Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33302e302f32332d3234203d3e203535363939.roa
File:                     3130332e3133392e33302e302f32332d3234203d3e203535363939.roa (raw, json)
Hash identifier:          QJqIEZpcesANkm73L4Hu8SNLwttoiiUazTt/10O86wg=
Subject key identifier:   6D:1C:00:44:D0:F6:31:15:43:45:A9:79:1C:B8:07:73:B7:BD:7C:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       38A13C5009EDF71F88D2E152A0F0C7F2D6FF6DC9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33302e302f32332d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:00 +0000
ROA not before:           Wed 27 Oct 2021 08:55:00 +0000
ROA not after:            Thu 27 Oct 2022 09:00:00 +0000
asID:                     55699
IP address blocks:        103.139.30.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a1:3c:50:09:ed:f7:1f:88:d2:e1:52:a0:f0:c7:f2:d6:ff:6d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:00 2021 GMT
            Not After : Oct 27 09:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:19:92:de:f1:8f:ff:5f:d7:97:8b:5a:a0:
                    96:e1:32:23:51:d6:b1:56:0d:b1:8c:a4:ec:75:f7:
                    56:52:07:77:0a:ff:99:e8:30:4d:47:cf:28:ce:10:
                    c4:22:a4:94:c2:f3:87:8f:fb:7b:5c:8b:8a:28:47:
                    57:8b:6d:43:1f:3a:1f:ac:a1:6e:96:a8:8a:0e:f6:
                    65:95:67:85:e7:44:a9:8c:29:38:99:04:ae:4b:6a:
                    eb:46:bd:dc:b1:a0:aa:c1:9a:90:85:b1:00:bf:10:
                    cc:d6:c0:6b:6e:cd:a8:15:10:ea:61:65:f1:8b:51:
                    fc:1f:61:08:a1:83:cc:7c:d0:b2:e5:9c:2c:90:73:
                    3b:de:3e:48:14:32:31:53:ed:30:11:c7:b4:bc:10:
                    5d:fe:a8:99:3d:37:59:63:d5:cf:c3:81:2e:b2:d4:
                    93:05:e8:83:90:ad:21:f7:86:fd:1a:24:37:d3:0e:
                    89:a1:21:02:a8:d5:cc:2f:9b:cf:45:ea:77:0e:7a:
                    25:21:6e:f8:66:5a:0f:25:ec:3c:c7:f9:41:9e:4f:
                    df:b8:90:f4:17:94:b9:c7:ab:40:a3:5b:73:ca:ee:
                    cf:2b:73:89:16:94:9c:c2:8b:18:7c:06:15:04:6e:
                    36:87:20:e9:b6:81:5a:dc:53:e3:76:bf:a3:b3:bd:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1C:00:44:D0:F6:31:15:43:45:A9:79:1C:B8:07:73:B7:BD:7C:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133392e33302e302f32332d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:db:af:77:26:12:1e:12:59:5e:1f:a4:a6:eb:70:d7:e0:
         39:d8:49:17:a9:9c:10:12:af:9a:47:bd:00:d3:b3:a5:00:e0:
         2e:4c:85:64:d1:4e:3a:c1:a7:a0:b0:54:7a:76:8e:8a:93:94:
         18:5f:13:c1:1c:43:d8:4b:de:34:c1:90:b0:82:40:42:1b:ff:
         b6:87:4e:a0:5d:34:13:1c:ff:ea:59:32:c8:f8:9d:97:26:23:
         ff:8b:23:ea:76:fa:bc:f8:44:0b:a4:b5:95:b1:68:e5:c7:64:
         87:97:2d:08:79:96:02:80:b2:f9:9b:00:77:4d:d4:80:e4:14:
         4b:41:f8:87:60:03:cc:a2:b1:ac:d8:92:73:f9:f5:34:3b:54:
         77:67:99:a9:55:ed:b7:c0:da:9d:9a:14:17:c0:36:40:44:8a:
         1b:a8:bf:8b:2b:03:9a:81:4f:a7:d9:61:50:36:91:01:e8:e4:
         25:f8:99:3d:08:30:5d:bd:86:5f:18:14:e7:ce:ae:fe:1a:9c:
         7f:d6:66:d8:ef:6b:d5:dc:5b:52:f0:f2:90:6b:bc:0b:09:da:
         24:a1:b9:9b:71:3e:3c:2f:3c:81:49:65:31:98:a2:a7:48:ef:
         b6:92:c4:ec:0b:81:7a:a0:f3:4b:a1:39:73:2a:7e:7e:7d:54:
         fb:60:70:fa
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUOKE8UAnt9x+I0uFSoPDH8tb/bckwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAyNzA4NTUwMFoX
DTIyMTAyNzA5MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBERjY2MTk5MkRFRjE4RkZGNUZENzk3OEI1QUEwOTZFMTMyMjM1MUQ2QjE1
NjBEQjE4Q0E0RUM3NUY3NTY1MjA3NzcwQUZGOTlFODMwNEQ0N0NGMjhDRTEwQzQy
MkE0OTRDMkYzODc4RkZCN0I1QzhCOEEyODQ3NTc4QjZENDMxRjNBMUZBQ0ExNkU5
NkE4OEEwRUY2NjU5NTY3ODVFNzQ0QTk4QzI5Mzg5OTA0QUU0QjZBRUI0NkJERENC
MUEwQUFDMTlBOTA4NUIxMDBCRjEwQ0NENkMwNkI2RUNEQTgxNTEwRUE2MTY1RjE4
QjUxRkMxRjYxMDhBMTgzQ0M3Q0QwQjJFNTlDMkM5MDczM0JERTNFNDgxNDMyMzE1
M0VEMzAxMUM3QjRCQzEwNURGRUE4OTkzRDM3NTk2M0Q1Q0ZDMzgxMkVCMkQ0OTMw
NUU4ODM5MEFEMjFGNzg2RkQxQTI0MzdEMzBFODlBMTIxMDJBOEQ1Q0MyRjlCQ0Y0
NUVBNzcwRTdBMjUyMTZFRjg2NjVBMEYyNUVDM0NDN0Y5NDE5RTRGREZCODkwRjQx
Nzk0QjlDN0FCNDBBMzVCNzNDQUVFQ0YyQjczODkxNjk0OUNDMjhCMTg3QzA2MTUw
NDZFMzY4NzIwRTlCNjgxNUFEQzUzRTM3NkJGQTNCM0JEOUNFMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZhmS3vGP/1/Xl4taoJbh
MiNR1rFWDbGMpOx191ZSB3cK/5noME1HzyjOEMQipJTC84eP+3tci4ooR1eLbUMf
Oh+soW6WqIoO9mWVZ4XnRKmMKTiZBK5LautGvdyxoKrBmpCFsQC/EMzWwGtuzagV
EOphZfGLUfwfYQihg8x80LLlnCyQczvePkgUMjFT7TARx7S8EF3+qJk9N1lj1c/D
gS6y1JMF6IOQrSH3hv0aJDfTDomhIQKo1cwvm89F6ncOeiUhbvhmWg8l7DzH+UGe
T9+4kPQXlLnHq0CjW3PK7s8rc4kWlJzCixh8BhUEbjaHIOm2gVrcU+N2v6OzvZzh
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUbRwARND2MRVDRal5HLgHc7e9fMAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM5MmUzMzMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeLHjANBgkqhkiG
9w0BAQsFAAOCAQEAHFnbr3cmEh4SWV4fpKbrcNfgOdhJF6mcEBKvmke9ANOzpQDg
LkyFZNFOOsGnoLBUenaOipOUGF8TwRxD2EveNMGQsIJAQhv/todOoF00Exz/6lky
yPidlyYj/4sj6nb6vPhEC6S1lbFo5cdkh5ctCHmWAoCy+ZsAd03UgOQUS0H4h2AD
zKKxrNiSc/n1NDtUd2eZqVXtt8DanZoUF8A2QESKG6i/iysDmoFPp9lhUDaRAejk
JfiZPQgwXb2GXxgU586u/hqcf9Zm2O9r1dxbUvDykGu8CwnaJKG5m3E+PC88gUll
MZiip0jvtpLE7AuBeqDzS6E5cyp+fn1U+2Bw+g==
-----END CERTIFICATE-----