Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3139342e302f32332d3234203d3e203539313530.roa
File:                     3130332e38312e3139342e302f32332d3234203d3e203539313530.roa (raw, json)
Hash identifier:          INa2SXetv8XJqX05hGv0wjLdSoY1zWvyWilz8pzI25o=
Subject key identifier:   7E:06:27:8B:A5:B9:81:B0:8C:AA:A9:B1:DD:39:97:20:C1:78:C7:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       39B235E33F61A036F8DB86C97C9C9F15044E092F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3139342e302f32332d3234203d3e203539313530.roa
Signing time:             Mon 30 Aug 2021 09:45:42 +0000
ROA not before:           Mon 30 Aug 2021 09:40:42 +0000
ROA not after:            Tue 30 Aug 2022 09:45:42 +0000
asID:                     59150
IP address blocks:        103.81.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b2:35:e3:3f:61:a0:36:f8:db:86:c9:7c:9c:9f:15:04:4e:09:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 30 09:40:42 2021 GMT
            Not After : Aug 30 09:45:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:98:21:90:f0:94:c9:b3:62:d4:c0:47:7a:
                    26:14:a8:7d:84:36:13:a0:98:ea:d9:d4:90:ea:af:
                    49:3e:79:57:b9:54:79:a5:e8:f6:08:52:d2:7d:b4:
                    ab:52:af:3c:0e:99:16:10:2f:88:3a:4e:53:ec:ea:
                    97:98:da:fe:57:b4:9e:17:0f:52:4f:a6:e9:c2:b1:
                    83:dd:20:31:93:4b:f8:26:78:bd:c3:f3:15:f4:e8:
                    70:53:d6:1e:27:9e:bd:ca:81:d0:c9:ba:53:4b:a0:
                    7d:f3:dc:a1:92:81:c0:2c:6f:fe:49:a4:14:42:ca:
                    66:37:4f:a8:98:2a:a3:c2:0c:11:cb:7a:f1:7c:74:
                    78:c3:0a:dc:9f:40:1f:f1:b8:f7:28:f2:b6:b6:f1:
                    7c:cf:fe:a9:34:77:e4:2d:e1:50:74:df:38:df:6f:
                    d6:e8:8a:3a:1a:72:1d:c0:97:c3:6c:67:22:10:ec:
                    7e:ad:d3:3d:f3:33:8f:46:a8:18:56:7c:07:f2:df:
                    1c:f7:52:3e:e3:b8:d1:ad:7d:26:7f:ca:28:86:31:
                    d4:d6:66:0b:ad:65:6b:da:ff:ef:be:f8:9c:c7:b4:
                    6c:9e:d3:84:99:d3:8e:a0:07:34:99:37:e0:14:50:
                    50:97:ec:54:07:26:c1:b0:ba:2d:a1:3c:d9:74:db:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:06:27:8B:A5:B9:81:B0:8C:AA:A9:B1:DD:39:97:20:C1:78:C7:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38312e3139342e302f32332d3234203d3e203539313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:0d:8b:00:b3:48:6b:99:6a:55:f2:8d:bb:e1:01:5b:58:
         d3:29:98:a9:0b:96:bb:7e:8a:9a:39:02:f5:20:ec:a4:a0:17:
         b9:d1:2b:1a:16:58:a9:02:b9:50:28:89:ea:21:03:3e:ac:19:
         28:ff:e6:eb:c5:31:ef:ca:bd:f7:7f:5e:1b:3c:e1:a6:c8:a2:
         eb:b7:67:b6:8b:e2:e1:f1:0e:2b:be:39:66:93:66:be:0c:84:
         28:b2:d7:95:bc:f0:61:4c:71:f3:14:b2:80:0c:a0:e0:91:67:
         48:70:b3:36:db:da:b0:67:67:9e:64:dd:29:08:aa:a8:df:70:
         72:3b:9b:58:4c:0f:96:e3:26:d1:07:4b:92:e2:58:c3:57:d6:
         79:cc:ec:15:ed:94:2d:70:82:37:c5:f6:c9:4b:53:81:d6:e0:
         48:3c:22:7d:2e:98:e1:6f:3b:e8:4f:b4:af:bb:f1:93:ed:09:
         53:d6:18:21:8e:cd:ff:d2:6b:7f:b4:fe:fa:53:e2:eb:25:f9:
         ab:f5:76:1c:17:d9:cd:9a:30:26:3f:1a:5d:5a:96:d1:4e:4c:
         0e:c1:09:94:cf:81:75:87:65:36:ee:ae:97:40:7f:10:0b:1d:
         0a:76:4d:7b:04:15:8b:a4:d7:17:01:d3:df:ba:b4:a5:9e:69:
         b5:49:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----