Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38322e302f32332d3234203d3e20313432333733.roa
File:                     3130332e3137312e38322e302f32332d3234203d3e20313432333733.roa (raw, json)
Hash identifier:          6mu3JyljfA9xQJ5PyIfH3x/vDZguhVb9V2akCZYUAZ4=
Subject key identifier:   FE:11:ED:31:61:04:D7:24:70:B6:24:AF:C9:E1:F3:59:45:17:4B:18
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       05118F723965013C6C037CFAF93A6D156F362CA6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38322e302f32332d3234203d3e20313432333733.roa
Signing time:             Tue 31 Aug 2021 07:12:01 +0000
ROA not before:           Tue 31 Aug 2021 07:07:01 +0000
ROA not after:            Wed 31 Aug 2022 07:12:01 +0000
asID:                     142373
IP address blocks:        103.171.82.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:11:8f:72:39:65:01:3c:6c:03:7c:fa:f9:3a:6d:15:6f:36:2c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 31 07:07:01 2021 GMT
            Not After : Aug 31 07:12:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:5b:d2:bb:6e:52:0a:6f:6c:f7:bb:d2:10:
                    59:93:6f:bb:71:59:29:7a:08:63:27:a7:7f:61:2e:
                    ec:6d:6a:98:ec:4a:b4:6a:23:cf:09:28:29:3d:3a:
                    62:cf:e9:27:6d:dc:fe:cd:69:d9:ee:80:65:98:67:
                    47:d2:21:83:cc:49:fa:b1:db:e5:85:d4:e8:4b:15:
                    c2:c8:39:d1:5a:6f:3f:15:0e:17:0f:96:8d:10:ab:
                    44:b8:fd:cd:f5:35:d3:1a:20:35:45:bd:a8:f6:3d:
                    49:e3:14:68:c3:14:6c:c3:8d:f8:23:f6:8d:08:07:
                    ba:5e:09:1e:cc:3e:f7:34:91:b9:c1:90:cf:04:7b:
                    a0:66:19:c2:f5:f7:ef:23:4c:fa:89:9e:ed:20:ef:
                    35:a1:a5:e0:d6:6e:ab:c1:84:4b:f1:29:91:19:1a:
                    b2:58:28:45:b9:50:29:fe:e1:01:a1:81:cd:8e:a8:
                    64:ba:50:07:74:a9:4f:bb:1f:56:47:11:9d:63:60:
                    fc:75:5b:76:0d:9e:71:70:8b:e3:44:30:fc:30:c1:
                    0f:70:16:b0:58:9a:5b:06:c1:84:cd:ff:e9:3a:04:
                    df:e5:03:45:f8:dd:1c:6f:9c:0f:36:41:62:c6:e8:
                    b1:36:f0:86:41:ab:73:f6:22:5d:b8:c7:a9:3a:f9:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:11:ED:31:61:04:D7:24:70:B6:24:AF:C9:E1:F3:59:45:17:4B:18
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137312e38322e302f32332d3234203d3e20313432333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:48:e0:54:b9:2b:50:26:eb:79:6f:fb:dd:fe:8d:19:73:
         c3:e9:9b:78:54:f5:9d:47:80:78:cf:00:97:75:bf:00:94:01:
         98:96:e8:2f:d4:8b:7e:a8:d8:db:b5:44:41:c3:45:d0:b5:d3:
         2b:27:25:82:8d:48:43:06:91:91:b1:c7:65:c2:a5:20:e3:6e:
         fb:3e:8f:5e:54:6c:36:ce:c5:c1:1c:57:cc:76:27:16:01:0b:
         0b:58:97:5d:33:8c:e3:2e:bf:ab:1f:34:3e:61:f5:ae:fc:27:
         b9:50:62:68:e6:49:bb:b8:e9:84:2d:79:8c:1e:ac:31:0e:86:
         12:e8:33:4c:8d:a4:8c:3a:9e:04:6b:0d:e3:0d:3c:9d:7e:59:
         c6:03:2e:9e:a1:13:ac:ab:e0:4c:68:05:25:71:51:f0:16:da:
         ed:2b:e5:7a:38:8d:2b:2a:e8:66:11:6f:65:43:7d:17:6e:ce:
         b0:1e:82:6e:83:ba:af:4e:a9:92:af:5b:83:87:85:28:0c:77:
         c7:cb:f7:02:a5:0d:55:c1:55:95:99:c9:47:ce:7a:70:62:d7:
         3f:61:af:b0:14:f2:00:54:38:b0:fa:a9:20:1b:a2:ca:2a:99:
         01:3c:2f:ee:79:2b:95:e2:4a:54:e1:a4:ba:2e:6c:e6:38:1f:
         c9:ac:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----