Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233352e302f32342d3234203d3e20313335343739.roa
File:                     3130332e37352e3233352e302f32342d3234203d3e20313335343739.roa (raw, json)
Hash identifier:          XiT6YP9/1ZBrf292UOEzbW1tfxSYjxUVfYVcAWhRZ6E=
Subject key identifier:   45:FE:28:EE:B2:87:4F:C2:43:98:01:30:64:0A:13:3B:B3:DA:63:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       465A63BCF0B1283AD1C6072AA810F2BF54709D40
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233352e302f32342d3234203d3e20313335343739.roa
Signing time:             Tue 12 Oct 2021 03:00:00 +0000
ROA not before:           Tue 12 Oct 2021 02:55:00 +0000
ROA not after:            Wed 12 Oct 2022 03:00:00 +0000
asID:                     135479
IP address blocks:        103.75.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5a:63:bc:f0:b1:28:3a:d1:c6:07:2a:a8:10:f2:bf:54:70:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 02:55:00 2021 GMT
            Not After : Oct 12 03:00:00 2022 GMT
        Subject: CN=3082010A0282010100A2E3F4034D01BCBBEDE71C83B3652D9BD54744D076A30FDF9A347AC28F689F0E4D7E595751193DFD7257F1B73C63272B59D96819EFCF2EA5F426B0E810276A465D91BF581F5D2309480C8DAF5B93320AD84B133E7A7011AA0D45A89F401A83D61895DBC164C209468E993A83011391C0B054C62C86DA495DBF0870543E42F7A57A0F8EC29F9C186141E219C15C03CAE42810864F2984E31D2498C94E077B7E3F1BFB565A935DE1D7FE01F870493F936E97B95CA4FE817A58004CC78C3725FAB8ABAA29936120883456A25C81DCBFD6B7793394CB6165FB17B3535330BBED0B5AD6E80743898E205D010BA2C6AC6C9111C4FAA9BBAB05C03DA4E157BAB0D183FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:f4:03:4d:01:bc:bb:ed:e7:1c:83:b3:65:
                    2d:9b:d5:47:44:d0:76:a3:0f:df:9a:34:7a:c2:8f:
                    68:9f:0e:4d:7e:59:57:51:19:3d:fd:72:57:f1:b7:
                    3c:63:27:2b:59:d9:68:19:ef:cf:2e:a5:f4:26:b0:
                    e8:10:27:6a:46:5d:91:bf:58:1f:5d:23:09:48:0c:
                    8d:af:5b:93:32:0a:d8:4b:13:3e:7a:70:11:aa:0d:
                    45:a8:9f:40:1a:83:d6:18:95:db:c1:64:c2:09:46:
                    8e:99:3a:83:01:13:91:c0:b0:54:c6:2c:86:da:49:
                    5d:bf:08:70:54:3e:42:f7:a5:7a:0f:8e:c2:9f:9c:
                    18:61:41:e2:19:c1:5c:03:ca:e4:28:10:86:4f:29:
                    84:e3:1d:24:98:c9:4e:07:7b:7e:3f:1b:fb:56:5a:
                    93:5d:e1:d7:fe:01:f8:70:49:3f:93:6e:97:b9:5c:
                    a4:fe:81:7a:58:00:4c:c7:8c:37:25:fa:b8:ab:aa:
                    29:93:61:20:88:34:56:a2:5c:81:dc:bf:d6:b7:79:
                    33:94:cb:61:65:fb:17:b3:53:53:30:bb:ed:0b:5a:
                    d6:e8:07:43:89:8e:20:5d:01:0b:a2:c6:ac:6c:91:
                    11:c4:fa:a9:bb:ab:05:c0:3d:a4:e1:57:ba:b0:d1:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:28:EE:B2:87:4F:C2:43:98:01:30:64:0A:13:3B:B3:DA:63:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e37352e3233352e302f32342d3234203d3e20313335343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:0b:ab:b9:59:aa:5d:e0:65:16:2a:bd:09:95:2b:5c:96:
         cf:ca:da:4b:32:ad:09:56:9d:da:ee:e4:36:db:8c:17:59:f8:
         a2:93:a0:cc:33:46:2a:87:3d:bb:ff:7b:34:ec:05:7c:db:5f:
         e2:4e:c0:25:20:6f:7c:ee:c2:66:2f:7a:fb:9d:30:2b:c1:18:
         e5:3a:3e:2c:bc:b2:cb:5e:dd:98:58:75:b7:6e:31:24:db:fb:
         36:cc:7d:1c:25:0c:4b:af:f3:2c:8b:28:87:ae:ab:35:ff:b7:
         61:e1:fe:74:a0:f8:38:6f:71:ff:12:34:cd:ed:39:20:3f:9d:
         f8:d4:ed:eb:3f:2b:69:ea:ac:a8:74:d5:e0:20:d9:f1:26:13:
         1a:4c:08:7e:c6:69:5d:dc:30:c9:a4:20:d3:1c:72:61:78:cf:
         20:9e:a3:84:36:db:93:ce:c9:fe:05:a8:38:cc:78:62:b8:35:
         fc:a9:44:3f:92:9e:45:b3:da:ec:6b:e0:27:31:32:a5:da:4e:
         3c:ad:98:0d:1f:46:34:0d:1c:94:50:c8:09:fa:f6:a1:3d:ea:
         94:b5:b7:2c:76:19:55:24:18:cc:82:51:c9:3d:74:66:88:40:
         2b:95:c4:b9:10:26:35:c2:88:ba:8c:df:fd:d2:ff:df:1e:9a:
         e8:4e:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----