Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134382e302f32332d3234203d3e20313331373639.roa
File:                     3130332e3232372e3134382e302f32332d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          iATM15Sdm1xfgqKSDriKJEYL9Apm0atXouy/eDd6oTI=
Subject key identifier:   A5:D2:C5:30:CC:05:6E:F9:87:17:E3:3D:D6:0D:F8:6A:E4:93:F3:BC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7A8B74D1A93703F842D5FB82A7CB2D1406111EEA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134382e302f32332d3234203d3e20313331373639.roa
Signing time:             Tue 13 Apr 2021 08:01:24 +0000
ROA not before:           Tue 13 Apr 2021 07:56:24 +0000
ROA not after:            Wed 13 Apr 2022 08:01:24 +0000
asID:                     131769
IP address blocks:        103.227.148.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8b:74:d1:a9:37:03:f8:42:d5:fb:82:a7:cb:2d:14:06:11:1e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 13 07:56:24 2021 GMT
            Not After : Apr 13 08:01:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:19:c8:2a:58:78:41:d6:69:06:58:9e:bd:
                    df:e3:1b:28:bb:be:50:bf:47:25:fd:aa:36:57:0a:
                    31:35:8f:80:ea:6b:e4:0e:26:b6:61:d4:45:42:bc:
                    10:b8:cf:1d:be:e9:23:90:ae:2d:0a:72:30:42:37:
                    89:c2:fc:87:c1:01:fc:e4:9c:22:6a:ef:29:c4:7c:
                    19:52:b3:b0:64:f6:55:78:86:11:3b:d7:dd:11:c9:
                    85:14:03:24:b4:b0:a9:da:07:08:77:8d:48:4b:08:
                    9e:ee:68:0c:ec:81:9e:0c:3c:16:61:f2:55:34:8e:
                    51:ae:eb:ca:9d:79:db:bc:c4:c6:8f:07:57:01:2d:
                    73:a6:3c:5d:d8:65:9b:9e:53:a9:64:2c:09:4c:af:
                    f5:4c:bb:3f:69:7e:c6:cd:d9:cd:d1:ca:35:8a:0b:
                    43:9a:4c:47:64:90:f5:f8:bf:a8:0b:d3:09:2b:57:
                    b5:03:2c:60:f9:ba:49:91:e6:19:60:f7:0c:03:04:
                    7f:d1:b3:99:bd:2c:a3:57:a8:06:17:89:de:20:a4:
                    90:70:94:23:20:09:12:eb:a2:bc:dd:d9:20:6a:12:
                    5d:96:3b:20:23:a7:eb:9b:3e:43:05:fe:51:3f:08:
                    8a:42:3d:36:ca:59:0f:b8:10:9f:11:9d:0c:0f:b2:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:C5:30:CC:05:6E:F9:87:17:E3:3D:D6:0D:F8:6A:E4:93:F3:BC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3232372e3134382e302f32332d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:b0:af:47:b0:73:d2:17:a4:58:ce:2f:45:60:fa:14:00:
         67:b1:1f:e0:4e:c9:d4:9c:a9:b5:d3:d4:19:53:a1:61:55:cf:
         e6:9d:d8:ff:7a:5d:1b:6a:43:3a:7c:30:6a:cf:f5:86:02:d2:
         98:26:6b:ce:41:ef:6a:f8:1f:24:f4:fb:31:9e:5c:bf:4a:21:
         6d:16:79:a4:77:a4:f9:5f:45:8c:1a:fa:01:8b:c6:0c:cb:11:
         3f:e9:7b:30:04:c2:8c:f8:5a:89:e2:dc:28:55:d2:4b:e8:a0:
         5f:86:20:a6:15:08:df:e0:70:4e:64:04:3c:d1:30:be:e3:5b:
         1d:62:a7:cf:3c:be:a5:d1:58:f8:0a:47:ca:72:de:41:59:a0:
         53:4b:fa:37:8a:2c:58:11:d2:1f:94:ac:15:1f:64:b6:ae:8d:
         0b:15:d5:8c:a7:1e:6a:42:32:b3:68:65:9a:0f:5e:0b:0c:cb:
         7d:f5:fb:8e:4e:24:d9:da:39:24:1b:48:45:62:d2:40:43:a4:
         94:34:ca:6a:30:e3:27:8e:e5:5a:f6:0e:14:8a:a1:fd:60:42:
         0a:d7:bf:9f:9f:f4:ba:dd:33:b2:6d:80:c2:5f:a5:2f:f9:b4:
         b5:5d:99:5e:c0:c2:6c:49:8f:99:5d:2b:f1:9b:0c:8f:65:8e:
         ca:fb:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----