Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3134382e302f32322d3234203d3e203435373031.roa
File:                     3130332e3232352e3134382e302f32322d3234203d3e203435373031.roa (raw, json)
Hash identifier:          hUDbeCkyQmaDjuCU0CznUEF/Hwu+pU5Q8UTF00RUjRU=
Subject key identifier:   97:A5:45:8A:F1:D0:ED:0D:15:59:AA:4F:0F:93:E3:D4:7A:81:BF:AC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       63D5C0C2DBD4F07FBA91B0A8ED2F11B0B1FBC7C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3134382e302f32322d3234203d3e203435373031.roa
Signing time:             Wed 09 Jun 2021 04:21:43 +0000
ROA not before:           Wed 09 Jun 2021 04:16:43 +0000
ROA not after:            Thu 09 Jun 2022 04:21:43 +0000
asID:                     45701
IP address blocks:        103.225.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d5:c0:c2:db:d4:f0:7f:ba:91:b0:a8:ed:2f:11:b0:b1:fb:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  9 04:16:43 2021 GMT
            Not After : Jun  9 04:21:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:93:da:27:f2:84:5b:e2:a7:53:91:63:30:
                    3e:90:c2:a8:e3:cb:47:35:86:4c:05:4e:d4:32:59:
                    01:6d:dc:a8:a4:33:d4:3e:2e:69:9d:8e:dc:d3:9a:
                    86:2c:1c:ed:31:f4:b0:fe:ec:33:73:0f:98:c9:d2:
                    b3:47:a6:e0:b4:ab:d4:c4:f5:50:7c:d3:6d:24:63:
                    c7:b4:18:ef:e7:74:81:af:5b:ad:6c:e8:cb:b8:35:
                    38:7b:00:10:7f:30:30:80:8e:bf:db:fa:23:e6:1f:
                    7e:90:be:29:c8:80:99:12:2b:f0:f4:60:a4:3e:9e:
                    43:6d:fa:1d:8b:a2:2e:8e:96:b0:ea:45:89:23:7a:
                    da:21:9c:09:e0:51:9a:f9:47:48:a8:4f:44:73:42:
                    88:02:e0:db:a7:9f:34:dc:06:5b:31:c8:79:00:f7:
                    b6:45:24:33:8f:ec:de:0e:7e:c4:51:22:81:dc:41:
                    91:ed:8a:43:1e:22:11:b5:00:58:6b:6a:d9:98:af:
                    d0:fb:4a:c8:f0:68:f2:0f:c8:ea:3a:15:f3:a2:b8:
                    ce:26:f3:41:b2:ab:60:7f:fa:9d:b2:95:d1:c8:79:
                    c9:56:a5:9c:4c:77:99:2b:04:61:08:e9:33:77:60:
                    06:8f:98:49:63:96:49:40:72:94:b8:16:85:fc:cb:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:45:8A:F1:D0:ED:0D:15:59:AA:4F:0F:93:E3:D4:7A:81:BF:AC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232352e3134382e302f32322d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:96:5a:bf:1c:fe:94:04:5e:6a:a1:41:8d:47:8b:80:79:
         93:c0:4a:c8:09:97:40:5a:f4:84:65:b3:f2:e3:74:f9:d0:ce:
         50:95:48:5a:4e:c0:ae:9d:93:07:69:83:58:73:c5:fc:91:8f:
         19:25:7f:25:22:a0:09:34:73:22:1b:14:08:56:ce:e0:4f:53:
         86:b3:56:db:a6:e7:4e:5f:58:a0:17:d0:b6:fb:6e:7f:71:ca:
         2d:12:99:dd:71:9b:b0:48:4a:7b:09:3e:e2:72:68:fd:89:2d:
         7b:72:ee:5f:61:3d:de:58:9b:0b:d6:aa:9d:cf:96:31:21:fa:
         80:71:7a:a3:4f:c2:b3:93:67:d2:f6:2a:b3:f1:c9:6c:33:57:
         97:ae:9e:42:73:db:d3:3d:0d:a6:57:71:8f:1a:8b:96:b0:bb:
         b2:1e:39:b8:09:19:25:e2:5f:10:14:47:d4:f4:15:91:2f:8e:
         0e:19:3f:6e:77:20:c5:80:cc:23:d0:f2:49:44:2b:6b:80:41:
         bf:32:1c:a4:d9:52:b0:e8:70:dd:ee:4d:b2:8d:7f:1e:7d:1f:
         b9:64:1f:8c:9c:5a:ef:f5:b7:39:06:8a:40:27:57:21:af:c7:
         4a:1e:76:d6:99:3d:67:a9:76:a1:a9:c6:d3:d8:6e:b5:ee:9d:
         5b:5e:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----