Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e3135332e302e302f31382d3234203d3e2039333236.roa
File:                     3132342e3135332e302e302f31382d3234203d3e2039333236.roa (raw, json)
Hash identifier:          J4Z9P/qxf2UtzVGBQZU42Htka3bmZk8quw0bgR+wPus=
Subject key identifier:   6B:40:BB:64:BF:41:3E:49:99:57:C2:DB:AB:82:98:85:E1:7C:A3:01
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7B32D0A9A4CB9DF7D5565D6E36E3268417EBFC49
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e3135332e302e302f31382d3234203d3e2039333236.roa
Signing time:             Wed 28 Apr 2021 02:18:14 +0000
ROA not before:           Wed 28 Apr 2021 02:13:14 +0000
ROA not after:            Thu 28 Apr 2022 02:18:14 +0000
asID:                     9326
IP address blocks:        124.153.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:32:d0:a9:a4:cb:9d:f7:d5:56:5d:6e:36:e3:26:84:17:eb:fc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 02:13:14 2021 GMT
            Not After : Apr 28 02:18:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:42:d2:e1:d9:3f:9b:20:d4:be:a4:5b:5a:
                    bd:dd:db:08:24:4b:a5:f6:45:ae:92:ad:1a:4c:e7:
                    5f:25:b6:c2:13:e2:5a:92:81:f6:f2:31:0d:03:2f:
                    fa:30:4f:b2:f5:94:39:99:b0:e3:8c:64:67:bc:95:
                    01:66:14:ca:de:b9:62:79:81:52:5a:98:6a:b4:18:
                    49:1a:56:d4:9b:a9:8e:ef:b7:ea:8a:ff:9e:83:7b:
                    66:d8:79:5a:a3:b8:94:fb:9c:5a:d9:7e:e3:05:ad:
                    cb:a2:57:c8:96:2c:07:a7:fb:dc:67:55:9b:1f:9a:
                    ac:5d:4a:64:e4:cf:c7:99:a5:51:df:33:2b:c3:23:
                    41:0a:b9:18:6d:6d:13:be:e5:5a:0a:a2:88:f6:e3:
                    36:97:d7:29:7d:84:c5:da:62:4f:ea:29:23:95:60:
                    6f:b9:92:f4:d0:af:9a:ae:95:f3:22:3d:dd:42:d4:
                    0c:0d:7d:90:5f:e8:74:a3:74:70:74:f9:84:3a:e0:
                    2f:78:93:5f:0f:e3:ae:22:b1:46:c0:56:08:9a:81:
                    c0:be:55:65:24:00:83:91:9e:c4:44:ac:da:4e:a8:
                    1e:ea:72:f2:c5:b3:9c:a0:5b:93:0c:2b:78:e5:b2:
                    02:80:df:47:2f:40:0d:c7:ab:b5:60:0f:8c:57:df:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:40:BB:64:BF:41:3E:49:99:57:C2:DB:AB:82:98:85:E1:7C:A3:01
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e3135332e302e302f31382d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.153.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:80:dc:03:15:71:84:8d:15:5c:2c:11:86:a2:32:f6:b0:
         fa:7e:55:d4:98:80:00:44:b9:0a:e9:b6:14:fd:c4:a1:7f:69:
         ef:15:f2:6d:9a:2f:ec:97:38:cf:5d:ab:de:6a:61:8d:ee:64:
         18:ea:ab:7e:fe:76:7d:33:90:91:95:fc:da:ff:9c:d4:43:26:
         a3:31:b9:4a:81:38:60:1e:57:4f:16:14:4b:2b:16:d7:f0:e3:
         e1:5a:97:f4:8a:25:5a:a2:b3:01:a5:fb:48:6c:61:56:cc:34:
         ba:3c:c9:49:e4:de:65:a2:95:a3:96:37:dc:75:d3:08:1c:bb:
         ae:32:dc:84:9c:24:ca:82:af:b0:58:d8:db:37:b2:e7:df:e3:
         d9:d1:12:a4:64:fb:b9:93:1c:42:d0:86:a2:8a:39:78:cb:64:
         00:59:c8:7b:87:45:e6:d6:3f:3f:80:d6:74:17:7d:10:c8:d1:
         d6:b8:45:73:15:7b:b5:a8:81:0f:43:96:22:2f:80:ca:2e:07:
         1a:2b:c2:68:ae:62:ba:ae:c5:32:90:25:14:0e:1e:c6:a2:a3:
         ef:b5:cb:9b:4c:c0:f7:89:a7:26:15:e8:ff:97:f7:93:08:a3:
         a7:4d:11:53:e8:f7:f1:b6:98:00:85:44:d3:e2:a8:73:8e:c4:
         e0:30:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----