Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32332d3233203d3e203536323432.roa
File:                     3130312e3235352e3137302e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          AWGW4naMH3x/KQvpGTxr/HPRnN6li7059V6TF0IAwoY=
Subject key identifier:   4C:86:33:3B:38:27:B9:F6:C8:D9:C9:73:9C:A7:D8:BC:5A:3B:4B:E6
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       2687EE2BE8A65C398FFDC2E195CA4CD53030546A
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32332d3233203d3e203536323432.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     56242
IP address blocks:        101.255.170.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:87:ee:2b:e8:a6:5c:39:8f:fd:c2:e1:95:ca:4c:d5:30:30:54:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:be:81:7a:3e:0a:bf:44:38:2e:b3:2a:6a:
                    43:a7:37:fb:5e:52:b1:bc:66:81:4e:34:c5:4b:50:
                    db:2f:83:16:c8:8f:ef:fd:57:f0:66:ad:76:c4:45:
                    6d:11:2b:cb:db:42:9d:53:eb:9c:38:ef:35:e4:1b:
                    a2:14:78:b2:a6:8d:ae:e5:a8:e7:1d:2c:b5:1a:fd:
                    73:27:29:df:2c:75:8d:c2:22:27:da:90:39:1b:be:
                    33:27:7e:62:f7:19:6b:16:a2:8d:34:62:e4:76:4b:
                    fa:f0:da:c7:6b:9d:f1:98:20:f0:e6:e2:c4:3f:e8:
                    ec:ef:17:e0:42:05:97:ad:72:e4:98:df:56:83:4c:
                    d1:35:bd:76:9c:47:43:15:31:23:a4:09:97:59:04:
                    20:13:72:44:27:fb:8c:20:62:6e:48:f1:c8:ee:9e:
                    e5:12:f0:3b:c1:26:69:08:f5:b5:4c:55:23:aa:27:
                    a5:5c:4c:a4:5c:e2:4e:fa:0a:d7:7f:05:46:58:09:
                    57:b5:52:1d:61:42:d0:d6:0b:af:af:90:87:0e:5f:
                    45:95:d5:e9:91:5b:62:70:ef:3c:05:dc:5a:24:a7:
                    c4:8b:26:6a:f2:9c:29:ba:f5:8c:4f:e0:01:46:36:
                    ca:05:57:dc:81:b4:1a:68:f0:e1:3c:63:56:42:ea:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:33:3B:38:27:B9:F6:C8:D9:C9:73:9C:A7:D8:BC:5A:3B:4B:E6
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:a8:e8:dc:28:9f:2c:bd:bb:a5:a9:53:a6:30:01:9f:28:1d:
         ff:26:86:cd:59:08:a1:39:05:88:1a:75:c0:9e:e3:3e:4a:d4:
         30:0f:38:97:20:bf:b2:a8:4f:8a:7e:74:56:5e:fb:a7:48:cf:
         15:80:b7:28:01:10:25:16:cb:88:17:68:1e:84:49:4b:f4:27:
         2a:f6:c4:ac:73:bb:86:31:89:10:1f:9e:7d:c4:d7:79:25:eb:
         ca:0e:7e:56:f9:e4:e2:75:39:6e:35:fc:6f:4b:99:4d:4f:2a:
         b6:db:7c:80:4c:e0:65:54:17:e8:3b:00:58:06:02:aa:66:5e:
         1a:50:8a:e9:4d:57:de:65:73:52:6c:83:8d:a3:c4:a6:48:9f:
         58:3b:fb:4c:e1:21:d3:29:63:70:55:94:be:52:23:24:a5:7a:
         56:06:69:29:70:3b:d0:ec:8a:2c:7d:16:12:19:94:14:d3:cc:
         21:c2:38:52:91:38:16:40:50:9c:df:87:93:8a:b2:68:40:77:
         1e:51:e3:a6:36:cc:11:9a:d0:65:da:00:09:42:62:d0:2a:39:
         1e:b3:13:bb:a5:bf:76:05:5d:f1:dd:1e:a7:f2:ee:a7:19:44:
         1f:67:a6:34:9f:2b:76:5d:14:7e:85:b9:84:f6:ca:1e:62:e2:
         c1:6c:d7:8b
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUJofuK+imXDmP/cLhlcpM1TAwVGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA5MjUyMjU1MDBaFw0yMjA5MjUyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNEM0JFODE3QTNFMEFCRjQ0
MzgyRUIzMkE2QTQzQTczN0ZCNUU1MkIxQkM2NjgxNEUzNEM1NEI1MERCMkY4MzE2
Qzg4RkVGRkQ1N0YwNjZBRDc2QzQ0NTZEMTEyQkNCREI0MjlENTNFQjlDMzhFRjM1
RTQxQkEyMTQ3OEIyQTY4REFFRTVBOEU3MUQyQ0I1MUFGRDczMjcyOURGMkM3NThE
QzIyMjI3REE5MDM5MUJCRTMzMjc3RTYyRjcxOTZCMTZBMjhEMzQ2MkU0NzY0QkZB
RjBEQUM3NkI5REYxOTgyMEYwRTZFMkM0M0ZFOEVDRUYxN0UwNDIwNTk3QUQ3MkU0
OThERjU2ODM0Q0QxMzVCRDc2OUM0NzQzMTUzMTIzQTQwOTk3NTkwNDIwMTM3MjQ0
MjdGQjhDMjA2MjZFNDhGMUM4RUU5RUU1MTJGMDNCQzEyNjY5MDhGNUI1NEM1NTIz
QUEyN0E1NUM0Q0E0NUNFMjRFRkEwQUQ3N0YwNTQ2NTgwOTU3QjU1MjFENjE0MkQw
RDYwQkFGQUY5MDg3MEU1RjQ1OTVENUU5OTE1QjYyNzBFRjNDMDVEQzVBMjRBN0M0
OEIyNjZBRjI5QzI5QkFGNThDNEZFMDAxNDYzNkNBMDU1N0RDODFCNDFBNjhGMEUx
M0M2MzU2NDJFQTBGQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw9O+gXo+Cr9EOC6zKmpDpzf7XlKxvGaBTjTFS1DbL4MWyI/v/Vfw
Zq12xEVtESvL20KdU+ucOO815BuiFHiypo2u5ajnHSy1Gv1zJynfLHWNwiIn2pA5
G74zJ35i9xlrFqKNNGLkdkv68NrHa53xmCDw5uLEP+js7xfgQgWXrXLkmN9Wg0zR
Nb12nEdDFTEjpAmXWQQgE3JEJ/uMIGJuSPHI7p7lEvA7wSZpCPW1TFUjqielXEyk
XOJO+grXfwVGWAlXtVIdYULQ1guvr5CHDl9FldXpkVticO88BdxaJKfEiyZq8pwp
uvWMT+ABRjbKBVfcgbQaaPDhPGNWQuoPvwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FEyGMzs4J7n2yNnJc5yn2LxaO0vmMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMwMzEyZTMyMzUzNTJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUz
NjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAWX/qjANBgkqhkiG9w0BAQsFAAOCAQEAkqjo3Cif
LL27palTpjABnygd/yaGzVkIoTkFiBp1wJ7jPkrUMA84lyC/sqhPin50Vl77p0jP
FYC3KAEQJRbLiBdoHoRJS/QnKvbErHO7hjGJEB+efcTXeSXryg5+Vvnk4nU5bjX8
b0uZTU8qttt8gEzgZVQX6DsAWAYCqmZeGlCK6U1X3mVzUmyDjaPEpkifWDv7TOEh
0yljcFWUvlIjJKV6VgZpKXA70OyKLH0WEhmUFNPMIcI4UpE4FkBQnN+Hk4qyaEB3
HlHjpjbMEZrQZdoACUJi0Co5HrMTu6W/dgVd8d0ep/LupxlEH2emNJ8rdl0UfoW5
hPbKHmLiwWzXiw==
-----END CERTIFICATE-----