Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e3230342e302f32332d3234203d3e20313338383338.roa
File:                     3130332e3133382e3230342e302f32332d3234203d3e20313338383338.roa (raw, json)
Hash identifier:          qs4QQrpVoUHagYHRlKM4X/IHQZNIGxSHl/ZXFLRctpc=
Subject key identifier:   4A:77:90:4E:BA:80:F6:66:9D:17:1A:88:38:0A:7A:50:03:7A:CC:01
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0921735ACF8D83B4437F9DB22E17528FDF95BF69
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e3230342e302f32332d3234203d3e20313338383338.roa
Signing time:             Sat 23 Oct 2021 04:00:02 +0000
ROA not before:           Sat 23 Oct 2021 03:55:02 +0000
ROA not after:            Sun 23 Oct 2022 04:00:02 +0000
asID:                     138838
IP address blocks:        103.138.204.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:73:5a:cf:8d:83:b4:43:7f:9d:b2:2e:17:52:8f:df:95:bf:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 03:55:02 2021 GMT
            Not After : Oct 23 04:00:02 2022 GMT
        Subject: CN=3082010A0282010100A8C2AA72D41F92A7441F37D14C6D7E8C019413B18E5FC79645E32B24EE31D1E16F78AE70E8FC4DDDD1A93F9F657E19278A8442173B8CCFDB1207DEB07FEA425DAFBAD41B8539343090ED363008508BE0F4188C63C6912036C2E40D50132FD0CDFA6D1073DA673124457259D3995B1FB96F29571416F67160DC38F5488298DCF6C54D769A3AC68D063AB1971143A74A3A92B1AC47BE6C7D24ABBF96F634BB6F6E660CD7C5F140E18B88CCD2D8896FF7FC2A0E6012DA3CBD77123E2828663D86AF4E38690B63259D15FA516922521F3C40E7376E34B50F999F7DCBB1CAC7E7C1689ED2BD67A189B061FAE155CE6B79346FD57E44635ACB90B6AA9D6826AD2332F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:aa:72:d4:1f:92:a7:44:1f:37:d1:4c:6d:
                    7e:8c:01:94:13:b1:8e:5f:c7:96:45:e3:2b:24:ee:
                    31:d1:e1:6f:78:ae:70:e8:fc:4d:dd:d1:a9:3f:9f:
                    65:7e:19:27:8a:84:42:17:3b:8c:cf:db:12:07:de:
                    b0:7f:ea:42:5d:af:ba:d4:1b:85:39:34:30:90:ed:
                    36:30:08:50:8b:e0:f4:18:8c:63:c6:91:20:36:c2:
                    e4:0d:50:13:2f:d0:cd:fa:6d:10:73:da:67:31:24:
                    45:72:59:d3:99:5b:1f:b9:6f:29:57:14:16:f6:71:
                    60:dc:38:f5:48:82:98:dc:f6:c5:4d:76:9a:3a:c6:
                    8d:06:3a:b1:97:11:43:a7:4a:3a:92:b1:ac:47:be:
                    6c:7d:24:ab:bf:96:f6:34:bb:6f:6e:66:0c:d7:c5:
                    f1:40:e1:8b:88:cc:d2:d8:89:6f:f7:fc:2a:0e:60:
                    12:da:3c:bd:77:12:3e:28:28:66:3d:86:af:4e:38:
                    69:0b:63:25:9d:15:fa:51:69:22:52:1f:3c:40:e7:
                    37:6e:34:b5:0f:99:9f:7d:cb:b1:ca:c7:e7:c1:68:
                    9e:d2:bd:67:a1:89:b0:61:fa:e1:55:ce:6b:79:34:
                    6f:d5:7e:44:63:5a:cb:90:b6:aa:9d:68:26:ad:23:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:90:4E:BA:80:F6:66:9D:17:1A:88:38:0A:7A:50:03:7A:CC:01
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e3230342e302f32332d3234203d3e20313338383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:37:2d:7b:0d:a1:41:22:71:87:87:47:ab:27:af:e7:8d:48:
         30:f9:a0:f7:f8:67:f6:ea:5e:e2:8e:d8:a8:93:43:2f:48:d5:
         f9:cf:36:96:2f:db:6b:bd:09:d5:f9:dd:31:e5:f5:ce:e5:8e:
         b7:ff:54:3c:7a:cf:b3:ab:18:2b:71:f8:1f:c6:71:d7:d3:df:
         12:5b:e5:4b:0b:f7:6e:56:95:a3:54:b8:6c:4e:93:ac:83:3b:
         6b:0b:40:d4:11:fa:9a:b4:94:9e:10:68:7b:f1:8b:50:a3:e2:
         3f:f2:27:78:59:aa:9a:00:37:7b:75:d8:af:d5:8e:53:5f:8c:
         ca:a5:a7:d3:91:ab:44:dd:17:5f:4e:10:57:14:a7:8b:09:97:
         06:7c:39:19:1b:5b:e7:19:c6:de:5e:a4:fb:ac:18:0e:90:18:
         2d:dd:30:7a:71:a4:5d:9d:2c:9b:7f:5f:c6:23:d1:04:ae:c0:
         20:9e:2f:a2:45:30:ce:e4:b1:b4:ca:00:42:07:c7:23:1e:cb:
         c5:53:bd:0d:fc:44:76:13:80:5e:0a:d0:c3:c9:f0:ba:fe:a9:
         f5:ba:15:8e:2f:ae:2f:43:c7:e4:e0:2d:e9:7d:df:ae:8d:aa:
         c0:d6:fe:1d:06:09:2a:57:80:87:a9:13:63:22:35:3f:79:a2:
         cf:e3:49:ac
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUCSFzWs+Ng7RDf52yLhdSj9+Vv2kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAyMzAzNTUwMloX
DTIyMTAyMzA0MDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBOEMyQUE3MkQ0MUY5MkE3NDQxRjM3RDE0QzZEN0U4QzAxOTQxM0IxOEU1
RkM3OTY0NUUzMkIyNEVFMzFEMUUxNkY3OEFFNzBFOEZDNEREREQxQTkzRjlGNjU3
RTE5Mjc4QTg0NDIxNzNCOENDRkRCMTIwN0RFQjA3RkVBNDI1REFGQkFENDFCODUz
OTM0MzA5MEVEMzYzMDA4NTA4QkUwRjQxODhDNjNDNjkxMjAzNkMyRTQwRDUwMTMy
RkQwQ0RGQTZEMTA3M0RBNjczMTI0NDU3MjU5RDM5OTVCMUZCOTZGMjk1NzE0MTZG
NjcxNjBEQzM4RjU0ODgyOThEQ0Y2QzU0RDc2OUEzQUM2OEQwNjNBQjE5NzExNDNB
NzRBM0E5MkIxQUM0N0JFNkM3RDI0QUJCRjk2RjYzNEJCNkY2RTY2MENEN0M1RjE0
MEUxOEI4OENDRDJEODg5NkZGN0ZDMkEwRTYwMTJEQTNDQkQ3NzEyM0UyODI4NjYz
RDg2QUY0RTM4NjkwQjYzMjU5RDE1RkE1MTY5MjI1MjFGM0M0MEU3Mzc2RTM0QjUw
Rjk5OUY3RENCQjFDQUM3RTdDMTY4OUVEMkJENjdBMTg5QjA2MUZBRTE1NUNFNkI3
OTM0NkZENTdFNDQ2MzVBQ0I5MEI2QUE5RDY4MjZBRDIzMzJGMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowqpy1B+Sp0QfN9FMbX6M
AZQTsY5fx5ZF4ysk7jHR4W94rnDo/E3d0ak/n2V+GSeKhEIXO4zP2xIH3rB/6kJd
r7rUG4U5NDCQ7TYwCFCL4PQYjGPGkSA2wuQNUBMv0M36bRBz2mcxJEVyWdOZWx+5
bylXFBb2cWDcOPVIgpjc9sVNdpo6xo0GOrGXEUOnSjqSsaxHvmx9JKu/lvY0u29u
ZgzXxfFA4YuIzNLYiW/3/CoOYBLaPL13Ej4oKGY9hq9OOGkLYyWdFfpRaSJSHzxA
5zduNLUPmZ99y7HKx+fBaJ7SvWehibBh+uFVzmt5NG/VfkRjWsuQtqqdaCatIzLx
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUSneQTrqA9madFxqIOAp6UAN6zAEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM4MmUzMjMwMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniswwDQYJ
KoZIhvcNAQELBQADggEBAFc3LXsNoUEicYeHR6snr+eNSDD5oPf4Z/bqXuKO2KiT
Qy9I1fnPNpYv22u9CdX53THl9c7ljrf/VDx6z7OrGCtx+B/GcdfT3xJb5UsL925W
laNUuGxOk6yDO2sLQNQR+pq0lJ4QaHvxi1Cj4j/yJ3hZqpoAN3t12K/VjlNfjMql
p9ORq0TdF19OEFcUp4sJlwZ8ORkbW+cZxt5epPusGA6QGC3dMHpxpF2dLJt/X8Yj
0QSuwCCeL6JFMM7ksbTKAEIHxyMey8VTvQ38RHYTgF4K0MPJ8Lr+qfW6FY4vri9D
x+TgLel9366NqsDW/h0GCSpXgIepE2MiNT95os/jSaw=
-----END CERTIFICATE-----