Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31342e302f32332d3234203d3e20313338383339.roa
File:                     3130332e3133382e31342e302f32332d3234203d3e20313338383339.roa (raw, json)
Hash identifier:          R6LFSf3BqhWlVMS7/ksiny40ejw3+5roCaO4N//yZuY=
Subject key identifier:   D9:7E:52:6E:F9:B7:A1:8E:64:70:02:FA:DA:97:59:E6:DE:26:85:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5B6F1779330CE759AC297EF574E0813CF443D117
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31342e302f32332d3234203d3e20313338383339.roa
Signing time:             Wed 06 Oct 2021 05:00:01 +0000
ROA not before:           Wed 06 Oct 2021 04:55:01 +0000
ROA not after:            Thu 06 Oct 2022 05:00:01 +0000
asID:                     138839
IP address blocks:        103.138.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6f:17:79:33:0c:e7:59:ac:29:7e:f5:74:e0:81:3c:f4:43:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  6 04:55:01 2021 GMT
            Not After : Oct  6 05:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:70:94:49:9b:f4:a1:a2:3d:8a:c2:e8:a2:
                    7c:23:4a:93:92:cc:1a:0b:3d:bc:15:56:92:2d:ce:
                    7b:8c:33:5a:e1:e9:9f:50:6e:64:16:83:a8:16:eb:
                    e9:0f:85:d2:ca:4f:e5:51:44:22:ba:66:3c:ac:83:
                    85:26:53:94:b9:7c:01:f3:d0:b7:16:d5:7d:e7:5c:
                    96:d9:fb:79:32:fd:6a:12:ba:96:c0:bc:90:d9:b3:
                    d9:e6:75:e2:e8:66:2c:e3:c0:16:5e:c4:78:34:3b:
                    c8:66:8f:a1:f3:8b:3f:96:4e:0d:23:41:f3:20:df:
                    a2:41:1c:65:6f:fa:be:86:1a:fb:83:66:2f:70:3b:
                    5e:a1:d5:c1:a2:26:ef:f4:b6:4f:98:e8:3d:9b:83:
                    20:d5:89:79:b5:64:5b:69:96:9a:e7:8f:99:31:c5:
                    c9:2d:9e:ae:76:de:18:fe:94:14:8d:68:e8:8f:6a:
                    d3:a4:e3:74:81:2a:4a:7f:f7:35:e9:75:2d:32:97:
                    3a:bd:2b:72:39:82:58:6f:8e:b9:45:b8:1e:60:78:
                    7d:5c:43:24:4f:7f:78:af:8b:4a:95:98:cb:35:12:
                    99:f6:01:0f:7a:c9:2f:4d:b4:82:ea:ac:c6:5f:1c:
                    93:59:80:28:0f:0b:66:31:1c:e6:7f:75:bf:12:d7:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7E:52:6E:F9:B7:A1:8E:64:70:02:FA:DA:97:59:E6:DE:26:85:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e31342e302f32332d3234203d3e20313338383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:2d:4d:21:78:15:d5:e2:6d:c1:b7:18:82:b7:0e:eb:b3:
         90:e6:e3:d7:72:f2:cf:fa:61:df:a5:2f:f8:5f:d2:e4:e8:a7:
         99:7d:79:a7:e8:31:f2:85:78:35:59:c5:a7:68:6a:95:1f:17:
         cb:90:c6:6a:26:28:f8:21:83:1e:18:ac:e2:65:88:36:53:83:
         ad:88:ce:b1:79:76:5b:2f:9e:16:82:76:72:8d:72:c1:86:97:
         9e:19:9c:12:55:22:86:12:fc:6e:5b:17:49:c2:5d:ac:6c:61:
         c6:a6:d7:43:a6:af:f9:97:f6:0e:06:46:60:08:55:d7:18:a9:
         f4:c2:0d:b4:ba:9b:f2:23:c6:30:a6:b2:a3:a4:d8:6e:c9:5d:
         dd:d8:b7:5a:33:3e:04:08:45:ba:6a:19:1d:58:c1:e4:ad:30:
         4a:c6:98:30:6d:23:32:97:29:f2:77:39:53:9c:c4:7a:e8:cb:
         67:b9:02:7c:65:12:2c:e1:60:2e:b2:87:d8:dc:12:55:be:35:
         95:af:27:52:ed:8d:87:aa:55:97:b6:0c:a6:ca:bb:6c:f7:27:
         1f:e0:87:8f:8e:7c:7e:75:2d:42:f5:38:9f:72:83:a9:f2:ac:
         53:b3:9b:86:42:14:95:c4:37:aa:a9:fd:27:a6:87:e5:d8:5e:
         ef:79:cd:77
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUW28XeTMM51msKX71dOCBPPRD0RcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAwNjA0NTUwMVoX
DTIyMTAwNjA1MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFNURENzA5NDQ5OUJGNEExQTIzRDhBQzJFOEEyN0MyMzRBOTM5MkNDMUEw
QjNEQkMxNTU2OTIyRENFN0I4QzMzNUFFMUU5OUY1MDZFNjQxNjgzQTgxNkVCRTkw
Rjg1RDJDQTRGRTU1MTQ0MjJCQTY2M0NBQzgzODUyNjUzOTRCOTdDMDFGM0QwQjcx
NkQ1N0RFNzVDOTZEOUZCNzkzMkZENkExMkJBOTZDMEJDOTBEOUIzRDlFNjc1RTJF
ODY2MkNFM0MwMTY1RUM0NzgzNDNCQzg2NjhGQTFGMzhCM0Y5NjRFMEQyMzQxRjMy
MERGQTI0MTFDNjU2RkZBQkU4NjFBRkI4MzY2MkY3MDNCNUVBMUQ1QzFBMjI2RUZG
NEI2NEY5OEU4M0Q5QjgzMjBENTg5NzlCNTY0NUI2OTk2OUFFNzhGOTkzMUM1Qzky
RDlFQUU3NkRFMThGRTk0MTQ4RDY4RTg4RjZBRDNBNEUzNzQ4MTJBNEE3RkY3MzVF
OTc1MkQzMjk3M0FCRDJCNzIzOTgyNTg2RjhFQjk0NUI4MUU2MDc4N0Q1QzQzMjQ0
RjdGNzhBRjhCNEE5NTk4Q0IzNTEyOTlGNjAxMEY3QUM5MkY0REI0ODJFQUFDQzY1
RjFDOTM1OTgwMjgwRjBCNjYzMTFDRTY3Rjc1QkYxMkQ3QzEzOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3XCUSZv0oaI9isLoonwj
SpOSzBoLPbwVVpItznuMM1rh6Z9QbmQWg6gW6+kPhdLKT+VRRCK6Zjysg4UmU5S5
fAHz0LcW1X3nXJbZ+3ky/WoSupbAvJDZs9nmdeLoZizjwBZexHg0O8hmj6Hziz+W
Tg0jQfMg36JBHGVv+r6GGvuDZi9wO16h1cGiJu/0tk+Y6D2bgyDViXm1ZFtplprn
j5kxxcktnq523hj+lBSNaOiPatOk43SBKkp/9zXpdS0ylzq9K3I5glhvjrlFuB5g
eH1cQyRPf3ivi0qVmMs1Epn2AQ96yS9NtILqrMZfHJNZgCgPC2YxHOZ/db8S18E5
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU2X5Sbvm3oY5kcAL62pdZ5t4mhVMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM4MmUzMTM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4oOMA0GCSqG
SIb3DQEBCwUAA4IBAQB6qi1NIXgV1eJtwbcYgrcO67OQ5uPXcvLP+mHfpS/4X9Lk
6KeZfXmn6DHyhXg1WcWnaGqVHxfLkMZqJij4IYMeGKziZYg2U4OtiM6xeXZbL54W
gnZyjXLBhpeeGZwSVSKGEvxuWxdJwl2sbGHGptdDpq/5l/YOBkZgCFXXGKn0wg20
upvyI8YwprKjpNhuyV3d2LdaMz4ECEW6ahkdWMHkrTBKxpgwbSMylynydzlTnMR6
6MtnuQJ8ZRIs4WAusofY3BJVvjWVrydS7Y2HqlWXtgymyrts9ycf4IePjnx+dS1C
9TifcoOp8qxTs5uGQhSVxDeqqf0npofl2F7vec13
-----END CERTIFICATE-----