Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e203435333132.roa
File:                     3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (raw, json)
Hash identifier:          Pl96RIkpbvVVyWfjx7Mnpqp8x5eleifjR6FH7suhdBE=
Subject key identifier:   57:45:C3:88:0F:06:57:FC:51:02:54:BF:65:27:D6:61:DF:87:CE:3F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46C01FA562B4F8C63589C859B392D78894ED121D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e203435333132.roa
Signing time:             Thu 04 Nov 2021 09:00:01 +0000
ROA not before:           Thu 04 Nov 2021 08:55:01 +0000
ROA not after:            Fri 04 Nov 2022 09:00:01 +0000
asID:                     45312
IP address blocks:        103.134.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:1f:a5:62:b4:f8:c6:35:89:c8:59:b3:92:d7:88:94:ed:12:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  4 08:55:01 2021 GMT
            Not After : Nov  4 09:00:01 2022 GMT
        Subject: CN=3082010A0282010100B5E45531110C31F2545F3E9E003B44D2EDFB8C6B4E9E1DED377F421A33C6544BD474A6F862FB42CAC1AB8BA3CD41EA70936B29EAE72DB77E3506DDDF98F00944D2AD6A96B17D9B5D89B470CB6B0CA3D36A7F38C4886C978F5C19BCF83E37D3075092F531DD13037908B362313908BDDBCB7BAB2195EC82AEFA9AE39DF5040EA1ADCAE5DC3DB209A33D432A611D524170909030F63A73F0DD6C53E12ED5193101C7F6FCC31475BF433FE2525E2355061A672C5D58CE2D635FFD48F1F273551BFE8E800B5607D59419CF2AF9AEE188F3C6D7459E6944E822A00ED4BF2553971E7CBD3E7D46273950589C97CA0B07CBD447B5AA5BCC7C0E324D1F8B35D33CF55D630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:55:31:11:0c:31:f2:54:5f:3e:9e:00:3b:
                    44:d2:ed:fb:8c:6b:4e:9e:1d:ed:37:7f:42:1a:33:
                    c6:54:4b:d4:74:a6:f8:62:fb:42:ca:c1:ab:8b:a3:
                    cd:41:ea:70:93:6b:29:ea:e7:2d:b7:7e:35:06:dd:
                    df:98:f0:09:44:d2:ad:6a:96:b1:7d:9b:5d:89:b4:
                    70:cb:6b:0c:a3:d3:6a:7f:38:c4:88:6c:97:8f:5c:
                    19:bc:f8:3e:37:d3:07:50:92:f5:31:dd:13:03:79:
                    08:b3:62:31:39:08:bd:db:cb:7b:ab:21:95:ec:82:
                    ae:fa:9a:e3:9d:f5:04:0e:a1:ad:ca:e5:dc:3d:b2:
                    09:a3:3d:43:2a:61:1d:52:41:70:90:90:30:f6:3a:
                    73:f0:dd:6c:53:e1:2e:d5:19:31:01:c7:f6:fc:c3:
                    14:75:bf:43:3f:e2:52:5e:23:55:06:1a:67:2c:5d:
                    58:ce:2d:63:5f:fd:48:f1:f2:73:55:1b:fe:8e:80:
                    0b:56:07:d5:94:19:cf:2a:f9:ae:e1:88:f3:c6:d7:
                    45:9e:69:44:e8:22:a0:0e:d4:bf:25:53:97:1e:7c:
                    bd:3e:7d:46:27:39:50:58:9c:97:ca:0b:07:cb:d4:
                    47:b5:aa:5b:cc:7c:0e:32:4d:1f:8b:35:d3:3c:f5:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:45:C3:88:0F:06:57:FC:51:02:54:BF:65:27:D6:61:DF:87:CE:3F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133342e36362e302f32332d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:37:8b:12:2f:c7:06:04:24:1a:63:51:32:6a:08:f2:d9:
         e4:e8:7d:fc:00:b0:31:fc:e1:8c:59:9b:3c:f8:7c:56:c1:46:
         ec:f4:40:b6:03:85:d2:c6:8a:5e:bc:66:68:88:45:b8:03:f7:
         a5:bf:1a:a3:f4:70:02:76:5a:66:be:a1:39:6f:f6:31:3b:1d:
         87:e9:7d:26:6e:77:a5:91:10:f5:ff:b9:8d:1c:cc:48:84:96:
         cd:07:6e:2e:51:af:aa:6d:2e:5e:88:7b:07:30:e7:13:30:b9:
         4c:f8:06:58:8c:8e:83:15:14:86:cb:42:28:05:a5:03:bb:4f:
         12:a1:6d:02:11:61:62:32:aa:0f:a3:38:8d:96:cc:fe:be:13:
         01:19:cc:ed:b0:25:03:55:9c:c5:c3:f5:95:d5:61:be:83:df:
         4a:c2:1e:f0:0c:b0:68:3a:58:1a:14:4e:00:e9:e2:e1:66:2a:
         95:b2:08:c2:b7:13:ea:5f:b7:76:31:a1:18:cf:d6:ac:4c:24:
         41:57:66:12:59:a5:44:54:2a:6b:fb:57:f0:ba:b8:d1:d9:93:
         62:ef:77:3c:e0:68:a1:3f:ae:d2:35:54:1d:54:8a:52:a8:ae:
         cb:a0:d5:72:a1:30:d1:9d:91:f1:bf:19:33:c5:b9:f2:3d:6f:
         87:e2:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----