:47:13 +0000
ROA not after:            Tue 28 Jun 2022 16:52:13 +0000
asID:                     4800
IP address blocks:        103.169.24.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:96:f1:41:e1:d5:5e:c7:20:2c:b9:da:c3:0e:dc:0c:07:4d:bb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:13 2021 GMT
            Not After : Jun 28 16:52:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:63:7e:94:53:85:d8:75:4b:6e:06:a9:32:
                    7f:7b:51:f8:93:06:42:0b:01:e9:aa:5d:e8:ff:20:
                    7b:8d:da:5d:89:44:50:a7:6f:6b:d1:3f:d4:f7:a1:
                    49:ea:42:15:9e:47:03:1a:01:f8:9c:42:a5:32:f1:
                    e7:90:87:51:63:c4:6e:5e:10:eb:08:75:8f:cf:b0:
                    6b:82:70:25:d3:bc:2b:10:77:e5:c2:1e:8e:48:50:
                    f8:e9:56:e1:76:a7:1a:6d:23:7b:96:5d:5d:d8:8d:
                    60:93:10:21:25:fc:4b:0d:f7:8f:ed:0d:c5:e9:13:
                    bf:a2:0c:25:3f:10:4a:8e:55:34:81:d3:3b:50:18:
                    4b:2d:03:ff:d6:7a:fa:9b:62:aa:79:15:77:44:c0:
                    7c:c1:12:27:11:cb:92:9c:11:3a:74:de:6f:75:0c:
                    85:e4:2a:97:5f:ab:5e:fb:23:0b:f9:c7:ab:bd:88:
                    56:77:76:bd:f3:33:93:56:a9:58:b9:a9:27:80:2d:
                    47:10:3c:aa:ab:56:45:95:b7:0e:ea:c5:1f:9a:d4:
                    f2:2b:c5:c6:4f:f5:75:d9:6c:48:26:2a:20:70:4a:
                    2e:39:b2:e9:06:aa:01:77:d3:a9:f2:52:b5:90:5c:
                    4a:98:98:2e:9b:67:29:a4:3a:4e:0d:8e:d8:31:cd:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:E3:6D:37:C0:9C:F7:CA:74:4B:D8:EE:83:A5:46:B6:C8:D3:9F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:63:3d:a3:d3:ee:e9:d9:d7:0f:d9:df:ad:07:1a:bb:17:ce:
         3a:5f:27:46:e4:68:b9:60:92:ec:4b:44:6e:08:99:ab:88:c3:
         f7:a7:7c:88:6e:d4:85:8f:b0:0d:30:70:6e:d2:ac:54:d8:16:
         64:59:0c:e5:30:14:76:58:e0:20:55:bf:3b:dc:52:00:64:d9:
         ec:32:61:d3:91:8c:7f:0a:d2:cb:59:16:b5:a3:6a:3c:81:0d:
         e1:26:4f:e5:30:c3:f5:60:fc:4d:7f:a8:24:33:ca:bf:d3:47:
         7c:e3:79:74:33:ef:fa:7a:96:6d:8b:91:ee:52:92:b9:46:61:
         7a:93:68:14:47:d8:50:ea:42:d1:4e:e0:bf:df:30:b6:f8:f1:
         3c:98:5c:95:39:3c:ea:72:b8:9b:c0:ee:8d:f3:76:76:31:32:
         01:43:07:72:4b:e4:00:69:16:b1:63:5b:a4:c8:df:c2:bd:9d:
         a7:41:41:c2:90:6c:bd:19:d0:73:16:05:23:c1:27:00:a2:a8:
         50:e4:ed:be:fb:6b:b6:00:c0:37:8f:aa:5b:d9:0e:0b:65:f9:
         01:cc:0c:4d:87:a4:d3:6d:12:f4:cf:f3:b7:56:f7:ad:61:9d:
         8a:27:71:88:f0:65:a8:f3:a5:b1:6e:34:d5:d6:0f:77:df:ce:
         b9:43:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----