Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa
File:                     3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa (raw, json)
Hash identifier:          +JZPLZP7fvbgTMZwWVfhCICENp+12as8XM4ZDhoZKw4=
Subject key identifier:   EB:15:62:17:7A:1A:71:0D:1E:5A:9C:74:E4:55:A8:7C:BA:AE:CD:9A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5A344D6501E14954E754824BC16CC16C71986557
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa
Signing time:             Fri 19 Nov 2021 05:00:02 +0000
ROA not before:           Fri 19 Nov 2021 04:55:02 +0000
ROA not after:            Sat 19 Nov 2022 05:00:02 +0000
asID:                     138069
IP address blocks:        103.123.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:34:4d:65:01:e1:49:54:e7:54:82:4b:c1:6c:c1:6c:71:98:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:02 2021 GMT
            Not After : Nov 19 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:38:e1:5b:d1:1e:0e:c0:98:b5:f4:d0:60:
                    73:51:ca:8b:e4:1e:83:02:af:4a:1f:57:91:02:50:
                    0c:25:07:2b:61:c0:72:29:38:10:cf:01:d5:70:bb:
                    91:6e:02:3a:85:f8:ff:ef:2e:3b:cc:35:cd:b3:62:
                    ce:4a:13:35:5c:53:5a:45:32:b0:55:01:86:35:e8:
                    60:a2:00:e0:4c:63:c3:bd:e1:48:44:a9:52:72:57:
                    c9:0a:f3:d3:7a:e5:c8:51:2d:56:11:6b:61:eb:2d:
                    d6:e5:e7:41:83:33:9a:3c:f0:49:5b:90:8a:47:0c:
                    b0:61:b3:55:6e:67:a8:86:e8:c2:60:05:83:3d:67:
                    c1:eb:c4:3e:07:18:56:ad:bd:4b:92:ed:a9:f1:03:
                    69:2b:d9:99:b9:98:57:32:ae:bd:cb:2b:37:14:85:
                    12:ea:f6:f1:4f:98:99:c2:75:bb:3f:5f:e9:68:cb:
                    8d:8e:45:c1:9d:a9:59:a9:9a:77:b7:35:9a:57:e8:
                    bb:dc:0b:b0:bb:26:12:19:c1:02:9b:57:d2:d1:74:
                    b6:98:49:b4:4c:a4:52:a8:7c:01:40:f5:60:b7:43:
                    fa:c5:bf:31:29:f9:8a:a6:e0:0a:02:1b:1c:af:3c:
                    51:eb:77:96:ad:7c:e3:4f:8e:cd:b0:e7:60:1e:72:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:62:17:7A:1A:71:0D:1E:5A:9C:74:E4:55:A8:7C:BA:AE:CD:9A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e31362e302f32322d3234203d3e20313338303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:12:3e:91:a8:72:ce:c0:6c:e8:17:81:18:0b:77:eb:c2:
         f8:1e:1d:9b:20:94:76:43:c7:18:4a:1d:fe:c1:b1:3d:13:38:
         cf:10:72:e7:26:98:46:a6:75:04:60:9c:ca:6b:b0:c5:53:b8:
         0a:2e:e0:57:a1:51:c1:88:24:9e:3e:80:e7:0c:0a:b8:6c:1a:
         d2:b0:4f:ed:a2:20:ed:51:f6:c1:59:e2:9c:34:b4:b1:e1:09:
         1f:e2:da:78:2b:3f:d2:c4:a6:5c:5f:97:29:57:5d:d9:90:b8:
         b6:89:87:c3:91:5b:e6:8a:c3:f4:aa:91:a3:7c:5b:8a:6c:74:
         ce:0f:e1:ca:f5:c4:7c:a2:14:6f:74:c3:be:14:8a:f2:0c:b4:
         ce:eb:89:f5:48:b4:ba:5c:f5:65:8a:92:df:e9:26:a2:54:a4:
         d8:78:b2:be:b1:df:cd:2c:a7:e3:b4:c2:2a:42:13:cb:68:95:
         a1:17:be:dc:50:5a:de:5c:56:5b:cb:36:5e:b8:22:1f:f3:c8:
         28:f4:29:ca:b6:54:fa:a1:94:6f:65:19:4a:2d:57:4f:03:d0:
         ed:b6:76:dc:ce:fe:36:07:5b:31:39:00:8c:40:cb:01:33:0b:
         18:71:4b:83:36:58:c7:f7:4e:0b:36:30:ac:b0:0e:e9:44:5b:
         cb:77:31:1e
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUWjRNZQHhSVTnVIJLwWzBbHGYZVcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExOTA0NTUwMloX
DTIyMTExOTA1MDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEOTEwMzhFMTVCRDExRTBFQzA5OEI1RjREMDYwNzM1MUNBOEJFNDFFODMw
MkFGNEExRjU3OTEwMjUwMEMyNTA3MkI2MUMwNzIyOTM4MTBDRjAxRDU3MEJCOTE2
RTAyM0E4NUY4RkZFRjJFM0JDQzM1Q0RCMzYyQ0U0QTEzMzU1QzUzNUE0NTMyQjA1
NTAxODYzNUU4NjBBMjAwRTA0QzYzQzNCREUxNDg0NEE5NTI3MjU3QzkwQUYzRDM3
QUU1Qzg1MTJENTYxMTZCNjFFQjJERDZFNUU3NDE4MzMzOUEzQ0YwNDk1QjkwOEE0
NzBDQjA2MUIzNTU2RTY3QTg4NkU4QzI2MDA1ODMzRDY3QzFFQkM0M0UwNzE4NTZB
REJENEI5MkVEQTlGMTAzNjkyQkQ5OTlCOTk4NTczMkFFQkRDQjJCMzcxNDg1MTJF
QUY2RjE0Rjk4OTlDMjc1QkIzRjVGRTk2OENCOEQ4RTQ1QzE5REE5NTlBOTlBNzdC
NzM1OUE1N0U4QkJEQzBCQjBCQjI2MTIxOUMxMDI5QjU3RDJEMTc0QjY5ODQ5QjQ0
Q0E0NTJBODdDMDE0MEY1NjBCNzQzRkFDNUJGMzEyOUY5OEFBNkUwMEEwMjFCMUNB
RjNDNTFFQjc3OTZBRDdDRTM0RjhFQ0RCMEU3NjAxRTcyREE4QjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEDjhW9EeDsCYtfTQYHNR
yovkHoMCr0ofV5ECUAwlBythwHIpOBDPAdVwu5FuAjqF+P/vLjvMNc2zYs5KEzVc
U1pFMrBVAYY16GCiAOBMY8O94UhEqVJyV8kK89N65chRLVYRa2HrLdbl50GDM5o8
8ElbkIpHDLBhs1VuZ6iG6MJgBYM9Z8HrxD4HGFatvUuS7anxA2kr2Zm5mFcyrr3L
KzcUhRLq9vFPmJnCdbs/X+loy42ORcGdqVmpmne3NZpX6LvcC7C7JhIZwQKbV9LR
dLaYSbRMpFKofAFA9WC3Q/rFvzEp+Yqm4AoCGxyvPFHrd5atfONPjs2w52AectqL
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU6xViF3oacQ0eWpx05FWofLquzZowHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMzMmUzMTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3sQMA0GCSqG
SIb3DQEBCwUAA4IBAQBOahI+kahyzsBs6BeBGAt368L4Hh2bIJR2Q8cYSh3+wbE9
EzjPEHLnJphGpnUEYJzKa7DFU7gKLuBXoVHBiCSePoDnDAq4bBrSsE/toiDtUfbB
WeKcNLSx4Qkf4tp4Kz/SxKZcX5cpV13ZkLi2iYfDkVvmisP0qpGjfFuKbHTOD+HK
9cR8ohRvdMO+FIryDLTO64n1SLS6XPVlipLf6SaiVKTYeLK+sd/NLKfjtMIqQhPL
aJWhF77cUFreXFZbyzZeuCIf88go9CnKtlT6oZRvZRlKLVdPA9Dttnbczv42B1sx
OQCMQMsBMwsYcUuDNljH904LNjCssA7pRFvLdzEe
-----END CERTIFICATE-----