Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e382e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132372e382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          HxBRjQMlPvtxVOa4yaAIJBQD7RB4IQ0FONuXP2tjUlc=
Subject key identifier:   54:23:80:E2:55:9A:22:08:2B:E9:A5:0F:1D:36:6C:F1:92:8F:D1:78
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       20A176FEBD738FF9BDA201B3D1F455EE4E68689F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e382e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:12 +0000
ROA not before:           Tue 27 Apr 2021 15:41:12 +0000
ROA not after:            Wed 27 Apr 2022 15:46:12 +0000
asID:                     17995
IP address blocks:        103.127.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a1:76:fe:bd:73:8f:f9:bd:a2:01:b3:d1:f4:55:ee:4e:68:68:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:12 2021 GMT
            Not After : Apr 27 15:46:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:09:81:89:b2:3e:a0:a7:cb:0c:4d:67:5b:
                    0e:32:0b:49:90:ff:2c:47:53:6e:97:d8:25:fe:ac:
                    2c:c4:fe:1c:61:00:a3:d0:86:03:f8:8d:a0:83:a7:
                    c7:f8:82:06:6b:1c:bf:6e:9b:0d:ec:f5:e2:d4:83:
                    f1:b0:bb:7e:5b:cb:93:af:4f:86:9b:d1:dc:27:88:
                    34:1d:02:11:be:ae:83:95:f0:85:95:d3:f0:ad:5b:
                    d9:fd:a6:c6:a8:5b:04:5a:ee:b7:a1:66:f5:8a:b5:
                    b1:7c:24:95:52:f8:42:b7:91:39:97:d6:c7:34:39:
                    8d:6c:30:d7:26:72:7a:f4:8d:2c:27:76:2c:18:33:
                    1a:d8:60:c8:0e:71:f4:84:66:f9:36:ed:7a:c3:5d:
                    d3:85:1f:84:38:ca:ab:58:72:1b:6a:7e:49:93:0f:
                    f1:03:00:ea:e4:15:33:ae:02:df:8b:ca:c8:43:af:
                    ca:31:69:71:44:3e:6e:87:bd:2e:91:26:d4:ed:e7:
                    2f:5d:20:11:3f:64:cb:ed:fc:e0:72:86:b4:9c:e4:
                    05:43:b9:5b:db:b0:0e:4f:72:e4:fb:18:85:8e:31:
                    04:79:fe:07:2a:c9:05:0b:24:5f:2a:dc:9b:1f:35:
                    f5:17:5f:f8:04:a6:06:92:a1:e7:70:a3:62:dd:d2:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:80:E2:55:9A:22:08:2B:E9:A5:0F:1D:36:6C:F1:92:8F:D1:78
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132372e382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:05:d3:bc:e6:7b:ce:88:01:50:24:6d:73:20:64:bc:72:39:
         80:50:d4:4c:76:75:18:97:a0:b6:66:0d:5a:a9:4d:f2:0d:d6:
         1f:54:09:d0:66:29:be:d5:9d:28:cb:0a:b4:bf:c7:17:34:b9:
         7d:16:cf:1f:05:b9:48:a8:ef:82:c0:18:6e:57:66:5b:09:75:
         23:8e:72:3a:89:15:eb:10:e9:b4:4f:4f:93:9f:b9:8b:4a:f1:
         ea:70:65:f5:25:75:7a:f4:dd:3c:6f:08:24:76:7f:b2:fb:3c:
         a5:62:95:d9:ee:72:a7:ad:67:45:ef:fb:9d:d8:7a:95:bf:ea:
         15:3d:01:43:ab:08:62:58:22:ee:c3:a3:e7:a5:2a:84:5d:7a:
         b6:73:7f:92:50:d4:77:bb:4c:bc:6c:1d:e2:80:88:6f:08:75:
         4d:66:4d:cc:33:b4:0a:74:5e:a4:86:6f:69:0d:a8:87:53:31:
         be:8a:a5:7e:1f:40:b8:3a:08:7c:8e:3c:60:5d:9f:e7:83:50:
         b2:90:ff:7e:92:d6:d0:68:ab:27:7f:51:35:58:73:c2:bf:ea:
         b8:47:6c:95:77:c8:cb:a3:7c:0b:0d:83:8f:e2:c7:e3:69:7e:
         5b:4f:55:29:4d:87:8d:58:37:e0:60:61:19:0b:a2:57:1a:f7:
         26:05:63:6d
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUIKF2/r1zj/m9ogGz0fRV7k5oaJ8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDQyNzE1NDExMloX
DTIyMDQyNzE1NDYxMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCRTVBMDk4MTg5QjIzRUEwQTdDQjBDNEQ2NzVCMEUzMjBCNDk5MEZGMkM0
NzUzNkU5N0Q4MjVGRUFDMkNDNEZFMUM2MTAwQTNEMDg2MDNGODhEQTA4M0E3QzdG
ODgyMDY2QjFDQkY2RTlCMERFQ0Y1RTJENDgzRjFCMEJCN0U1QkNCOTNBRjRGODY5
QkQxREMyNzg4MzQxRDAyMTFCRUFFODM5NUYwODU5NUQzRjBBRDVCRDlGREE2QzZB
ODVCMDQ1QUVFQjdBMTY2RjU4QUI1QjE3QzI0OTU1MkY4NDJCNzkxMzk5N0Q2Qzcz
NDM5OEQ2QzMwRDcyNjcyN0FGNDhEMkMyNzc2MkMxODMzMUFEODYwQzgwRTcxRjQ4
NDY2RjkzNkVEN0FDMzVERDM4NTFGODQzOENBQUI1ODcyMUI2QTdFNDk5MzBGRjEw
MzAwRUFFNDE1MzNBRTAyREY4QkNBQzg0M0FGQ0EzMTY5NzE0NDNFNkU4N0JEMkU5
MTI2RDRFREU3MkY1RDIwMTEzRjY0Q0JFREZDRTA3Mjg2QjQ5Q0U0MDU0M0I5NUJE
QkIwMEU0RjcyRTRGQjE4ODU4RTMxMDQ3OUZFMDcyQUM5MDUwQjI0NUYyQURDOUIx
RjM1RjUxNzVGRjgwNEE2MDY5MkExRTc3MEEzNjJEREQyMTA3NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WgmBibI+oKfLDE1nWw4y
C0mQ/yxHU26X2CX+rCzE/hxhAKPQhgP4jaCDp8f4ggZrHL9umw3s9eLUg/Gwu35b
y5OvT4ab0dwniDQdAhG+roOV8IWV0/CtW9n9psaoWwRa7rehZvWKtbF8JJVS+EK3
kTmX1sc0OY1sMNcmcnr0jSwndiwYMxrYYMgOcfSEZvk27XrDXdOFH4Q4yqtYchtq
fkmTD/EDAOrkFTOuAt+LyshDr8oxaXFEPm6HvS6RJtTt5y9dIBE/ZMvt/OByhrSc
5AVDuVvbsA5PcuT7GIWOMQR5/gcqyQULJF8q3JsfNfUXX/gEpgaSoedwo2Ld0hB1
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUVCOA4lWaIggr6aUPHTZs8ZKP0XgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjM3MmUzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnfwgwDQYJKoZIhvcN
AQELBQADggEBAFgF07zme86IAVAkbXMgZLxyOYBQ1Ex2dRiXoLZmDVqpTfIN1h9U
CdBmKb7VnSjLCrS/xxc0uX0Wzx8FuUio74LAGG5XZlsJdSOOcjqJFesQ6bRPT5Of
uYtK8epwZfUldXr03TxvCCR2f7L7PKVildnucqetZ0Xv+53YepW/6hU9AUOrCGJY
Iu7Do+elKoRderZzf5JQ1He7TLxsHeKAiG8IdU1mTcwztAp0XqSGb2kNqIdTMb6K
pX4fQLg6CHyOPGBdn+eDULKQ/36S1tBoqyd/UTVYc8K/6rhHbJV3yMujfAsNg4/i
x+NpfltPVSlNh41YN+BgYRkLolca9yYFY20=
-----END CERTIFICATE-----