Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3136362e3139322e302f32302d3234203d3e2039333236.roa
File:                     3230332e3136362e3139322e302f32302d3234203d3e2039333236.roa (raw, json)
Hash identifier:          wiXm13b5AfhSEbg3Cg9vfzJUYCrclfHqTmrBy9vkUOk=
Subject key identifier:   9A:1D:21:2A:6F:E2:0C:CF:68:CA:77:EC:7B:EE:F0:75:54:12:1F:00
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C635A9F9E95C525672668FD1D80DB3B31FD3609
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3136362e3139322e302f32302d3234203d3e2039333236.roa
Signing time:             Wed 28 Apr 2021 02:17:33 +0000
ROA not before:           Wed 28 Apr 2021 02:12:33 +0000
ROA not after:            Thu 28 Apr 2022 02:17:33 +0000
asID:                     9326
IP address blocks:        203.166.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:5a:9f:9e:95:c5:25:67:26:68:fd:1d:80:db:3b:31:fd:36:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 02:12:33 2021 GMT
            Not After : Apr 28 02:17:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:52:59:7d:f8:ff:9d:fd:49:f6:7e:b7:0d:
                    1d:33:7a:ae:c8:62:5b:ca:40:1d:90:f9:f3:08:13:
                    7b:8b:7f:c4:89:26:f3:63:71:b4:ec:a5:02:a5:a5:
                    b8:35:06:fc:b7:fa:91:1a:38:a9:16:47:39:ca:46:
                    04:c8:88:1d:7e:cc:81:5a:bc:52:5c:fa:ea:fe:a4:
                    6e:ec:8d:26:fd:e8:c6:f8:95:94:dd:1e:53:45:b0:
                    c8:a0:4c:e5:5e:77:0d:07:11:32:61:46:58:38:57:
                    9a:8d:87:4a:d9:68:ba:9c:6d:d0:21:86:58:e0:20:
                    df:29:87:cc:27:c4:2b:50:02:f1:0d:ae:80:65:85:
                    1d:25:b0:37:d0:ed:19:ea:1a:32:e8:a8:af:d1:d0:
                    9c:35:84:4b:35:10:a1:42:69:f8:7a:21:b7:15:4b:
                    4f:9c:d3:5f:e4:45:f4:b6:3d:f4:42:b7:82:bc:7b:
                    48:21:6e:15:75:50:0f:a6:ce:d3:77:20:10:01:67:
                    da:e4:02:c4:f1:2c:e1:b1:09:6c:dd:60:a0:30:02:
                    3e:5f:f7:be:e4:34:39:21:7c:1b:90:d9:82:02:35:
                    7c:0a:c7:af:5b:db:63:a6:50:44:fe:72:b9:f0:76:
                    84:5d:40:0f:6a:eb:1e:a2:87:79:9d:02:58:db:79:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1D:21:2A:6F:E2:0C:CF:68:CA:77:EC:7B:EE:F0:75:54:12:1F:00
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e3136362e3139322e302f32302d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.166.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:3e:08:c4:8e:eb:92:9d:bc:9d:93:56:e8:44:f4:7b:16:
         4f:01:3c:5a:85:b4:f9:df:34:1d:fb:ef:17:74:e3:82:98:f9:
         62:aa:19:d6:50:86:79:a2:b4:3f:25:c9:dc:7d:b1:20:46:39:
         d4:67:3c:f7:76:5f:8d:5c:56:8d:20:7d:cf:bd:3e:e2:bf:21:
         ff:ff:eb:21:25:b7:91:00:7f:9b:d7:d6:9b:d8:ed:e9:74:81:
         d3:02:ed:de:6b:1f:b6:dc:84:3d:58:f0:c8:ae:07:2d:21:ff:
         e5:72:38:40:f8:2f:9c:21:11:6b:71:dd:bf:ff:2a:71:d4:b5:
         8b:d1:1e:4e:47:87:ac:e3:18:7e:ec:92:9a:50:14:bd:a7:a9:
         93:93:22:34:f0:50:ff:de:5d:07:22:47:f8:b7:d9:25:b3:1f:
         01:08:9f:81:79:2d:41:3b:12:f9:38:4b:60:44:28:18:e5:ab:
         db:6e:01:15:a1:8d:94:4c:eb:89:ca:cb:b9:0b:1c:84:66:91:
         b2:16:d7:7a:98:f7:6e:43:90:77:f3:74:33:42:45:70:67:ea:
         39:f2:62:91:6f:41:72:e7:76:96:6c:9d:83:39:15:da:f2:f4:
         51:b2:10:d3:dc:2f:ba:4e:82:a3:f9:33:29:83:d8:f1:63:fc:
         46:20:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----