Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa
File:                     3130332e3235322e32312e302f32342d3234203d3e203539313337.roa (raw, json)
Hash identifier:          LD61VE7VQ+0jGP0loeazWAEvpWJu61BF5UkMmL0yU3g=
Subject key identifier:   77:7E:81:AD:56:E4:8D:E3:7A:B7:5D:09:CD:DC:90:0B:65:B4:BA:0E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       22ECAE14726C71082720E71A9942576D4770F071
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa
Signing time:             Tue 12 Oct 2021 04:00:03 +0000
ROA not before:           Tue 12 Oct 2021 03:55:03 +0000
ROA not after:            Wed 12 Oct 2022 04:00:03 +0000
asID:                     59137
IP address blocks:        103.252.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:ae:14:72:6c:71:08:27:20:e7:1a:99:42:57:6d:47:70:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 03:55:03 2021 GMT
            Not After : Oct 12 04:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6a:b2:4c:8c:5b:20:7f:07:ea:b2:14:bb:40:
                    98:62:ef:43:36:c3:1e:29:29:fe:ed:a5:f9:06:85:
                    4a:39:ff:b3:19:8f:a5:75:91:91:17:7f:62:30:d6:
                    7b:7e:9b:e5:eb:12:2b:5e:7b:90:81:2c:5d:ff:79:
                    43:fa:dc:2d:e4:53:36:99:99:23:81:98:63:ff:c2:
                    0c:1e:74:44:c0:60:a4:d4:25:70:3b:8f:70:5e:61:
                    1f:9a:74:9c:68:7f:1e:7d:28:32:b8:ed:d1:f4:67:
                    93:6e:b1:46:63:64:dc:06:97:26:6d:3a:50:a5:48:
                    b6:dc:00:00:e2:f0:fc:99:60:2d:2d:44:62:bb:05:
                    0e:ab:17:6c:62:cc:76:45:38:cd:0e:dc:30:e0:98:
                    21:74:29:7b:87:06:74:f5:a1:ac:c3:f2:a8:cb:b5:
                    28:f4:a7:56:e8:82:0f:af:9d:73:99:6c:a7:c0:81:
                    e1:c6:bd:d6:fd:a9:05:fe:3b:38:ed:95:49:0c:24:
                    f7:cf:8b:fd:f3:13:57:22:0d:1d:d3:b6:22:4c:e5:
                    fb:b7:6d:db:19:e8:da:da:54:a3:29:cd:7a:a5:a6:
                    3a:2f:ac:70:18:8b:4e:71:19:84:c9:9d:06:47:4f:
                    ab:ea:83:f4:05:0b:63:da:d4:84:cc:61:67:f0:27:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:81:AD:56:E4:8D:E3:7A:B7:5D:09:CD:DC:90:0B:65:B4:BA:0E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:15:2e:30:87:3a:17:13:d2:0c:c1:23:d8:00:ff:2b:30:
         87:34:04:2d:8f:80:1f:ba:68:47:11:67:6c:70:87:6b:d7:ab:
         04:97:87:52:67:82:e8:9d:e7:60:1c:5c:92:dc:71:83:ea:94:
         11:d2:c8:02:ac:f0:f9:a9:25:96:74:16:42:b3:a7:d7:fb:b5:
         a4:cf:8f:9c:00:3a:d8:4d:2b:a3:d2:25:9a:db:c0:4d:62:cc:
         be:68:59:c8:64:1a:8e:ee:5d:df:10:44:62:aa:b7:f9:ed:f5:
         2e:92:c5:7b:14:7a:9c:df:e1:3c:ab:c5:28:d7:ba:6d:c7:2e:
         e3:9d:ff:f7:06:02:87:bf:1d:70:29:ce:9e:be:bb:1c:cd:dd:
         15:7d:06:c4:f2:cf:28:1d:0d:29:94:79:67:e1:f9:cd:dc:26:
         e6:a8:9b:d7:b5:74:aa:fc:6b:8a:b1:c7:21:ea:c1:52:50:94:
         57:5e:c0:99:a4:bf:5d:55:10:59:6b:3f:a6:42:15:b4:f0:0c:
         2a:0b:de:2d:2d:d4:02:85:b0:3e:c6:b3:5e:1f:0a:8b:f2:ef:
         57:e2:9f:28:34:da:43:e7:cf:64:05:63:8d:6f:0c:6e:03:a0:
         a4:cd:e1:0b:31:01:8d:be:dc:5b:11:e2:f9:e1:5b:eb:85:39:
         8b:77:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----