Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134302e302f32322d3234203d3e20313336313139.roa
File:                     3130332e3131392e3134302e302f32322d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          oVzEnZ8BHA/RnbGkbt4xyDCIHWO1GmPEVgvZcr2oWe0=
Subject key identifier:   EE:F4:86:FD:18:2A:97:29:C1:AF:06:83:2C:05:31:7B:BA:EB:BF:14
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F15C0DE87CAA3D9497DEFB6437F3648886A6C7B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134302e302f32322d3234203d3e20313336313139.roa
Signing time:             Tue 16 Nov 2021 03:31:18 +0000
ROA not before:           Tue 16 Nov 2021 03:26:18 +0000
ROA not after:            Wed 16 Nov 2022 03:31:18 +0000
asID:                     136119
IP address blocks:        103.119.140.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:c0:de:87:ca:a3:d9:49:7d:ef:b6:43:7f:36:48:88:6a:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 16 03:26:18 2021 GMT
            Not After : Nov 16 03:31:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:87:c5:28:24:35:ce:c6:19:15:cc:36:2c:
                    4d:3a:bf:41:ed:ef:0d:d4:05:8a:66:9d:a0:37:ff:
                    1d:95:86:c7:a0:f2:9d:82:8a:5a:51:69:88:6b:74:
                    66:2b:3a:78:c0:4c:6f:bb:4d:3d:7a:5a:ed:92:e9:
                    18:9d:58:55:94:73:e9:f9:da:9f:46:d9:23:b6:65:
                    1c:7d:cd:d7:3f:f6:d0:73:96:4c:15:4d:ce:be:31:
                    ba:b5:6b:e3:74:f5:c8:3f:4c:a5:94:b7:61:d9:7c:
                    b0:04:46:1a:4d:c2:1f:2a:25:d1:93:4a:46:f8:a6:
                    db:00:27:de:dd:7b:12:35:c0:2c:78:c6:b1:44:9e:
                    53:84:2b:8d:e0:ad:80:78:da:fd:eb:15:11:fc:ac:
                    48:bd:77:8b:e7:dd:96:f1:18:7b:ca:45:2e:1c:d4:
                    91:39:fe:a4:55:a0:b6:12:69:55:b7:15:f4:46:3a:
                    63:bc:b8:ed:4a:dd:e4:4a:2d:55:c2:58:62:c3:9d:
                    a6:5a:e2:b0:46:f8:e3:7e:14:4a:60:ba:b0:7e:c6:
                    5f:84:e2:b7:b5:3b:41:4a:c2:0d:f2:2a:0b:9b:61:
                    74:15:f9:c4:d4:a3:47:56:14:52:c8:d7:98:12:8f:
                    22:db:2b:4b:f1:af:4a:97:44:44:bf:33:0a:8c:74:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:86:FD:18:2A:97:29:C1:AF:06:83:2C:05:31:7B:BA:EB:BF:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3134302e302f32322d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:ef:01:de:01:a1:cd:8b:d1:10:58:b0:40:e7:09:df:1a:
         13:36:3d:6c:88:48:33:d2:37:04:ab:98:6d:1c:f4:79:8b:5b:
         d4:fa:e0:75:3f:e4:e0:95:60:28:c0:d6:56:ca:d2:e8:88:7e:
         61:23:b3:e6:15:65:e3:88:62:01:19:aa:6e:6c:ff:b3:c0:8b:
         73:e1:e0:20:ae:0d:9b:a0:99:50:a5:01:93:cf:b8:be:3e:97:
         13:fc:e9:83:27:2f:00:f9:d8:d9:e9:a4:17:76:f2:a3:1c:e8:
         ac:c3:ca:17:f0:94:fc:b8:61:4f:50:c6:0e:34:c6:b8:54:8d:
         5c:fd:17:2a:b4:d1:24:a7:82:0e:d8:f7:98:91:8d:48:fc:02:
         48:26:a7:2e:d1:fb:ab:0e:3f:26:54:75:c2:91:f8:f4:b9:49:
         79:3a:5b:24:db:29:d9:cf:56:9a:7c:12:63:cf:e9:db:51:10:
         7d:c1:40:68:63:7d:1a:9a:c5:a9:bb:cc:21:c3:e2:61:43:cb:
         5c:7d:2c:7a:7d:d9:89:40:3f:5a:f1:87:a8:08:85:af:69:9d:
         a7:27:5d:4b:84:93:cb:6f:33:c6:a4:da:09:ef:4f:52:0d:43:
         69:d0:0e:5a:db:ca:50:c5:71:79:a7:8e:92:a5:0f:41:9a:e2:
         33:e5:8b:ce
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUPxXA3ofKo9lJfe+2Q382SIhqbHswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExNjAzMjYxOFoX
DTIyMTExNjAzMzExOFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQzY1ODdDNTI4MjQzNUNFQzYxOTE1Q0MzNjJDNEQzQUJGNDFFREVGMERE
NDA1OEE2NjlEQTAzN0ZGMUQ5NTg2QzdBMEYyOUQ4MjhBNUE1MTY5ODg2Qjc0NjYy
QjNBNzhDMDRDNkZCQjREM0Q3QTVBRUQ5MkU5MTg5RDU4NTU5NDczRTlGOURBOUY0
NkQ5MjNCNjY1MUM3RENERDczRkY2RDA3Mzk2NEMxNTREQ0VCRTMxQkFCNTZCRTM3
NEY1QzgzRjRDQTU5NEI3NjFEOTdDQjAwNDQ2MUE0REMyMUYyQTI1RDE5MzRBNDZG
OEE2REIwMDI3REVERDdCMTIzNUMwMkM3OEM2QjE0NDlFNTM4NDJCOERFMEFEODA3
OERBRkRFQjE1MTFGQ0FDNDhCRDc3OEJFN0REOTZGMTE4N0JDQTQ1MkUxQ0Q0OTEz
OUZFQTQ1NUEwQjYxMjY5NTVCNzE1RjQ0NjNBNjNCQ0I4RUQ0QURERTQ0QTJENTVD
MjU4NjJDMzlEQTY1QUUyQjA0NkY4RTM3RTE0NEE2MEJBQjA3RUM2NUY4NEUyQjdC
NTNCNDE0QUMyMERGMjJBMEI5QjYxNzQxNUY5QzRENEEzNDc1NjE0NTJDOEQ3OTgx
MjhGMjJEQjJCNEJGMUFGNEE5NzQ0NDRCRjMzMEE4Qzc0QUI4RjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZYfFKCQ1zsYZFcw2LE06
v0Ht7w3UBYpmnaA3/x2Vhseg8p2CilpRaYhrdGYrOnjATG+7TT16Wu2S6RidWFWU
c+n52p9G2SO2ZRx9zdc/9tBzlkwVTc6+Mbq1a+N09cg/TKWUt2HZfLAERhpNwh8q
JdGTSkb4ptsAJ97dexI1wCx4xrFEnlOEK43grYB42v3rFRH8rEi9d4vn3ZbxGHvK
RS4c1JE5/qRVoLYSaVW3FfRGOmO8uO1K3eRKLVXCWGLDnaZa4rBG+ON+FEpgurB+
xl+E4re1O0FKwg3yKgubYXQV+cTUo0dWFFLI15gSjyLbK0vxr0qXRES/MwqMdKuP
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQU7vSG/RgqlynBrwaDLAUxe7rrvxQwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMTM5MmUzMTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnd4wwDQYJ
KoZIhvcNAQELBQADggEBAEHE7wHeAaHNi9EQWLBA5wnfGhM2PWyISDPSNwSrmG0c
9HmLW9T64HU/5OCVYCjA1lbK0uiIfmEjs+YVZeOIYgEZqm5s/7PAi3Ph4CCuDZug
mVClAZPPuL4+lxP86YMnLwD52NnppBd28qMc6KzDyhfwlPy4YU9Qxg40xrhUjVz9
Fyq00SSngg7Y95iRjUj8Akgmpy7R+6sOPyZUdcKR+PS5SXk6WyTbKdnPVpp8EmPP
6dtREH3BQGhjfRqaxam7zCHD4mFDy1x9LHp92YlAP1rxh6gIha9pnacnXUuEk8tv
M8ak2gnvT1INQ2nQDlrbylDFcXmnjpKlD0Ga4jPli84=
-----END CERTIFICATE-----