Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39312e32342e302f32322d3234203d3e20313336383235.roa
File:                     3130332e39312e32342e302f32322d3234203d3e20313336383235.roa (raw, json)
Hash identifier:          yDGZkS0oEhtjDJYow3gQZMHlYWXRWCGuMkEe/9MkQJI=
Subject key identifier:   1A:BE:2D:C4:52:FD:7B:7F:1B:60:FB:D4:07:F1:62:C4:62:BD:17:CE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       240A6D91269C270F08920007FE3BB186FB737B4F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39312e32342e302f32322d3234203d3e20313336383235.roa
Signing time:             Wed 22 Dec 2021 05:00:02 +0000
ROA not before:           Wed 22 Dec 2021 04:55:02 +0000
ROA not after:            Thu 22 Dec 2022 05:00:02 +0000
asID:                     136825
IP address blocks:        103.91.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:6d:91:26:9c:27:0f:08:92:00:07:fe:3b:b1:86:fb:73:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 22 04:55:02 2021 GMT
            Not After : Dec 22 05:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:e8:76:c3:cf:cf:27:6f:54:a1:05:38:01:
                    45:ac:fc:bf:c6:e3:77:5a:a5:c4:07:f2:4a:d0:e2:
                    34:87:41:1c:04:e5:a3:57:cf:35:37:e2:92:27:b1:
                    e9:92:a0:83:b2:66:9b:4c:24:88:2a:31:23:1d:a6:
                    99:7e:a8:be:18:a8:38:e3:f1:a0:1e:82:7e:e1:bf:
                    dc:31:03:08:e4:75:9b:79:c4:eb:5c:f7:4b:ad:86:
                    6d:68:de:c8:f7:a2:24:95:b0:f5:f9:78:ec:cd:07:
                    86:50:23:d6:58:2a:4f:59:f0:24:54:24:92:9e:6a:
                    95:3b:05:b0:1a:47:ef:98:53:c0:ed:53:20:3a:9a:
                    1b:03:ab:c7:1d:df:21:50:4b:59:e1:68:39:be:0a:
                    53:80:a4:36:17:c4:33:b1:f8:76:7d:40:54:b4:48:
                    ec:5c:6a:2b:c8:05:25:96:b3:05:b2:be:a6:88:f2:
                    00:7a:80:a2:50:ce:71:e6:65:ce:f6:91:d8:e2:72:
                    cf:2b:ef:7a:8d:5a:62:6a:79:c4:81:47:60:bf:c9:
                    65:16:8e:71:62:1b:06:4f:39:a3:bc:af:54:fa:5e:
                    3c:bc:e3:c1:dd:93:45:29:c4:b6:e8:32:28:a6:12:
                    d3:fb:80:cd:ec:09:b0:a5:91:07:93:52:d3:c6:96:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:2D:C4:52:FD:7B:7F:1B:60:FB:D4:07:F1:62:C4:62:BD:17:CE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e39312e32342e302f32322d3234203d3e20313336383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:5c:de:13:c0:14:00:59:6f:0b:1b:a0:08:b1:57:81:63:
         c3:95:8c:ee:29:c8:db:86:a6:2f:53:5e:28:22:39:2a:e1:2a:
         a1:87:bd:e0:7c:9e:77:e3:09:d9:fa:da:8c:5e:11:9b:7c:82:
         77:18:4a:e6:e0:5d:d6:08:43:46:ff:f2:5c:df:8f:58:52:00:
         d6:15:16:48:bf:fd:9b:fb:92:b4:f5:8c:db:c8:47:13:4e:d2:
         14:ae:5d:25:aa:2c:cf:f5:1b:fd:c5:94:d4:96:2d:50:74:1b:
         49:f4:1c:12:61:b9:0e:0c:04:13:f7:91:06:7d:cd:71:5b:f9:
         10:a7:43:89:5e:6d:15:d9:c0:84:cc:72:12:8a:d5:54:17:ff:
         00:70:f6:cd:1b:33:af:91:32:79:9a:1f:23:b9:08:7d:ee:34:
         a3:98:6c:ae:12:9e:1d:83:8c:5e:13:2e:38:2d:06:95:ba:2f:
         94:3e:94:57:f1:86:b0:80:8c:6c:23:90:b3:c4:3c:e3:ec:f8:
         ee:2a:ee:8a:93:26:cb:17:94:1a:71:0e:12:f6:7d:36:1c:f5:
         4d:90:03:2d:9e:8c:94:33:23:2d:5a:fb:ba:a5:8e:8e:d3:c9:
         83:39:05:f0:c3:1f:68:5c:4f:f7:32:59:85:ab:0c:29:71:80:
         df:13:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----