Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e38312e3234382e302f32322d3234203d3e2030.roa
File:                     3230332e38312e3234382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          selBIsfOGm/wBHaJIxBWBA9jo6SEAqzXMwAUShN9D/s=
Subject key identifier:   16:F2:C9:97:80:42:64:38:7F:56:91:F7:B9:B0:83:A3:AF:52:92:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C76A44ED698AEAE78D300404F938E998EDA38D7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e38312e3234382e302f32322d3234203d3e2030.roa
Signing time:             Wed 19 May 2021 08:21:55 +0000
ROA not before:           Wed 19 May 2021 08:16:55 +0000
ROA not after:            Thu 19 May 2022 08:21:55 +0000
asID:                     0
IP address blocks:        203.81.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:a4:4e:d6:98:ae:ae:78:d3:00:40:4f:93:8e:99:8e:da:38:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 19 08:16:55 2021 GMT
            Not After : May 19 08:21:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:db:1e:e2:13:c3:60:dd:ce:69:b6:df:02:
                    d3:0b:d0:c5:9d:9c:ee:00:ff:88:2a:0b:88:d8:b8:
                    ad:0e:24:a8:67:23:29:33:7f:f8:37:7a:36:f0:5e:
                    fe:44:ae:a8:a3:f7:ac:01:2c:1d:65:23:ef:af:3f:
                    46:d1:dc:19:2c:94:ed:e2:30:b0:e2:df:97:82:ea:
                    ae:69:08:e0:4a:d7:69:8d:d6:e8:7d:11:a2:37:5e:
                    7d:fc:46:7a:38:45:e6:d8:e9:71:e8:7f:ef:87:2b:
                    47:9a:2a:71:40:54:a2:99:68:fb:35:ab:41:07:c9:
                    17:e5:e8:33:b8:e5:23:4f:ce:95:f9:8f:a8:2b:28:
                    22:a4:df:ee:c9:36:15:c1:aa:d2:16:84:92:ff:65:
                    eb:5f:a5:6b:f7:52:b2:b7:70:99:6b:30:a5:59:e4:
                    c0:62:00:37:ca:8c:bb:cc:52:c8:f6:71:c8:60:82:
                    48:ea:01:9d:cb:f9:0e:d5:b6:ba:a9:09:ea:d8:03:
                    c4:9f:46:fe:8e:18:bc:ef:27:db:1b:ad:2d:f6:07:
                    62:8f:e9:e9:2b:ce:8b:14:96:38:77:ba:ec:d7:e6:
                    f2:cb:b6:34:93:3b:fa:1d:d9:3b:db:7c:f6:f4:27:
                    fe:b6:6f:b0:9c:34:8b:7e:21:1a:eb:c8:52:ad:50:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:C9:97:80:42:64:38:7F:56:91:F7:B9:B0:83:A3:AF:52:92:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e38312e3234382e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.81.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:af:50:28:46:ea:1e:fb:0f:a9:4a:6c:4d:03:dd:01:23:
         64:23:49:83:42:0d:cb:a4:45:8c:9e:e1:1a:77:f7:1f:4d:72:
         c2:b8:36:7a:f4:8d:9d:f4:c2:5f:c2:7d:1c:df:f0:0b:f4:23:
         3b:ea:a0:14:b9:07:32:84:3a:ca:8b:83:49:d1:78:61:d2:fb:
         ca:0e:c8:ca:38:9c:9f:5f:b4:42:d0:34:d5:ec:75:96:d7:5f:
         2e:96:33:f7:f2:84:57:af:f9:a3:48:43:a7:47:72:df:22:f4:
         39:8a:ec:17:98:d3:87:fb:c8:e4:c3:ec:94:b6:a1:63:a4:f7:
         bc:c1:76:35:91:69:40:64:ac:ed:b3:23:c7:a3:ba:bc:c5:5b:
         01:32:57:e0:79:46:f9:51:c2:f2:b4:6c:67:cc:ea:ef:81:ce:
         50:89:78:f4:9c:c5:77:bc:40:dd:5f:a4:71:ce:a4:85:87:b6:
         5f:ae:f4:ed:86:c0:91:23:61:f1:ff:f0:0f:2e:47:52:40:9d:
         69:8d:ca:1c:4a:f8:c5:77:b7:f5:fa:76:82:cc:e9:05:31:ef:
         4c:2b:99:cb:16:18:ee:f7:12:a3:70:c3:c4:22:aa:a5:03:77:
         51:f0:1f:1c:db:88:5f:4b:ab:ee:25:48:d7:3a:d7:1d:d0:93:
         89:b5:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----