Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3130302e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135312e3130302e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          5gpwgfojZuioMkWh64LlVPypWXvuvkSdDlsrJQU+JRQ=
Subject key identifier:   83:92:E0:C7:71:61:B5:64:E6:71:48:D4:83:3E:AF:F6:33:7A:61:24
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5634EA5086C317E2C2648E08AD4344DF15AA348B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3130302e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:01 +0000
ROA not before:           Fri 05 Nov 2021 16:55:01 +0000
ROA not after:            Sat 05 Nov 2022 17:00:01 +0000
asID:                     133815
IP address blocks:        103.151.100.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:34:ea:50:86:c3:17:e2:c2:64:8e:08:ad:43:44:df:15:aa:34:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:01 2021 GMT
            Not After : Nov  5 17:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:48:53:f1:ca:c4:d0:31:6b:83:55:68:6b:
                    59:ce:6f:4a:1c:ec:5f:12:ab:6d:73:c4:92:31:12:
                    7f:61:87:ed:d9:b8:a3:e5:a0:fd:99:46:cd:d5:78:
                    13:6e:96:43:03:94:28:26:a3:0f:28:69:c6:d8:47:
                    8b:2a:dc:11:2c:ba:08:b5:17:47:22:ac:c0:02:bc:
                    7f:0f:7d:7b:fe:90:01:7d:39:99:5b:3d:d7:a8:42:
                    1f:0c:ce:d2:9c:12:e6:96:a8:8e:4c:1a:3c:18:77:
                    52:8b:8b:30:f2:ce:ed:1c:93:2c:85:64:21:71:be:
                    ec:48:f9:36:2a:d8:49:a7:2f:86:5e:80:fb:97:a7:
                    d6:89:4e:ca:a2:50:23:2b:10:b6:32:83:3b:01:08:
                    24:41:12:c8:5f:72:e8:27:18:12:e1:57:c5:bf:af:
                    a3:51:b5:27:10:f7:e6:58:40:3f:d6:30:df:bc:84:
                    f2:0f:74:5e:bf:97:56:f7:a8:66:3b:85:a3:71:e7:
                    f2:c5:e0:d9:17:75:7f:7a:cc:43:34:d2:bf:50:00:
                    8c:c5:fb:17:c1:ab:aa:f9:0c:46:ae:6f:b5:15:00:
                    7d:43:e9:34:42:40:b5:0e:d1:ba:56:ab:00:25:89:
                    ca:59:59:51:23:0d:03:d8:83:a4:38:01:8f:29:55:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:E0:C7:71:61:B5:64:E6:71:48:D4:83:3E:AF:F6:33:7A:61:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3130302e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:f5:ec:6f:44:e3:ef:8f:72:b3:01:b8:17:f2:50:54:2e:
         c0:be:f7:e3:ea:52:48:d7:a7:f9:ab:b8:63:0d:99:0b:85:f6:
         31:1f:52:b4:04:22:8b:4e:18:56:10:14:0c:d7:e4:39:d9:6b:
         e6:15:0c:c2:68:c9:50:b6:fe:36:72:60:f7:f1:3e:7c:38:06:
         27:ca:c3:17:f0:24:49:20:07:af:92:b9:e0:3a:13:5e:20:67:
         b7:2b:d7:3e:78:9f:13:1b:20:26:72:e9:92:b3:f0:35:84:c7:
         a2:7d:5f:79:e9:3d:2d:3a:a6:6b:9e:c1:f7:99:10:6a:aa:1b:
         2b:56:57:e1:8a:a4:ff:58:10:a4:e8:ba:7d:3d:08:1a:cf:57:
         8e:d0:63:19:08:cb:81:d1:b9:ce:d5:c4:9d:f3:72:74:e7:7c:
         d5:bc:70:3f:d9:aa:ee:de:5b:a2:99:1a:91:c0:d1:af:34:6b:
         76:8a:2a:8f:ce:a3:34:ee:ad:c4:a8:a1:6e:66:b3:21:33:9e:
         55:91:1f:1f:c3:d1:ff:b9:97:78:15:e8:c1:af:d2:55:1f:95:
         77:c3:e9:19:0c:59:40:97:f6:a7:23:ad:34:0d:dc:e9:e1:89:
         95:2c:93:b7:77:49:e4:83:0b:ee:06:ef:d5:ca:4d:fd:6a:da:
         c9:49:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----