Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e302e302f32302d3234203d3e20313331373336.roa
File:                     3230322e3138332e302e302f32302d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          2hwMf3oCYl6yCYCCeVeD5acYkXwKTx891D6AM8caQ94=
Subject key identifier:   BA:8F:8A:05:81:A6:51:77:15:1C:44:E3:98:AB:32:C5:70:A5:77:57
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19776A8472DB137F2C23C848AAD516BF9E3F0EE9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e302e302f32302d3234203d3e20313331373336.roa
Signing time:             Mon 23 Aug 2021 07:28:49 +0000
ROA not before:           Mon 23 Aug 2021 07:23:49 +0000
ROA not after:            Tue 23 Aug 2022 07:28:49 +0000
asID:                     131736
IP address blocks:        202.183.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:77:6a:84:72:db:13:7f:2c:23:c8:48:aa:d5:16:bf:9e:3f:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 07:23:49 2021 GMT
            Not After : Aug 23 07:28:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:57:12:a2:7f:61:d1:a8:79:70:a1:d1:8f:
                    af:6a:6c:2a:41:2d:de:75:e8:38:ab:f1:c1:bc:f1:
                    aa:10:f3:5a:40:6e:1e:d4:39:21:3e:af:84:7f:68:
                    f0:97:7b:f3:b3:82:7e:78:1a:a7:2e:8e:d3:c9:73:
                    6d:7e:65:d6:1a:86:8f:87:d3:bc:e9:b7:77:e8:d8:
                    71:8c:8f:4e:ab:20:5a:11:79:3c:bd:73:63:0c:16:
                    a3:2e:33:c0:b0:51:3d:57:df:f5:91:85:26:37:46:
                    27:6e:20:58:30:19:6e:e5:62:3f:b5:7f:2c:9a:b9:
                    88:79:cc:c7:68:dd:3e:f9:8e:07:da:28:e1:1b:d9:
                    4c:5f:ce:ff:79:90:ee:42:96:2c:fc:bf:f0:68:e6:
                    9e:bb:b7:96:09:b3:5f:26:9b:f4:55:39:8e:af:81:
                    65:09:d5:97:26:eb:5b:fd:13:c5:f5:86:50:e3:b5:
                    18:ac:91:62:9d:e8:33:a5:64:0c:ce:62:0b:fc:1b:
                    e4:12:9b:ed:cb:94:e4:3a:a9:23:f0:e5:ca:5e:9e:
                    57:cb:0d:cb:db:a6:fe:e0:5a:b0:2d:e7:a3:11:cf:
                    82:df:21:d3:d5:9c:df:3f:aa:65:27:40:b9:7a:90:
                    1c:2a:03:ab:c1:27:2c:1b:a0:d4:93:ea:a6:64:76:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:8A:05:81:A6:51:77:15:1C:44:E3:98:AB:32:C5:70:A5:77:57
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e302e302f32302d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:84:6f:b0:20:e0:3b:e7:58:62:9f:1d:3b:59:1f:a3:89:4c:
         37:98:c6:28:84:7b:13:2f:f2:f4:a9:c2:84:27:92:10:fd:5c:
         97:39:f9:33:7d:a0:9d:b3:da:9a:2a:ce:37:ce:5e:32:3e:a7:
         77:41:52:64:83:f8:64:50:d7:ed:3e:7e:3f:1e:ca:3f:d5:ed:
         47:4d:ab:3f:f8:f3:15:3e:5a:1d:c1:d0:7a:ae:89:3d:95:47:
         4e:f5:cd:9f:98:a3:34:77:cc:a6:8a:3b:64:df:55:56:cc:53:
         53:24:35:5d:20:c5:2a:ee:82:b9:a7:70:d3:6a:97:5d:d1:c4:
         75:bd:4e:a1:80:bd:00:54:24:1c:bc:30:5b:56:aa:d1:6b:85:
         dd:d5:10:1a:59:49:0c:00:77:8c:1b:22:76:54:a8:9f:9d:79:
         92:d4:93:ac:5e:30:17:28:31:8d:57:5a:5b:a6:fc:71:4c:d1:
         00:c9:52:8f:3d:14:de:a0:37:0a:48:56:e0:c5:32:c1:bf:22:
         cb:32:9c:b8:d6:bf:cd:46:0e:fd:fa:33:91:ea:d8:30:88:54:
         3e:3a:ec:3f:d5:ce:fa:53:aa:c5:a1:93:c7:12:e2:f8:07:f8:
         e5:66:ec:9c:e0:95:b8:dd:c3:b1:e8:eb:9d:dc:32:4d:b4:c8:
         75:a0:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----