Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32382e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e32382e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          LcqdaPZlR/P0akA6FS9f4fh7yhBWZV1KyFFYhoayXgo=
Subject key identifier:   FF:E7:DB:CA:FE:69:88:08:A1:D9:21:6D:51:03:88:C3:B9:59:26:CD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7D6A80D45EB9DCC4FE5061F1AE7D9EB3E4509B92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32382e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:14 +0000
ROA not before:           Mon 28 Jun 2021 16:47:14 +0000
ROA not after:            Tue 28 Jun 2022 16:52:14 +0000
asID:                     4800
IP address blocks:        103.169.28.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:80:d4:5e:b9:dc:c4:fe:50:61:f1:ae:7d:9e:b3:e4:50:9b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:14 2021 GMT
            Not After : Jun 28 16:52:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:9f:bd:da:a5:98:78:33:eb:d0:45:58:93:
                    b0:0b:85:c5:90:4b:f7:91:a7:b5:dc:bd:a4:a7:4d:
                    7c:89:29:e1:31:4b:89:f2:98:ad:37:85:26:f7:d3:
                    4d:fe:bc:9b:24:62:67:7f:48:80:e2:23:23:31:a3:
                    b7:6b:67:ad:a1:a1:61:19:ff:cd:0d:6b:43:89:ae:
                    2b:14:9b:4e:fd:92:9c:77:1b:01:a0:39:38:e2:c9:
                    b6:df:19:12:2d:f7:97:0f:e7:10:69:75:70:1b:81:
                    cf:5f:f2:0b:1f:2e:d8:d8:38:83:02:f8:9e:ac:d8:
                    d0:14:6c:49:29:b4:e5:15:73:10:4b:0b:92:2f:40:
                    0c:8d:68:20:13:b5:a9:84:8b:dc:fd:fc:a4:5f:a4:
                    0e:24:ad:47:db:57:5b:45:08:d6:c1:5a:00:0f:9c:
                    13:74:5a:33:ce:ac:b4:bc:77:d4:c1:99:2e:85:1a:
                    8c:d0:05:da:28:77:46:8a:9b:15:8b:af:e9:f4:86:
                    19:42:92:12:17:f5:03:20:f4:e3:53:d4:84:51:06:
                    f6:0d:57:ce:85:c7:f4:25:cf:0d:3e:e6:3e:aa:ba:
                    dc:ff:b5:76:4c:60:e1:c3:53:04:20:8d:00:78:88:
                    59:c3:e5:30:0f:8d:bd:7f:dd:f5:90:f2:a9:16:e1:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E7:DB:CA:FE:69:88:08:A1:D9:21:6D:51:03:88:C3:B9:59:26:CD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32382e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:ee:dc:52:bc:68:9e:fa:a9:c3:1d:e5:22:de:e7:e2:b5:
         bb:d6:9a:f2:1c:c3:6c:cb:8a:41:93:26:89:21:66:45:28:3f:
         5c:99:0c:95:85:79:0b:e5:1d:e9:ce:2e:5f:1e:48:7d:16:97:
         65:88:8a:69:68:15:b4:b4:72:b0:df:ea:af:1c:f1:17:88:83:
         7f:79:fe:3a:97:04:e8:a4:7f:36:fb:68:5b:cf:8c:84:9f:d5:
         8b:0e:58:8f:e9:22:cf:9f:a2:a0:aa:77:a5:72:6c:d7:1c:9c:
         12:d3:55:e9:56:9b:9e:d0:47:fb:7a:b7:33:22:de:82:08:90:
         71:a6:d6:b1:42:58:c3:24:94:ad:63:6f:95:16:36:b3:35:42:
         05:bd:dc:65:0c:e9:b4:84:46:8d:ad:e5:fc:76:4e:70:13:40:
         b9:0c:ac:a0:9e:4f:9b:e6:50:85:1f:61:96:91:47:71:0e:4c:
         d8:39:67:71:4a:0e:55:06:0d:96:5e:a0:14:fe:3e:fd:9d:f8:
         ff:85:6c:df:ff:96:82:9a:c2:ad:74:f8:2c:70:d2:fe:0e:10:
         ce:6f:71:b9:df:0a:f6:38:92:69:f0:ac:d0:78:c8:c5:f6:e0:
         00:c0:cb:1e:36:b8:50:56:0e:54:01:45:1b:2a:5d:8d:57:2c:
         63:ee:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----