Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132352e382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          rEcpRuO0RhukRvSFcPmEvbl+V9MJV17bUi5HQfmzyzk=
Subject key identifier:   EE:78:3B:D3:68:65:BD:90:C8:59:D9:C3:EC:CB:E3:96:8A:35:AE:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       35811E2771AB12803B57A643D4C01538EE4A6B9E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:12 +0000
ROA not before:           Tue 27 Apr 2021 15:41:12 +0000
ROA not after:            Wed 27 Apr 2022 15:46:12 +0000
asID:                     17995
IP address blocks:        103.125.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:1e:27:71:ab:12:80:3b:57:a6:43:d4:c0:15:38:ee:4a:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:12 2021 GMT
            Not After : Apr 27 15:46:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:25:64:2e:55:dd:1e:62:d6:d1:1a:9d:6b:
                    e6:31:23:7d:c9:a7:ce:67:85:4e:40:b3:67:9c:47:
                    7c:62:18:04:58:44:9b:f2:c6:39:30:93:b2:b0:27:
                    9f:fd:da:da:b4:39:15:b3:50:82:9e:73:4b:a5:5a:
                    c0:0f:e9:5b:f6:f8:34:33:58:29:27:be:c6:0d:1e:
                    a8:b7:96:ec:2f:ec:c7:08:2e:87:a8:b2:49:4a:8f:
                    4d:dd:5e:f5:fd:64:74:b7:f4:c1:45:f6:8d:3e:6c:
                    b9:29:75:2d:07:7a:97:30:ae:03:f6:86:1b:64:42:
                    35:81:50:74:ab:72:2b:f7:0a:b2:2f:72:27:91:a5:
                    f0:22:0a:35:65:f7:d1:06:53:87:49:5f:ab:d5:b3:
                    4e:d3:9a:ca:9a:d4:19:92:fe:3c:71:0f:a1:3e:38:
                    7a:9c:49:63:9c:40:37:70:96:1c:a7:74:70:a6:51:
                    e5:31:fb:29:d9:50:b5:14:71:d2:f3:c2:19:a5:c5:
                    66:91:97:18:30:db:ba:96:aa:7b:9b:2e:c7:94:b5:
                    25:a8:ab:78:8a:d7:f4:57:74:f0:79:24:92:4e:e0:
                    70:8b:17:d0:ef:1f:a3:c3:35:8b:4c:c5:65:98:14:
                    3b:2b:e7:a5:28:55:ef:d1:e7:25:55:e7:37:83:8f:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:78:3B:D3:68:65:BD:90:C8:59:D9:C3:EC:CB:E3:96:8A:35:AE:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:69:75:39:fe:6c:4d:7c:1b:e0:b9:36:77:7e:0a:93:53:
         8a:e6:58:f0:df:81:84:28:bf:08:a3:54:f2:d5:56:95:a8:ef:
         12:e3:c9:ef:e0:b9:83:2a:b4:bd:ec:5f:9f:ed:45:78:a6:b2:
         0a:1f:be:90:8c:06:1b:d1:46:46:1c:46:9b:c8:9e:50:63:98:
         42:ff:9d:8f:92:c1:8c:46:30:7e:6f:8f:b3:f2:ee:93:50:c1:
         ac:f0:f4:a4:49:ee:24:22:71:4e:04:1c:74:93:6a:d6:1f:c2:
         2d:0c:33:7c:c4:e7:16:b4:83:0f:76:00:91:07:de:ae:c2:71:
         36:a6:d7:4d:e1:3e:6f:79:c8:79:4f:d2:1c:7d:6b:12:1a:92:
         b3:e2:b0:03:54:a0:ec:eb:e6:63:ed:a4:c2:bc:3b:c0:a8:72:
         19:88:b4:6c:d8:12:c3:9b:ea:68:54:08:19:14:35:89:7a:ff:
         77:79:f5:2f:3c:41:a0:e1:e6:35:e4:f7:d9:61:98:19:4c:e0:
         33:b7:55:ab:f3:31:57:f1:8b:98:b1:01:01:a6:d3:ce:7b:93:
         5e:b0:10:cc:5f:8d:36:d7:68:93:b7:02:9a:eb:fd:91:db:62:
         8d:9d:36:ef:15:11:4f:f0:53:1e:0c:87:db:3b:14:0b:f6:75:
         31:7f:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----