Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230302e31362e302f32332d3234203d3e20313334363330.roa
File:                     3130332e3230302e31362e302f32332d3234203d3e20313334363330.roa (raw, json)
Hash identifier:          2BdSBg3qUmlXGtX2rLfKy1cthzhV+TCnpzpyL9mFrBw=
Subject key identifier:   74:92:26:1F:9A:83:66:E1:F0:EF:D7:4C:91:A4:07:48:85:77:8E:FE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5510DE1ABF20EA2FF504947CC6FDC93C26D68302
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230302e31362e302f32332d3234203d3e20313334363330.roa
Signing time:             Mon 26 Apr 2021 03:15:56 +0000
ROA not before:           Mon 26 Apr 2021 03:10:56 +0000
ROA not after:            Tue 26 Apr 2022 03:15:56 +0000
asID:                     134630
IP address blocks:        103.200.16.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:de:1a:bf:20:ea:2f:f5:04:94:7c:c6:fd:c9:3c:26:d6:83:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 03:10:56 2021 GMT
            Not After : Apr 26 03:15:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:86:e4:e4:95:70:5a:0c:9c:31:a6:82:b0:
                    7e:85:94:72:f8:53:a3:59:88:14:20:91:86:b0:7c:
                    23:07:42:52:ca:51:a2:20:23:ab:65:af:53:cb:29:
                    fe:e6:12:05:95:f1:7a:ae:1a:b5:1c:4c:80:e4:04:
                    3b:09:71:77:9e:70:e6:d1:a9:0b:67:e1:cb:0f:c6:
                    1d:39:5f:8b:6e:bc:37:c4:c1:7f:b1:99:02:9d:3f:
                    45:b1:2a:86:3e:e4:fe:09:ad:6f:5d:cc:d5:df:42:
                    42:a5:d0:f0:3c:fc:8b:8c:9a:b6:fa:7c:27:9f:d2:
                    ca:b7:06:8d:66:bf:f6:83:c1:dc:7d:f5:fc:f9:e4:
                    0c:d7:4f:8c:45:20:8f:36:11:d0:a6:41:d6:83:eb:
                    c4:a2:5a:e5:db:f1:65:8f:cd:80:13:df:4d:aa:be:
                    dc:86:85:c6:e8:bd:48:42:7e:76:c7:73:de:28:8c:
                    fe:f9:11:2d:c7:4c:d2:b5:a3:76:d3:68:d8:21:e6:
                    de:0e:92:48:c2:65:1b:9a:0c:07:fc:37:e3:0d:65:
                    f3:67:5a:a8:83:76:e1:ab:35:28:7c:4d:aa:ba:58:
                    0c:fd:22:d9:b8:c2:37:ab:92:4e:11:8c:75:26:cc:
                    ca:0c:2b:56:29:29:22:40:c4:57:91:90:1c:1d:55:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:92:26:1F:9A:83:66:E1:F0:EF:D7:4C:91:A4:07:48:85:77:8E:FE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3230302e31362e302f32332d3234203d3e20313334363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:6e:85:5a:cf:72:5a:8d:fd:8f:43:09:95:6f:3a:64:da:
         84:92:bd:5d:ef:3a:36:46:69:81:76:15:be:4b:63:2f:c9:0a:
         2c:9c:a2:31:28:2b:be:9e:e3:7d:f7:d3:ef:65:a0:65:a1:75:
         6e:98:72:0e:73:d7:8e:6b:85:ac:55:27:a1:c0:cb:b7:46:7f:
         40:c4:43:5d:22:0a:a0:d2:ee:71:3d:bb:a6:5e:e2:10:31:c6:
         34:54:bf:16:ba:db:ee:14:43:ff:81:62:67:d6:e4:6e:01:2a:
         49:dc:5c:eb:26:6a:90:8d:94:b1:03:e0:78:23:a4:9a:ea:ec:
         e3:7b:a0:45:f3:78:aa:4b:87:cf:bf:e7:48:03:db:de:72:b2:
         82:53:fe:11:e4:de:21:de:1c:aa:31:99:87:af:69:4d:73:e7:
         b8:72:3b:67:76:17:b4:2e:8a:49:f4:e4:d5:60:4a:ba:d7:1a:
         e5:ee:9b:dd:1f:d6:9b:e3:d8:78:e6:ec:65:0c:fb:15:3c:93:
         92:e1:a2:90:54:06:5c:b3:a7:64:3a:5b:af:9a:9c:58:29:e6:
         41:4f:4f:cb:17:15:1c:89:73:29:b4:d7:a5:56:37:9d:c4:b0:
         12:14:be:23:38:71:b7:24:9f:2d:93:70:bf:c0:75:6f:65:b2:
         d1:dd:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----