Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e3233342e302f32332d3234203d3e203338373731.roa
File:                     3130332e3137312e3233342e302f32332d3234203d3e203338373731.roa (raw, json)
Hash identifier:          VGUIiV/1ImP0Vw12gGeiVyA9aykIdAvN++Vq0/uyl8U=
Subject key identifier:   0E:A8:23:9B:6A:89:B2:4C:2A:59:1B:DE:FA:74:29:B6:B2:8E:EC:CE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       744E1AE3A7074360AA0D557D8D72B7C591892A8C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e3233342e302f32332d3234203d3e203338373731.roa
Signing time:             Tue 24 Aug 2021 08:31:24 +0000
ROA not before:           Tue 24 Aug 2021 08:26:24 +0000
ROA not after:            Wed 24 Aug 2022 08:31:24 +0000
asID:                     38771
IP address blocks:        103.171.234.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4e:1a:e3:a7:07:43:60:aa:0d:55:7d:8d:72:b7:c5:91:89:2a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 24 08:26:24 2021 GMT
            Not After : Aug 24 08:31:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:e4:89:f7:27:3e:03:15:02:88:00:17:70:
                    db:53:7f:8c:d5:ff:b2:38:b6:e1:11:c0:29:b9:5a:
                    78:26:d0:b7:8a:fe:9d:d1:47:2f:c3:6b:d9:92:89:
                    8e:1b:d8:56:3c:75:d7:06:18:8f:65:d9:16:3e:6a:
                    22:70:ce:ed:ab:21:78:24:ec:0f:55:99:dc:0a:d1:
                    81:7a:1f:37:cd:f2:1d:44:90:fe:9d:54:50:a3:44:
                    5e:1a:ee:7b:94:66:9d:21:40:83:04:91:e7:2c:dc:
                    fe:ff:97:fa:91:61:c9:c6:cd:53:25:a2:8b:08:e2:
                    e5:8b:68:f2:9e:77:93:83:c0:f8:f4:ee:14:62:0a:
                    e9:5d:cd:2e:d4:df:53:3d:f2:8d:5a:33:2b:41:46:
                    63:34:70:9e:67:04:1a:46:a8:66:2b:e8:58:ea:18:
                    e2:0f:ea:a8:40:9e:d8:17:c2:51:44:5c:78:2d:13:
                    ab:41:f0:88:94:75:0c:0e:aa:59:05:be:97:ef:67:
                    f0:79:50:4c:90:4d:e2:7a:74:eb:35:21:0c:44:3f:
                    e1:eb:95:6d:6f:15:e1:c5:ad:db:92:43:d8:8b:19:
                    53:35:e6:8f:62:11:35:fd:75:e0:8e:e1:9e:af:17:
                    8d:8f:92:92:98:72:8b:1f:d9:3a:af:84:07:f3:63:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:23:9B:6A:89:B2:4C:2A:59:1B:DE:FA:74:29:B6:B2:8E:EC:CE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e3233342e302f32332d3234203d3e203338373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:ec:2b:de:7b:fb:1e:31:73:cb:41:48:ac:41:62:f2:d3:
         3b:60:7e:ab:92:dc:a3:35:51:57:08:fe:72:ce:7a:d1:79:98:
         92:d0:44:fe:a8:48:7d:1e:e9:dd:93:fe:22:94:f2:5c:06:20:
         7d:2a:be:42:d6:fc:d1:39:1d:21:02:78:c5:7d:a1:15:53:60:
         6f:88:0c:98:fd:eb:53:3e:28:c8:99:97:99:cd:43:24:35:2b:
         e2:17:4f:13:df:8c:f9:60:b0:27:62:6a:90:eb:1d:3c:f2:e4:
         b6:36:c9:16:99:28:2f:a3:e4:55:75:11:a9:f6:2a:ec:3e:dd:
         ac:c3:66:ae:40:2a:6a:3d:17:a9:83:a5:ba:80:74:b6:f7:92:
         70:6e:e3:b3:51:67:f8:13:ee:85:cd:fd:a5:55:f7:ff:eb:4e:
         bd:4a:50:98:07:61:ba:ae:ab:4b:b5:00:93:3e:2f:d8:d8:3f:
         69:19:ea:ec:48:60:25:6c:c8:38:93:87:bb:ee:55:e6:a4:08:
         f2:ba:f3:bb:33:22:0d:93:aa:54:fb:a0:1f:25:79:11:27:7e:
         b5:cf:d8:3a:28:52:62:e0:70:5e:07:14:fd:d3:7a:cf:3b:de:
         7b:a1:4d:65:86:d4:63:b2:26:ff:de:6d:a4:84:a0:39:73:36:
         d5:60:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----