Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233302e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3134392e3233302e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          roVgU0FxfX4Mft5At6L0A8Nc5pjuCJy+Xo82XsOZ8FE=
Subject key identifier:   B7:66:7F:B1:EA:A2:9D:AE:00:05:94:43:10:91:F6:9B:E9:C8:27:F7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       295653E414BFD19F4C138FEEED7D20E796FDFE41
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233302e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:00 +0000
ROA not before:           Fri 05 Nov 2021 16:55:00 +0000
ROA not after:            Sat 05 Nov 2022 17:00:00 +0000
asID:                     133815
IP address blocks:        103.149.230.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:56:53:e4:14:bf:d1:9f:4c:13:8f:ee:ed:7d:20:e7:96:fd:fe:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:00 2021 GMT
            Not After : Nov  5 17:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:48:25:89:11:b2:79:66:8e:1e:7e:a2:c3:
                    49:b5:e6:bf:60:15:bf:88:0b:7a:45:fe:87:0d:46:
                    f5:83:29:c5:7f:ad:4d:dc:fd:50:a9:ea:c7:36:8f:
                    3a:ac:77:58:05:b2:27:86:14:98:45:0c:8b:8b:b0:
                    fa:2c:a6:0f:41:51:fe:17:d6:37:7e:4b:fa:ee:17:
                    bb:cd:42:26:1b:22:d0:a7:10:1c:25:eb:9a:f5:5a:
                    29:5b:1d:d1:02:e3:c5:5d:eb:18:30:70:9a:3a:17:
                    b2:a1:81:f7:ee:ee:00:69:ff:d2:5f:97:6c:30:d1:
                    ef:cc:bd:6d:b4:fc:84:5e:27:4a:4a:3d:3b:86:10:
                    6b:a2:4e:33:8c:20:07:48:0d:92:d2:cc:30:d5:2d:
                    67:d7:d0:80:c1:b7:ce:9e:64:cf:a9:f0:b7:75:40:
                    97:60:32:86:98:49:04:0a:96:a1:10:a3:4f:dd:97:
                    8b:5f:99:da:da:cb:66:2f:01:1c:d3:ea:90:d5:45:
                    62:33:58:cb:2c:46:f8:d8:b3:34:0e:16:31:05:9f:
                    65:77:9a:18:94:95:57:34:6d:b3:6e:10:b3:33:e5:
                    8d:f9:ce:15:7e:dc:0e:0e:6c:1e:f8:0f:e1:ad:6c:
                    f3:26:99:28:1d:c5:54:13:1f:c8:6e:0f:1f:55:38:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:7F:B1:EA:A2:9D:AE:00:05:94:43:10:91:F6:9B:E9:C8:27:F7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233302e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:6d:1e:37:76:c0:35:80:3a:ff:73:db:96:fa:37:02:ba:
         c7:11:a6:3b:10:30:81:35:09:44:68:0f:2a:99:ee:be:e1:80:
         de:5c:1b:7a:30:16:b5:0e:ff:65:95:e5:e7:73:54:9d:6f:1a:
         f7:b4:05:16:13:57:7c:38:36:60:ab:65:4b:3c:9e:d5:ab:24:
         9a:c4:4f:fb:c3:7f:95:1b:b7:6b:7a:e6:ad:07:e0:f1:a1:bf:
         bb:ab:35:0b:66:9c:fc:f6:48:d4:41:24:ec:42:12:7f:f7:8e:
         bc:35:41:98:06:c0:e6:83:2e:63:dc:0e:6e:27:46:9c:df:a1:
         e4:62:87:9f:bb:c8:cb:d6:84:ac:e1:95:b5:95:8d:85:8b:f6:
         27:5c:76:bc:ae:7e:7f:c0:2c:1d:ce:e8:fd:a2:5e:07:07:a4:
         ea:91:6b:85:73:30:64:5f:42:2d:20:c1:8e:22:1d:86:a5:65:
         d9:dd:c3:37:1a:1d:ef:0b:89:8e:81:07:3c:d2:31:e5:2a:a8:
         10:e0:76:ab:96:c6:8c:10:a8:b9:ce:1d:85:48:7f:6a:87:d1:
         a0:c7:37:4d:77:20:9f:f9:ab:9b:89:06:d9:ef:02:2c:59:f8:
         fe:2a:f4:cc:c2:1d:53:6c:04:27:35:2e:c4:11:5f:e0:b4:55:
         b7:6d:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----