Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39322e3232342e302f32322d3234203d3e20313336383233.roa
File:                     3130332e39322e3232342e302f32322d3234203d3e20313336383233.roa (raw, json)
Hash identifier:          wnWT9/Q7/gxEHLFJGBWAgvD+doop1qM+u19z32FD8n8=
Subject key identifier:   63:BC:48:B7:5A:42:B4:E2:07:B0:41:59:53:4B:0B:D5:6B:B9:52:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7E157C2B8EEC2D31B53D9A0F1487A655DF48949D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39322e3232342e302f32322d3234203d3e20313336383233.roa
Signing time:             Mon 26 Apr 2021 06:14:53 +0000
ROA not before:           Mon 26 Apr 2021 06:09:53 +0000
ROA not after:            Tue 26 Apr 2022 06:14:53 +0000
asID:                     136823
IP address blocks:        103.92.224.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:15:7c:2b:8e:ec:2d:31:b5:3d:9a:0f:14:87:a6:55:df:48:94:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 06:09:53 2021 GMT
            Not After : Apr 26 06:14:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:64:d3:a6:86:70:03:8e:75:8f:51:60:0d:
                    cc:ff:87:88:16:58:0a:43:ec:28:7f:0a:3e:98:4c:
                    07:44:57:f9:cd:2c:ef:ab:6e:04:63:8c:59:96:7f:
                    94:cc:13:25:58:a9:0a:a4:b2:22:48:77:3c:08:2e:
                    ed:bb:b4:dc:a2:11:03:39:d7:7f:df:d0:b6:a9:30:
                    82:08:61:f5:86:e2:88:1d:d4:87:08:11:e3:72:08:
                    bb:68:a6:ef:61:34:0b:6d:ef:3f:e4:59:d7:39:54:
                    29:f1:08:60:7d:d6:29:4a:95:ce:7a:6b:c8:c1:41:
                    74:ff:c8:d9:0f:5a:a9:52:c4:a0:21:97:d1:38:a7:
                    e4:3a:d9:f5:a2:e1:01:69:c6:48:4f:0a:4c:ad:9b:
                    0b:fa:57:43:e5:84:11:63:10:66:28:e0:0a:03:e5:
                    12:c0:44:67:4b:29:14:fa:4b:10:c3:14:c5:ce:64:
                    16:12:9c:e0:32:61:cd:ed:39:a5:58:b6:67:0d:f5:
                    10:18:b7:bd:a6:dd:20:29:57:f3:3b:25:77:9c:80:
                    b6:81:bf:8f:62:da:54:f4:4b:84:56:5a:e9:b8:13:
                    63:d6:27:62:51:e1:97:c4:da:68:25:16:7a:19:9d:
                    52:14:ed:ea:e5:fb:4d:23:9a:bb:c1:e0:5a:8b:6c:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:48:B7:5A:42:B4:E2:07:B0:41:59:53:4B:0B:D5:6B:B9:52:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39322e3232342e302f32322d3234203d3e20313336383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:91:62:d0:cd:91:db:aa:32:d2:01:ee:45:09:cc:1c:f2:a9:
         0c:0b:c6:49:2c:f7:6d:b4:01:18:cb:60:9b:58:21:58:df:14:
         3d:65:8c:0e:08:6a:30:05:59:dc:85:fe:8b:96:ca:e6:26:7d:
         1f:7e:a2:ea:bc:12:67:6a:01:40:57:91:54:07:88:10:10:76:
         b5:91:8f:49:26:d0:70:91:24:34:49:0c:af:58:66:fb:f2:3c:
         70:c0:9c:a5:72:0d:c5:e4:f3:49:71:b6:ed:4f:c4:46:55:2d:
         e4:f2:1d:77:e8:31:99:c2:b4:7e:ce:5b:78:0f:fe:80:b6:81:
         b5:a8:c2:dd:26:7f:3a:8d:a2:a7:c8:06:71:ee:8d:69:bc:4d:
         78:7e:d6:77:5e:19:ef:ed:c3:8b:7e:cf:44:f8:d2:cd:f0:a1:
         f6:2f:5d:7e:7f:79:86:8d:ae:57:b9:0a:26:88:b2:9d:cf:15:
         74:53:60:c9:3f:bb:8e:60:96:eb:f4:7f:d6:8d:f9:2e:c2:11:
         02:a8:be:a9:8d:0d:93:02:c2:ef:59:fe:f0:31:45:a6:fe:99:
         33:27:03:f5:0a:fc:d7:91:8c:f0:b9:f0:45:e3:1f:2b:8d:69:
         68:02:4b:58:9f:2b:20:fa:57:ff:84:31:47:76:ac:fe:e0:db:
         1a:76:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----