Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34322e302f32332d3234203d3e20313336313139.roa
File:                     3130332e3133382e34322e302f32332d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          dx10EBJ0btk1NOiZnV2Vt3yVy6+KK7YsWjyaVQCmW8Q=
Subject key identifier:   90:2E:9C:94:0F:06:F7:31:74:0B:40:69:EA:79:12:B3:70:18:7F:15
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12A46606025A98F5F0F4EA11B46F62C10B60077B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34322e302f32332d3234203d3e20313336313139.roa
Signing time:             Sat 13 Nov 2021 07:00:00 +0000
ROA not before:           Sat 13 Nov 2021 06:55:00 +0000
ROA not after:            Sun 13 Nov 2022 07:00:00 +0000
asID:                     136119
IP address blocks:        103.138.42.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:66:06:02:5a:98:f5:f0:f4:ea:11:b4:6f:62:c1:0b:60:07:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 13 06:55:00 2021 GMT
            Not After : Nov 13 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:1e:8c:c2:20:85:01:18:c8:08:d1:c9:2a:
                    b5:46:f2:b4:f2:d9:81:63:07:fb:e5:66:33:eb:de:
                    d8:9c:c2:00:7a:e9:d8:e1:1c:41:50:28:a3:db:c5:
                    64:95:01:6e:8a:9f:c7:82:86:b7:81:d9:43:e3:8e:
                    ee:6b:c3:be:ca:52:32:2e:26:ae:db:41:cb:c7:4e:
                    a6:f6:19:67:d5:bb:99:bc:4c:9e:8e:93:ff:9f:8d:
                    19:0a:4c:45:b6:13:3c:01:2b:1a:3f:de:2e:95:80:
                    53:fe:30:6e:38:29:ea:ce:a2:fb:fd:0d:d5:94:a2:
                    61:b2:dc:f9:f6:ab:db:fd:69:58:fb:54:d8:e1:63:
                    c1:37:8f:ea:dc:e9:c0:35:07:c8:f4:71:80:ee:f2:
                    3b:fe:a5:ff:6b:69:e6:b0:97:8d:4e:59:46:49:d7:
                    49:bc:45:da:a9:f9:26:81:6e:34:03:7c:9b:41:fa:
                    f3:c7:2a:ba:7e:d0:ff:5b:2c:2e:82:40:c3:5b:9b:
                    9f:8d:57:0d:fd:69:ac:40:82:fb:d1:dc:20:01:88:
                    0c:01:44:2b:ea:6a:71:aa:de:f1:24:c3:f5:e4:84:
                    1d:bf:d9:1b:65:79:82:df:d6:ef:33:b0:2e:3a:28:
                    5b:35:b3:8c:05:7d:5f:04:ec:bb:5b:4f:1d:c6:d3:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2E:9C:94:0F:06:F7:31:74:0B:40:69:EA:79:12:B3:70:18:7F:15
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34322e302f32332d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:db:4e:eb:89:8c:50:02:f8:b8:ac:25:75:50:e6:09:01:
         ab:f6:1d:45:bc:3d:48:83:95:b3:21:fe:09:fe:0a:75:09:3b:
         e2:aa:9b:52:37:89:78:7b:a6:06:4d:fd:75:90:6b:1a:fd:13:
         b6:3e:f9:20:e5:79:cc:c6:6a:60:c3:05:d0:59:c8:11:16:51:
         da:63:1c:ac:3a:f5:43:ee:68:82:52:fc:86:88:bc:2b:7a:fb:
         1f:de:c7:31:90:94:17:85:f7:91:5c:a4:02:99:89:7a:0c:d9:
         e5:33:28:4c:c9:b1:d3:85:c5:86:12:b7:1a:21:90:da:ad:ef:
         93:e5:e2:ee:56:4f:d3:77:04:c2:93:a5:0d:cc:68:2a:18:02:
         c1:d2:9f:94:7a:a2:33:cc:ce:2a:7f:ac:ff:8b:84:9d:06:0d:
         de:ca:28:f3:00:99:05:95:3d:ca:3f:4f:d3:ce:72:73:dc:75:
         4e:34:17:60:61:8b:5f:fe:85:8f:da:1b:04:b6:0c:ac:ac:83:
         8f:8f:a2:aa:9c:b2:83:c8:f1:69:f2:fd:e9:7b:96:be:18:d1:
         be:33:ff:f3:8d:9b:01:bb:88:d5:3e:57:8a:5f:99:f8:69:6a:
         35:66:e0:f2:4e:9b:9c:d4:92:72:ca:af:b7:34:b8:35:5c:ee:
         b8:6f:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----