Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
File:                     3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (raw, json)
Hash identifier:          MV99dSnpXihPi+7rKhLTKFjf2EPjJZc2khDxJ8zkznI=
Subject key identifier:   A6:4C:63:3A:FC:49:06:BF:8E:EF:F2:A4:A1:1E:75:B5:BF:F1:E5:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1ACC221EE43964F09892A777254E955ABAF4C714
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
Signing time:             Tue 25 May 2021 09:17:37 +0000
ROA not before:           Tue 25 May 2021 09:12:37 +0000
ROA not after:            Wed 25 May 2022 09:17:37 +0000
asID:                     131760
IP address blocks:        103.30.170.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cc:22:1e:e4:39:64:f0:98:92:a7:77:25:4e:95:5a:ba:f4:c7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 25 09:12:37 2021 GMT
            Not After : May 25 09:17:37 2022 GMT
        Subject: CN=3082010A0282010100E7C80F6759E3202F2320BBC4CD56D486881867F518DBAB977094E512DE2ED44EA395B1014EEB9B16A1BCAC97ACDA8DD9F423774FDBF3AB9305D6AB46B5CEC65AC1BEC790389A29D0EBA8B5BA9E3A6C23DECAE95FEBA382C65977D7B742EC2A9E5989C7E2252262A02FDEEC34160C2A75366B90E68D2679A4E7A7861A0266CE6E0D7AE34DE961868CC3FED3C5C3FE850A16A4C96570D8D5616313F3D21657F6F9F75C6B013CCED353CEC689B173C6DEA46D7D23CE02179DD684E01B0D2A4CFB9F1F96215EBCA83D20B65D953E2E0E446BD0BBDB8A7D191160082C30121E8CB7F8491BC900D4E877ACC97ADDA5C914F8C3DF689E3568B0D0E7677D993266B1F0D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c8:0f:67:59:e3:20:2f:23:20:bb:c4:cd:56:
                    d4:86:88:18:67:f5:18:db:ab:97:70:94:e5:12:de:
                    2e:d4:4e:a3:95:b1:01:4e:eb:9b:16:a1:bc:ac:97:
                    ac:da:8d:d9:f4:23:77:4f:db:f3:ab:93:05:d6:ab:
                    46:b5:ce:c6:5a:c1:be:c7:90:38:9a:29:d0:eb:a8:
                    b5:ba:9e:3a:6c:23:de:ca:e9:5f:eb:a3:82:c6:59:
                    77:d7:b7:42:ec:2a:9e:59:89:c7:e2:25:22:62:a0:
                    2f:de:ec:34:16:0c:2a:75:36:6b:90:e6:8d:26:79:
                    a4:e7:a7:86:1a:02:66:ce:6e:0d:7a:e3:4d:e9:61:
                    86:8c:c3:fe:d3:c5:c3:fe:85:0a:16:a4:c9:65:70:
                    d8:d5:61:63:13:f3:d2:16:57:f6:f9:f7:5c:6b:01:
                    3c:ce:d3:53:ce:c6:89:b1:73:c6:de:a4:6d:7d:23:
                    ce:02:17:9d:d6:84:e0:1b:0d:2a:4c:fb:9f:1f:96:
                    21:5e:bc:a8:3d:20:b6:5d:95:3e:2e:0e:44:6b:d0:
                    bb:db:8a:7d:19:11:60:08:2c:30:12:1e:8c:b7:f8:
                    49:1b:c9:00:d4:e8:77:ac:c9:7a:dd:a5:c9:14:f8:
                    c3:df:68:9e:35:68:b0:d0:e7:67:7d:99:32:66:b1:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:63:3A:FC:49:06:BF:8E:EF:F2:A4:A1:1E:75:B5:BF:F1:E5:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:03:b4:fb:b8:40:ec:c4:1f:3e:52:74:b1:ee:09:f5:08:a8:
         0b:a3:b3:2b:f3:4c:77:2c:11:ed:da:57:23:0c:82:28:fa:72:
         ec:4b:b5:09:28:f5:2e:e1:34:e0:d5:3d:49:3b:85:bc:5f:35:
         0b:5c:3f:f3:41:13:c2:0b:ec:19:db:4e:85:27:7f:ba:3f:be:
         33:36:a1:d9:18:e0:f0:a7:01:76:03:38:de:88:2d:b6:fa:7a:
         65:9f:0a:c3:cd:f4:74:3b:b1:00:96:19:27:2d:7f:f4:1c:a2:
         a2:42:ae:df:0e:39:7d:db:d7:03:c0:71:15:6c:6d:0a:9b:8f:
         df:f4:9f:26:70:8f:7a:d5:c2:01:20:52:f9:53:d3:39:df:49:
         ab:69:a1:93:74:28:e2:91:e9:c4:60:0b:81:c9:19:bf:b8:bd:
         a4:57:7b:c6:ed:92:fa:42:78:80:f8:67:fd:38:c2:08:7c:3b:
         4a:17:fe:66:70:3e:b1:09:03:c4:be:9b:18:35:5e:83:0a:39:
         30:fc:92:05:84:e0:3f:b6:ca:04:87:84:7a:e2:ac:4a:87:79:
         4f:3d:e0:97:3e:b4:19:bc:89:81:95:eb:c3:12:8f:ed:57:57:
         2d:4f:c3:be:d0:24:d0:78:c1:ee:6c:70:62:9b:fe:bb:0e:91:
         1a:c2:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----