Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3138382e302f32342d3234203d3e203633353135.roa
File:                     3131362e3139332e3138382e302f32342d3234203d3e203633353135.roa (raw, json)
Hash identifier:          Q2Lh/7SsO1CPGrOP91AI64YWmLuEGR46Hty1IiK+FxI=
Subject key identifier:   14:13:2B:BC:C9:4A:02:19:BF:B5:C5:C8:DD:B5:F6:6A:BA:56:2E:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1113A7E7ABD76DFA66541B5E655DB5356813CF8A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3138382e302f32342d3234203d3e203633353135.roa
Signing time:             Tue 27 Jul 2021 15:23:30 +0000
ROA not before:           Tue 27 Jul 2021 15:18:30 +0000
ROA not after:            Wed 27 Jul 2022 15:23:30 +0000
asID:                     63515
IP address blocks:        116.193.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:13:a7:e7:ab:d7:6d:fa:66:54:1b:5e:65:5d:b5:35:68:13:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 27 15:18:30 2021 GMT
            Not After : Jul 27 15:23:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:d0:b1:01:bf:0b:d2:3c:e0:f1:fb:18:82:
                    31:3c:ec:9c:14:e3:28:d4:79:8f:83:dd:4b:f6:bc:
                    8a:6f:dd:70:20:78:fe:b3:fb:39:82:a7:c5:b7:0d:
                    45:d8:aa:60:5e:5d:1d:a7:fd:55:c5:84:27:b7:cc:
                    c0:c3:a2:69:66:39:cc:8e:b7:10:1c:c0:5f:f5:94:
                    3d:be:a5:01:b6:6b:98:eb:25:5b:12:80:de:a1:b3:
                    7a:4d:85:8b:4a:4f:8d:66:18:6a:19:3a:32:a6:e9:
                    bf:48:f0:d1:b9:c2:5a:10:3c:6f:b1:cb:7c:6a:24:
                    7a:cf:55:ed:1d:e3:d7:fd:da:c6:cf:80:a1:2e:c1:
                    ca:49:cc:c6:59:f0:0d:12:bd:53:98:bb:04:1d:16:
                    05:be:ea:43:65:6f:86:d5:dd:e4:55:83:4d:bb:34:
                    68:b5:66:95:84:f5:94:f6:b9:35:42:22:ac:d4:ea:
                    3e:bf:ac:77:f2:6c:87:9a:d6:88:81:49:fe:19:6c:
                    98:64:98:0c:d2:71:0a:37:f5:f9:03:0e:49:19:67:
                    8a:5b:87:6b:29:63:b7:97:ec:a5:8a:b6:c4:e3:b7:
                    42:f1:7c:2a:f7:d8:06:b2:fb:22:ec:28:6a:68:bd:
                    ff:ea:34:ff:d1:bd:a0:6f:6b:9a:b1:69:16:4b:2c:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:2B:BC:C9:4A:02:19:BF:B5:C5:C8:DD:B5:F6:6A:BA:56:2E:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131362e3139332e3138382e302f32342d3234203d3e203633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:54:b4:60:f8:f9:21:a7:36:13:8f:19:90:fd:1e:82:93:
         ba:58:3e:14:fd:60:84:79:7e:9c:7a:4a:22:1d:5b:20:00:b5:
         ae:69:b5:31:8e:fc:1c:98:c7:19:ec:51:76:83:ee:f3:52:cb:
         2c:75:ba:f7:cc:43:f3:57:fd:51:df:a2:4a:97:4d:b5:a2:e8:
         8e:28:72:40:e2:78:d9:5b:46:9f:22:9b:36:a9:e1:8b:70:c9:
         34:df:24:b9:14:69:0a:aa:eb:69:5a:fe:ea:b3:0d:83:96:73:
         ed:6d:f3:45:12:5d:78:84:51:8a:3a:04:e5:d1:f0:28:38:72:
         2e:58:01:97:cd:a0:a3:e0:cc:87:1d:5b:6c:9c:b9:36:f4:1d:
         a8:a8:41:96:34:bb:26:f5:1f:a0:30:b4:b6:99:60:a8:9c:64:
         24:62:cf:0e:33:b9:4a:ae:dd:67:d8:1e:30:46:ca:c5:96:08:
         ae:a1:17:82:8a:c8:47:6b:81:1f:97:90:1e:d2:1a:83:12:58:
         05:b2:76:d7:6a:54:97:34:cf:69:38:85:41:db:ee:9d:7c:d8:
         86:17:f0:11:5e:e5:99:2d:fa:65:75:55:51:b2:69:87:9c:5a:
         99:84:c3:d9:91:91:0b:04:ca:5c:36:f2:2e:db:56:19:5a:1d:
         50:11:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----