Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32342d3234203d3e20313336303532.roa
File:                     3130332e3134362e3230322e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          USlD/JC4gUFii65sdnHuU/BLwaJ9ztZyxi5KPLPlYds=
Subject key identifier:   73:1C:64:B1:B2:75:45:DA:9A:1A:FC:6B:A1:CC:04:09:15:C0:33:29
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       22645B63CBA52D3D8872F63B0ECC3BACA3E23806
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32342d3234203d3e20313336303532.roa
Signing time:             Sun 24 Oct 2021 04:00:00 +0000
ROA not before:           Sun 24 Oct 2021 03:55:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     136052
IP address blocks:        103.146.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:5b:63:cb:a5:2d:3d:88:72:f6:3b:0e:cc:3b:ac:a3:e2:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Oct 24 03:55:00 2021 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:77:db:54:13:1b:6c:50:ba:87:c2:9f:92:
                    7c:7a:c7:18:2d:11:54:8e:2a:69:42:c7:44:8b:bb:
                    25:f4:8e:47:a4:41:7f:57:21:b5:d6:db:84:a4:06:
                    f1:9a:dd:54:1f:c2:9f:cc:29:2b:6c:a5:35:b6:d5:
                    79:fa:d0:5b:99:de:01:38:14:39:9d:cc:ab:c8:7c:
                    22:9d:66:5c:8d:90:2d:6c:05:4b:20:c1:5a:93:e5:
                    cc:c0:49:66:a6:6d:2f:82:b8:56:f1:20:39:e2:86:
                    b1:7a:89:8a:c1:6d:5c:b7:7d:57:83:51:36:1f:4c:
                    f5:ea:4a:d3:12:49:40:21:81:a8:b5:50:30:0a:f4:
                    9e:70:5d:50:91:10:cf:25:27:d5:c3:7a:fe:18:05:
                    47:50:fe:22:99:95:0b:30:ae:95:10:dd:9e:2d:2a:
                    ca:ac:e9:98:51:88:1b:6a:8b:6e:a3:86:21:e0:b8:
                    cb:0e:86:3d:1b:3c:8a:5b:c0:a5:9b:c0:9b:cb:69:
                    dd:9a:32:09:8d:49:9d:d6:f5:7b:93:58:ad:0c:43:
                    1d:b3:35:7e:22:82:d7:d8:e1:24:14:9a:2c:38:2f:
                    24:e9:28:b9:38:e4:fe:92:1c:18:56:18:52:89:05:
                    53:90:c0:0a:9b:e5:ee:ce:23:63:69:c7:f9:a3:78:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:64:B1:B2:75:45:DA:9A:1A:FC:6B:A1:CC:04:09:15:C0:33:29
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:98:d6:f5:90:3a:08:1a:60:3f:bd:51:ef:cf:99:c8:1f:3a:
         c7:3b:d5:81:59:be:45:8d:c3:cd:e9:a4:58:33:e2:70:79:1c:
         58:9f:95:e9:49:3c:c9:2a:68:f1:f1:25:02:a3:b4:e2:9d:23:
         bc:f1:36:76:e9:ef:bf:92:68:d7:94:b4:6d:b7:87:9d:83:b7:
         26:8e:b9:78:92:9b:f9:d4:3b:11:3f:b2:ad:c0:ff:d1:69:cb:
         9e:d8:97:f2:c8:44:99:d0:5e:e9:1d:2b:dc:93:e9:0d:30:f5:
         72:67:be:5d:05:74:ae:a5:00:23:24:9e:ef:08:12:78:df:2c:
         e7:5b:15:21:c9:be:6b:aa:b4:19:3c:35:f6:64:3e:24:7e:70:
         68:b5:98:01:99:9b:b3:d5:1e:14:03:f8:6b:88:b4:16:69:22:
         3e:8f:a0:f7:f1:2e:20:dc:c4:fb:7e:d0:da:ef:f2:98:95:51:
         c1:54:5e:ce:96:0d:17:71:60:1c:8e:86:79:5f:18:71:df:4d:
         07:f2:8a:39:b4:50:0b:a6:3f:e4:18:fd:1f:35:08:79:17:97:
         69:50:e6:e3:51:3f:01:66:d3:07:de:8c:40:2a:9d:a2:23:54:
         11:8a:eb:b5:01:69:82:3f:a3:44:75:5e:e1:d1:79:dd:b0:43:
         e1:2d:4c:70
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUImRbY8ulLT2IcvY7Dsw7rKPiOAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy
NEIxRDk4MTAeFw0yMTEwMjQwMzU1MDBaFw0yMjEwMjQwNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDEzQzc3REI1NDEzMUI2QzUw
QkE4N0MyOUY5MjdDN0FDNzE4MkQxMTU0OEUyQTY5NDJDNzQ0OEJCQjI1RjQ4RTQ3
QTQ0MTdGNTcyMUI1RDZEQjg0QTQwNkYxOUFERDU0MUZDMjlGQ0MyOTJCNkNBNTM1
QjZENTc5RkFEMDVCOTlERTAxMzgxNDM5OURDQ0FCQzg3QzIyOUQ2NjVDOEQ5MDJE
NkMwNTRCMjBDMTVBOTNFNUNDQzA0OTY2QTY2RDJGODJCODU2RjEyMDM5RTI4NkIx
N0E4OThBQzE2RDVDQjc3RDU3ODM1MTM2MUY0Q0Y1RUE0QUQzMTI0OTQwMjE4MUE4
QjU1MDMwMEFGNDlFNzA1RDUwOTExMENGMjUyN0Q1QzM3QUZFMTgwNTQ3NTBGRTIy
OTk5NTBCMzBBRTk1MTBERDlFMkQyQUNBQUNFOTk4NTE4ODFCNkE4QjZFQTM4NjIx
RTBCOENCMEU4NjNEMUIzQzhBNUJDMEE1OUJDMDlCQ0I2OUREOUEzMjA5OEQ0OTlE
RDZGNTdCOTM1OEFEMEM0MzFEQjMzNTdFMjI4MkQ3RDhFMTI0MTQ5QTJDMzgyRjI0
RTkyOEI5MzhFNEZFOTIxQzE4NTYxODUyODkwNTUzOTBDMDBBOUJFNUVFQ0UyMzYz
NjlDN0Y5QTM3OEFFNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Tx321QTG2xQuofCn5J8escYLRFUjippQsdEi7sl9I5HpEF/VyG1
1tuEpAbxmt1UH8KfzCkrbKU1ttV5+tBbmd4BOBQ5ncyryHwinWZcjZAtbAVLIMFa
k+XMwElmpm0vgrhW8SA54oaxeomKwW1ct31Xg1E2H0z16krTEklAIYGotVAwCvSe
cF1QkRDPJSfVw3r+GAVHUP4imZULMK6VEN2eLSrKrOmYUYgbaotuo4Yh4LjLDoY9
GzyKW8Clm8Cby2ndmjIJjUmd1vV7k1itDEMdszV+IoLX2OEkFJosOC8k6Si5OOT+
khwYVhhSiQVTkMAKm+XuziNjacf5o3iuVQIDAQABo4ICNjCCAjIwHQYDVR0OBBYE
FHMcZLGydUXamhr8a6HMBAkVwDMpMB8GA1UdIwQYMBaAFLtp8T0s7cXzSM6hwbv2
4dwksdmBMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh
ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx
REMyNEIxRDk4MS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JCNjlGMTNE
MkNFREM1RjM0OENFQTFDMUJCRjZFMURDMjRCMUQ5ODEuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9jOGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC8z
MTMwMzMyZTMxMzQzNjJlMzIzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
MzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAZ5LKMA0GCSqGSIb3DQEBCwUAA4IBAQB5mNb1
kDoIGmA/vVHvz5nIHzrHO9WBWb5FjcPN6aRYM+JweRxYn5XpSTzJKmjx8SUCo7Ti
nSO88TZ26e+/kmjXlLRtt4edg7cmjrl4kpv51DsRP7KtwP/Racue2JfyyESZ0F7p
HSvck+kNMPVyZ75dBXSupQAjJJ7vCBJ43yznWxUhyb5rqrQZPDX2ZD4kfnBotZgB
mZuz1R4UA/hriLQWaSI+j6D38S4g3MT7ftDa7/KYlVHBVF7Olg0XcWAcjoZ5Xxhx
300H8oo5tFALpj/kGP0fNQh5F5dpUObjUT8BZtMH3oxAKp2iI1QRiuu1AWmCP6NE
dV7h0XndsEPhLUxw
-----END CERTIFICATE-----