Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31342e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135302e31342e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          Uj6N+d34jL1ndvuFb25ItTt7m4iZF0WepXO5HuLGUdA=
Subject key identifier:   3C:A5:9C:BE:D9:E2:0C:A2:A5:FB:60:45:EB:F6:F0:AB:24:77:E0:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       40EE9F917BBF1288665DCBF1609860BCE1A2B8B9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31342e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:01 +0000
ROA not before:           Fri 05 Nov 2021 16:55:01 +0000
ROA not after:            Sat 05 Nov 2022 17:00:01 +0000
asID:                     133815
IP address blocks:        103.150.14.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ee:9f:91:7b:bf:12:88:66:5d:cb:f1:60:98:60:bc:e1:a2:b8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:01 2021 GMT
            Not After : Nov  5 17:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:17:91:61:52:b0:44:a3:9c:58:a1:b0:56:
                    1d:03:23:7e:84:0a:95:80:20:db:26:0c:e2:b3:f7:
                    cc:b6:be:43:ee:fd:8f:75:9a:e2:3d:c7:02:8e:b3:
                    02:26:9b:b3:4e:d0:33:c8:b5:1a:58:59:50:8e:4c:
                    fe:42:87:f2:19:66:14:5b:4f:0f:bf:af:15:7e:2e:
                    6e:3f:7f:23:5c:2f:92:c9:d6:65:a3:4f:12:da:f6:
                    7e:89:3f:84:bc:03:99:ca:58:81:2e:e0:97:38:3f:
                    f8:21:74:80:c7:0a:45:cc:d1:5f:c7:f7:e4:2a:cd:
                    78:b9:14:f9:18:38:30:14:cb:fe:5e:0b:cf:59:53:
                    53:59:34:d8:eb:3a:90:e9:09:f6:48:9f:fa:15:d8:
                    1d:e8:75:f7:d0:e0:ff:05:59:f7:dd:47:1e:1a:11:
                    37:fc:e8:91:2b:56:80:f9:a7:2c:1a:a3:e4:3b:10:
                    5f:60:41:3c:eb:e1:a9:56:42:3a:d2:66:26:d8:08:
                    0a:52:7a:20:cc:7d:98:36:69:cd:c9:20:5b:8a:ef:
                    d6:eb:8c:9e:ff:6e:99:c1:6f:fb:de:ef:df:df:36:
                    9c:50:c0:99:34:1e:a8:01:54:92:c0:5d:0f:c7:9c:
                    31:8b:fc:9d:81:f7:ff:11:37:5b:63:3d:30:df:1b:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A5:9C:BE:D9:E2:0C:A2:A5:FB:60:45:EB:F6:F0:AB:24:77:E0:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31342e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:f5:89:91:0c:13:10:37:ee:54:f7:5a:ca:da:14:47:bd:
         b8:94:51:3e:0a:1e:4b:8c:49:d3:76:5d:50:18:a1:ea:b9:70:
         cf:c6:ea:3a:7b:2f:c3:a8:0a:82:ce:b8:62:d2:68:e5:c5:08:
         6a:63:9d:04:cb:1b:f3:52:81:19:38:38:7d:d1:4d:63:24:a1:
         b2:b5:74:80:8b:29:7a:f0:1d:a7:63:3e:5f:4d:2a:70:48:dd:
         22:59:a9:2c:bf:e3:de:b1:fd:fc:8c:4f:13:93:3b:e1:fd:1e:
         fc:a8:42:39:d9:b0:30:7a:76:b3:e3:db:0c:66:0a:ff:8c:b0:
         33:80:1d:56:6e:50:12:88:0b:22:f2:88:2c:7c:e3:74:37:76:
         fb:6a:35:3e:80:0a:74:2d:c3:e8:c0:3e:92:40:11:cf:80:08:
         12:9a:7c:dc:70:d4:6e:7a:a1:77:b0:25:da:0e:b9:0a:63:54:
         d7:6b:88:a2:e5:69:8d:89:ed:28:52:a9:75:4f:d4:98:80:e2:
         bc:4a:ad:6e:46:eb:b9:23:1b:95:96:8d:a2:51:22:dd:ff:55:
         24:66:cc:e0:81:e8:60:5e:00:59:37:53:41:ad:fa:6b:5a:13:
         26:35:e3:ba:d8:b3:bd:e8:ab:f5:17:71:a5:c4:28:40:a6:d1:
         4f:05:1b:76
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUQO6fkXu/EohmXcvxYJhgvOGiuLkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwNTE2NTUwMVoX
DTIyMTEwNTE3MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCQkVBMTc5MTYxNTJCMDQ0QTM5QzU4QTFCMDU2MUQwMzIzN0U4NDBBOTU4
MDIwREIyNjBDRTJCM0Y3Q0NCNkJFNDNFRUZEOEY3NTlBRTIzREM3MDI4RUIzMDIy
NjlCQjM0RUQwMzNDOEI1MUE1ODU5NTA4RTRDRkU0Mjg3RjIxOTY2MTQ1QjRGMEZC
RkFGMTU3RTJFNkUzRjdGMjM1QzJGOTJDOUQ2NjVBMzRGMTJEQUY2N0U4OTNGODRC
QzAzOTlDQTU4ODEyRUUwOTczODNGRjgyMTc0ODBDNzBBNDVDQ0QxNUZDN0Y3RTQy
QUNENzhCOTE0RjkxODM4MzAxNENCRkU1RTBCQ0Y1OTUzNTM1OTM0RDhFQjNBOTBF
OTA5RjY0ODlGRkExNUQ4MURFODc1RjdEMEUwRkYwNTU5RjdERDQ3MUUxQTExMzdG
Q0U4OTEyQjU2ODBGOUE3MkMxQUEzRTQzQjEwNUY2MDQxM0NFQkUxQTk1NjQyM0FE
MjY2MjZEODA4MEE1MjdBMjBDQzdEOTgzNjY5Q0RDOTIwNUI4QUVGRDZFQjhDOUVG
RjZFOTlDMTZGRkJERUVGREZERjM2OUM1MEMwOTkzNDFFQTgwMTU0OTJDMDVEMEZD
NzlDMzE4QkZDOUQ4MUY3RkYxMTM3NUI2MzNEMzBERjFCOUM2MzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76heRYVKwRKOcWKGwVh0D
I36ECpWAINsmDOKz98y2vkPu/Y91muI9xwKOswImm7NO0DPItRpYWVCOTP5Ch/IZ
ZhRbTw+/rxV+Lm4/fyNcL5LJ1mWjTxLa9n6JP4S8A5nKWIEu4Jc4P/ghdIDHCkXM
0V/H9+QqzXi5FPkYODAUy/5eC89ZU1NZNNjrOpDpCfZIn/oV2B3odffQ4P8FWffd
Rx4aETf86JErVoD5pywao+Q7EF9gQTzr4alWQjrSZibYCApSeiDMfZg2ac3JIFuK
79brjJ7/bpnBb/ve79/fNpxQwJk0HqgBVJLAXQ/HnDGL/J2B9/8RN1tjPTDfG5xj
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUPKWcvtniDKKl+2BF6/bwqyR34DswHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTMwMmUzMTM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5YOMA0GCSqG
SIb3DQEBCwUAA4IBAQCX+/WJkQwTEDfuVPdaytoUR724lFE+Ch5LjEnTdl1QGKHq
uXDPxuo6ey/DqAqCzrhi0mjlxQhqY50EyxvzUoEZODh90U1jJKGytXSAiyl68B2n
Yz5fTSpwSN0iWaksv+Pesf38jE8Tkzvh/R78qEI52bAwenaz49sMZgr/jLAzgB1W
blASiAsi8ogsfON0N3b7ajU+gAp0LcPowD6SQBHPgAgSmnzccNRueqF3sCXaDrkK
Y1TXa4ii5WmNie0oUql1T9SYgOK8Sq1uRuu5IxuVlo2iUSLd/1UkZszggehgXgBZ
N1NBrfprWhMmNeO62LO96Kv1F3GlxChAptFPBRt2
-----END CERTIFICATE-----