Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e31362e302f32302d3234203d3e20313331373336.roa
File:                     3230322e3138332e31362e302f32302d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          tGSk0a0TYpdgHm9yoWPVxu1vHPgIbcH+nJNwS/soUZs=
Subject key identifier:   75:D2:E4:C7:B8:82:9F:F8:1E:D0:53:E8:25:B1:4D:DE:FB:CE:6A:3D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       40C1F7ED4EA5974DCDFF069D772188EF9016225D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e31362e302f32302d3234203d3e20313331373336.roa
Signing time:             Mon 23 Aug 2021 07:29:25 +0000
ROA not before:           Mon 23 Aug 2021 07:24:25 +0000
ROA not after:            Tue 23 Aug 2022 07:29:25 +0000
asID:                     131736
IP address blocks:        202.183.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:f7:ed:4e:a5:97:4d:cd:ff:06:9d:77:21:88:ef:90:16:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 23 07:24:25 2021 GMT
            Not After : Aug 23 07:29:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:e1:ad:df:10:2f:c1:62:8c:33:ca:01:46:
                    fc:5c:ef:d7:61:50:19:21:8f:4e:58:af:e6:c7:98:
                    f4:be:f4:7f:b6:2e:8e:79:8e:7b:25:36:ac:d2:21:
                    c3:48:ae:3b:b1:de:5d:8f:9d:20:90:4d:79:d0:ae:
                    0a:c8:b7:54:24:25:93:f8:c7:f0:30:6b:de:96:93:
                    12:49:63:0e:f6:19:ea:7a:7d:25:af:e0:d4:ea:8d:
                    66:4e:ba:38:4b:51:18:3a:1f:07:f4:bb:d6:d7:57:
                    c0:21:6c:ce:11:e7:26:5b:e9:df:e7:44:06:d9:ae:
                    1b:ff:5a:8c:fb:2f:be:ae:e9:f5:4b:03:a0:48:7a:
                    9a:79:3c:79:87:a6:14:09:1f:ac:6f:cc:8a:10:e1:
                    9f:6a:be:4a:b6:bc:8b:2c:79:c3:ce:ad:4d:ad:f5:
                    8b:a2:67:92:ab:46:4f:f9:09:a5:17:f8:7b:0c:73:
                    03:14:9d:22:a0:06:8e:f4:e3:5e:83:d7:e8:51:ec:
                    5b:85:39:5c:d8:3d:ad:8e:b6:43:be:e8:72:fc:bc:
                    83:95:82:16:1b:99:2a:83:2b:48:e3:3f:de:a2:06:
                    5a:a4:68:85:95:e5:34:a6:b8:5a:4a:c9:4b:08:8a:
                    c9:06:d9:49:57:f9:7b:4c:ca:a4:45:ba:cb:05:d7:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:E4:C7:B8:82:9F:F8:1E:D0:53:E8:25:B1:4D:DE:FB:CE:6A:3D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e3138332e31362e302f32302d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:38:e2:f5:a3:df:57:da:92:ef:5e:18:2e:de:49:92:d1:
         d2:a6:9f:4d:78:45:dc:7d:ab:84:b1:13:67:0d:21:3b:fe:86:
         7c:f9:84:a1:b9:ec:d3:fe:d7:e0:78:18:32:57:35:2d:e7:97:
         c1:df:78:f6:40:f4:9e:4a:83:0f:54:47:75:d2:80:43:3e:36:
         e1:ea:0d:56:93:a3:c7:db:5a:d8:dd:28:96:65:9a:f0:f2:cf:
         ff:61:46:00:86:b2:01:84:2e:57:a3:75:2f:8b:a5:33:ba:52:
         ac:8a:a5:9b:07:f3:58:8c:b2:33:63:8e:a3:52:81:1b:50:a3:
         83:c3:68:af:14:38:37:cd:9f:a4:6a:3f:17:1c:ac:1f:ba:2b:
         72:c3:c5:c2:76:30:52:e8:52:e6:63:89:7a:f2:77:b6:aa:40:
         ae:be:6f:3f:ef:62:bb:76:9f:f2:39:8b:13:d7:cb:3c:c5:1e:
         7e:4c:de:d8:34:be:30:9d:b4:d5:0c:9e:f7:1d:19:83:67:f3:
         47:8c:5f:41:e2:24:a7:89:0d:23:52:82:fd:62:71:63:bc:0f:
         09:f2:a1:dd:06:7f:df:dd:fe:02:f3:6e:aa:21:10:dc:06:d3:
         41:ca:94:99:26:53:c0:c8:8e:6e:6e:58:c9:7e:c2:9b:92:1b:
         e5:88:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----