Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3235302e37362e302f32342d3234203d3e20313333333532.roa
File:                     34332e3235302e37362e302f32342d3234203d3e20313333333532.roa (raw, json)
Hash identifier:          cEv11/ezZawDT74uTH8Y/SEHyW4zQJOOIIoZ5iLZOhk=
Subject key identifier:   EF:CA:A8:15:9A:A9:09:59:89:59:90:A0:22:63:1D:A8:96:98:05:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7B2BE55A4FCCCE57783F17E7BC84882699963868
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3235302e37362e302f32342d3234203d3e20313333333532.roa
Signing time:             Mon 26 Apr 2021 07:26:35 +0000
ROA not before:           Mon 26 Apr 2021 07:21:35 +0000
ROA not after:            Tue 26 Apr 2022 07:26:35 +0000
asID:                     133352
IP address blocks:        43.250.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2b:e5:5a:4f:cc:ce:57:78:3f:17:e7:bc:84:88:26:99:96:38:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 07:21:35 2021 GMT
            Not After : Apr 26 07:26:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:1b:7e:9d:79:14:c0:d3:00:cb:0e:63:7b:
                    b1:b1:b3:d0:62:76:8d:10:7d:c6:66:ab:12:b6:76:
                    06:13:a2:76:6a:ba:70:1f:9f:64:5f:6c:b8:72:1e:
                    4c:20:6b:a8:8d:c3:47:30:34:38:49:04:69:74:d5:
                    bf:e6:26:aa:b1:fa:ea:48:34:30:7e:0b:05:85:0b:
                    06:2f:2e:f6:b4:66:42:18:8c:f6:8c:40:06:78:a6:
                    aa:16:47:fe:0d:b9:3a:42:77:56:c3:3a:a9:4e:d8:
                    c2:cb:3c:52:b0:cd:29:4c:65:ca:8a:44:bd:33:1d:
                    aa:1f:13:0b:41:59:0f:77:18:02:ef:40:64:8d:86:
                    71:a0:8f:6b:92:45:6a:78:22:ce:4c:93:dd:cd:de:
                    f3:73:d7:bc:b0:b0:d7:b0:a1:b3:48:5c:33:44:e2:
                    92:61:62:2e:38:3f:ea:b9:93:ec:2a:d6:09:a5:7e:
                    53:74:01:bb:65:78:4a:7c:c6:98:85:0f:62:1f:7d:
                    7a:0d:13:bb:9c:40:b1:94:87:2a:f7:a4:d6:17:06:
                    f2:ef:9a:ba:9b:fb:bc:6c:d8:5b:58:aa:22:55:26:
                    3a:39:74:b4:85:ea:1a:e8:4a:63:cf:00:5c:ae:fa:
                    0d:78:7a:42:b2:0e:ef:d6:2f:26:91:09:3a:0a:38:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:A8:15:9A:A9:09:59:89:59:90:A0:22:63:1D:A8:96:98:05:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3235302e37362e302f32342d3234203d3e20313333333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:83:d7:66:c2:83:5f:fe:76:8a:dc:4a:bc:24:f5:a3:ab:ee:
         e3:1a:9f:02:0d:a7:21:8d:21:79:fd:28:0f:2c:ed:a4:ef:7c:
         29:8a:12:9b:9d:28:57:67:57:6a:d2:7a:ec:57:f2:79:4b:c9:
         f6:10:35:56:b4:06:25:0b:94:af:b1:6d:85:d6:62:90:35:c7:
         76:03:ce:64:ce:e4:c4:04:e3:f7:9e:f6:14:01:7d:48:08:c8:
         db:24:14:23:7c:59:56:11:54:ad:76:4c:76:b2:d6:d0:dc:b1:
         b7:77:28:9f:a3:7c:f5:fa:7c:4d:b0:c9:20:ca:ad:0c:d3:57:
         4d:e5:d3:93:88:14:f8:f5:4d:ad:9f:5c:ce:62:8a:40:54:49:
         7d:69:cc:3b:39:c2:79:ab:e2:4b:41:f9:37:88:40:b7:09:82:
         6e:de:d2:10:61:92:d1:6a:b2:3e:04:09:43:fe:38:93:f5:40:
         e8:bf:df:c2:73:e3:b4:3d:8d:77:f9:d4:ea:b9:1d:b5:5e:32:
         c8:ef:35:81:70:6d:6a:a0:f5:67:60:11:50:46:e6:9e:a3:20:
         bc:41:a7:19:1c:2d:ce:6e:86:cb:3b:5e:99:05:47:bf:09:03:
         c5:83:90:dc:df:28:11:1e:cb:4d:f1:6c:19:57:bb:00:45:d2:
         53:db:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----