Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233332e302f32342d3234203d3e20313335343739.roa
File:                     3130332e37352e3233332e302f32342d3234203d3e20313335343739.roa (raw, json)
Hash identifier:          4frjl0o2mvxapJrqMi2YR7r3p7WkJpKR3U4ncQv1rpc=
Subject key identifier:   A4:5A:EB:62:E1:34:B9:53:AD:A1:FA:D2:29:09:52:DE:F5:35:EC:33
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2628DFE3805E6DDDDB9F9EFEFE4079E4844BE53A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233332e302f32342d3234203d3e20313335343739.roa
Signing time:             Tue 12 Oct 2021 03:00:00 +0000
ROA not before:           Tue 12 Oct 2021 02:55:00 +0000
ROA not after:            Wed 12 Oct 2022 03:00:00 +0000
asID:                     135479
IP address blocks:        103.75.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:28:df:e3:80:5e:6d:dd:db:9f:9e:fe:fe:40:79:e4:84:4b:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 02:55:00 2021 GMT
            Not After : Oct 12 03:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:b3:cd:0c:dc:e4:62:e5:8f:e6:38:38:8b:
                    51:5a:83:cd:95:5f:c7:38:75:95:17:40:59:a0:19:
                    30:2c:9d:1e:d1:ae:40:6f:ec:25:bc:fb:37:b0:ab:
                    25:0c:d6:37:03:57:cb:57:66:d9:4f:a7:7a:2d:34:
                    16:62:70:f4:ee:23:fe:54:30:78:0f:99:e1:aa:d9:
                    2c:2a:c1:4a:49:30:1b:25:5b:22:ca:17:50:72:37:
                    5d:94:61:56:3a:12:53:df:4d:5d:bb:cc:b4:54:3a:
                    20:ea:cb:22:8b:09:77:99:a7:7f:49:15:3b:34:ba:
                    06:c5:49:21:74:60:e0:99:04:96:dd:61:73:39:dd:
                    4f:48:a3:23:06:a9:e7:47:9e:91:74:1a:a0:6b:21:
                    e2:87:a4:94:a5:31:e2:bb:9b:92:3c:80:7d:1f:8a:
                    63:bf:ff:91:ac:3c:72:c8:c3:d6:a6:ef:db:02:77:
                    3e:b0:d1:b8:28:91:da:df:b8:d7:09:56:4b:63:46:
                    fd:16:d0:99:76:c9:f0:f3:bf:04:d9:ab:aa:8c:ea:
                    c5:a2:32:5b:0d:0a:70:f3:33:9d:4c:7c:1f:23:9a:
                    63:fc:b6:d7:9e:43:95:cd:16:ef:62:3e:39:af:01:
                    b9:b7:8a:c1:52:58:78:6f:ad:d3:ec:3c:56:1d:94:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:EB:62:E1:34:B9:53:AD:A1:FA:D2:29:09:52:DE:F5:35:EC:33
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233332e302f32342d3234203d3e20313335343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:d4:9b:1f:0a:7c:e1:00:f9:20:69:30:63:5c:39:86:20:
         d6:bb:7c:24:b3:c9:b8:fd:0b:e0:f3:37:4a:d8:c2:f1:b6:a0:
         05:64:36:43:10:4d:f6:69:84:f8:2c:12:2e:f9:b3:ad:ce:f4:
         dd:d6:85:34:11:5c:8d:b1:16:e8:bb:fd:57:72:b0:2b:a3:bf:
         66:3b:5e:91:0e:4f:92:39:b7:ea:97:1b:b4:67:f6:15:e0:e4:
         84:a0:5f:1d:a5:d2:7a:87:ea:f5:8f:90:d0:52:64:02:71:20:
         d0:76:37:cd:0e:15:98:88:ba:3c:83:cf:04:99:72:e9:79:55:
         a3:10:7a:e5:0a:b8:cb:0b:da:51:b3:a4:44:a2:63:81:9f:06:
         b6:d1:06:6a:bd:2c:c1:53:ff:0c:7c:1f:f4:0e:96:3a:0c:4f:
         e5:0f:75:23:72:6c:82:7a:31:ac:d8:90:b5:97:e3:1c:18:db:
         2b:c8:cc:4b:e4:a3:5b:cc:cf:e7:fd:cb:07:e0:3a:88:d7:bb:
         6a:13:b9:8b:6b:5b:e2:dc:a5:e8:2f:88:c1:00:ef:39:96:ef:
         e5:48:8e:af:b3:fd:63:78:2b:56:dc:a0:f1:49:5b:0e:a7:0b:
         51:22:36:10:c8:26:2f:83:42:c5:1e:b3:46:a8:bf:42:c4:60:
         40:93:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----