Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130342e31302e302f32342d3234203d3e20313336313239.roa
File:                     3130332e3130342e31302e302f32342d3234203d3e20313336313239.roa (raw, json)
Hash identifier:          NvrSC9KuHfAiaWA9mBkvZvOleYXyhPUIgnPHdensgh8=
Subject key identifier:   9C:2C:B2:18:E5:22:2F:36:02:91:A7:98:92:D3:76:F3:74:FA:29:A4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5389FBE4F5B388FDE7C3D587288C5D1848771C04
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130342e31302e302f32342d3234203d3e20313336313239.roa
Signing time:             Tue 05 Oct 2021 04:24:24 +0000
ROA not before:           Tue 05 Oct 2021 04:19:24 +0000
ROA not after:            Wed 05 Oct 2022 04:24:24 +0000
asID:                     136129
IP address blocks:        103.104.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:89:fb:e4:f5:b3:88:fd:e7:c3:d5:87:28:8c:5d:18:48:77:1c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  5 04:19:24 2021 GMT
            Not After : Oct  5 04:24:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:d9:fc:47:8a:97:67:56:48:0f:43:ec:87:
                    d2:2d:35:f5:22:74:92:bb:68:1b:72:e5:c2:45:bc:
                    75:21:85:8d:ea:e8:86:ab:75:fc:39:ac:03:1c:a3:
                    74:83:4c:c3:c0:12:2f:ab:53:f2:f2:c6:05:2e:04:
                    15:0b:e1:bd:3f:27:f9:9f:aa:48:ee:d3:f5:86:cb:
                    eb:a8:84:65:b8:9b:ab:60:bc:29:0e:4c:15:38:2c:
                    b3:7f:89:c1:f9:9c:de:99:22:95:9e:b3:6e:f7:a2:
                    b3:47:d7:67:3e:2c:e1:01:b4:6e:04:1f:67:09:d7:
                    13:64:26:19:82:50:19:ad:71:cb:67:05:64:73:95:
                    c0:86:66:19:e6:a5:d7:c5:44:f6:b2:71:19:22:61:
                    6b:98:38:ad:0f:a7:e7:fc:27:d5:82:7f:64:c4:fe:
                    99:6e:96:8f:41:1b:45:c8:38:37:6a:da:5f:85:b6:
                    41:b7:ac:8f:ec:ba:09:17:f5:16:d1:80:66:e7:98:
                    92:ac:f7:48:6c:67:63:39:03:03:40:44:ce:63:1a:
                    22:68:bc:eb:f9:b8:7f:db:27:6e:3a:ee:98:0e:81:
                    f1:83:13:4e:53:f4:a7:fe:24:c4:fb:75:17:29:6a:
                    c5:dd:fa:a3:9c:a9:6a:09:ec:06:64:b1:14:8c:35:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2C:B2:18:E5:22:2F:36:02:91:A7:98:92:D3:76:F3:74:FA:29:A4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130342e31302e302f32342d3234203d3e20313336313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:10:e2:f0:c9:83:5d:97:89:6b:92:75:0c:18:ee:a8:0c:
         d9:84:dd:11:d8:17:f9:af:64:d9:5b:69:83:7e:71:fb:2d:80:
         c5:68:b9:ad:2f:c4:41:b8:2a:b1:04:e0:5c:9c:c5:0a:62:b2:
         56:90:3d:81:98:c2:6d:11:ae:d7:94:cb:58:8a:50:22:13:72:
         a4:2b:68:d9:e6:c8:40:dc:b5:b7:34:ce:92:2c:50:3b:52:70:
         c4:12:80:22:5a:bd:00:07:d3:6c:24:07:95:51:10:bb:f2:a1:
         08:5d:55:42:29:6e:e2:da:36:7d:05:24:18:c9:7f:50:75:aa:
         94:12:1c:1c:5b:ac:7c:f7:30:e7:e6:57:4a:da:fb:e6:0e:1b:
         4e:a7:5b:6a:75:76:11:38:7e:0b:a2:a3:45:d8:c0:b6:1d:f4:
         03:8a:33:9b:8b:54:18:62:85:a5:bf:ad:48:10:11:0d:f4:a3:
         8c:12:6a:c8:54:8e:17:44:01:18:3d:7e:16:fe:5d:0c:57:e2:
         21:ae:e8:05:8e:94:0b:98:49:ac:d2:a7:11:72:a1:ff:aa:81:
         64:f1:ef:44:1f:40:12:12:54:aa:49:7c:c6:93:68:60:14:ea:
         84:fa:a5:4b:be:a2:1e:98:6d:d8:36:91:cd:40:9e:be:11:f2:
         2b:42:76:a9
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUU4n75PWziP3nw9WHKIxdGEh3HAQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwNTA0MTkyNFoX
DTIyMTAwNTA0MjQyNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMURFRDlGQzQ3OEE5NzY3NTY0ODBGNDNFQzg3RDIyRDM1RjUyMjc0OTJC
QjY4MUI3MkU1QzI0NUJDNzUyMTg1OERFQUU4ODZBQjc1RkMzOUFDMDMxQ0EzNzQ4
MzRDQzNDMDEyMkZBQjUzRjJGMkM2MDUyRTA0MTUwQkUxQkQzRjI3Rjk5RkFBNDhF
RUQzRjU4NkNCRUJBODg0NjVCODlCQUI2MEJDMjkwRTRDMTUzODJDQjM3Rjg5QzFG
OTlDREU5OTIyOTU5RUIzNkVGN0EyQjM0N0Q3NjczRTJDRTEwMUI0NkUwNDFGNjcw
OUQ3MTM2NDI2MTk4MjUwMTlBRDcxQ0I2NzA1NjQ3Mzk1QzA4NjY2MTlFNkE1RDdD
NTQ0RjZCMjcxMTkyMjYxNkI5ODM4QUQwRkE3RTdGQzI3RDU4MjdGNjRDNEZFOTk2
RTk2OEY0MTFCNDVDODM4Mzc2QURBNUY4NUI2NDFCN0FDOEZFQ0JBMDkxN0Y1MTZE
MTgwNjZFNzk4OTJBQ0Y3NDg2QzY3NjMzOTAzMDM0MDQ0Q0U2MzFBMjI2OEJDRUJG
OUI4N0ZEQjI3NkUzQUVFOTgwRTgxRjE4MzEzNEU1M0Y0QTdGRTI0QzRGQjc1MTcy
OTZBQzVEREZBQTM5Q0E5NkEwOUVDMDY2NEIxMTQ4QzM1MkNEMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3tn8R4qXZ1ZID0Psh9It
NfUidJK7aBty5cJFvHUhhY3q6Iardfw5rAMco3SDTMPAEi+rU/LyxgUuBBUL4b0/
J/mfqkju0/WGy+uohGW4m6tgvCkOTBU4LLN/icH5nN6ZIpWes273orNH12c+LOEB
tG4EH2cJ1xNkJhmCUBmtcctnBWRzlcCGZhnmpdfFRPaycRkiYWuYOK0Pp+f8J9WC
f2TE/plulo9BG0XIODdq2l+FtkG3rI/sugkX9RbRgGbnmJKs90hsZ2M5AwNARM5j
GiJovOv5uH/bJ2467pgOgfGDE05T9Kf+JMT7dRcpasXd+qOcqWoJ7AZksRSMNSzR
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUnCyyGOUiLzYCkaeYktN283T6KaQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMDM0MmUzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2gKMA0GCSqG
SIb3DQEBCwUAA4IBAQCFehDi8MmDXZeJa5J1DBjuqAzZhN0R2Bf5r2TZW2mDfnH7
LYDFaLmtL8RBuCqxBOBcnMUKYrJWkD2BmMJtEa7XlMtYilAiE3KkK2jZ5shA3LW3
NM6SLFA7UnDEEoAiWr0AB9NsJAeVURC78qEIXVVCKW7i2jZ9BSQYyX9QdaqUEhwc
W6x89zDn5ldK2vvmDhtOp1tqdXYROH4LoqNF2MC2HfQDijObi1QYYoWlv61IEBEN
9KOMEmrIVI4XRAEYPX4W/l0MV+IhrugFjpQLmEms0qcRcqH/qoFk8e9EH0ASElSq
SXzGk2hgFOqE+qVLvqIemG3YNpHNQJ6+EfIrQnap
-----END CERTIFICATE-----