Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/3130332e3130362e3134352e302f32342d3234203d3e20313337323835.roa
File:                     3130332e3130362e3134352e302f32342d3234203d3e20313337323835.roa (raw, json)
Hash identifier:          pgj+xErjYTrsSWJTN2xfnSHWN0CZUXHcaiurMwsG444=
Subject key identifier:   13:A6:FB:69:CB:59:44:F4:4B:64:E2:BD:4C:AA:F5:88:6F:B7:7D:98
Certificate issuer:       /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2
Certificate serial:       699B687C4FC4212A38145D89BFE0C3AC1716AEE4
Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/3130332e3130362e3134352e302f32342d3234203d3e20313337323835.roa
Signing time:             Sat 25 Sep 2021 22:00:45 +0000
ROA not before:           Sat 25 Sep 2021 21:55:45 +0000
ROA not after:            Sun 25 Sep 2022 22:00:45 +0000
asID:                     137285
IP address blocks:        103.106.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9b:68:7c:4f:c4:21:2a:38:14:5d:89:bf:e0:c3:ac:17:16:ae:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2
        Validity
            Not Before: Sep 25 21:55:45 2021 GMT
            Not After : Sep 25 22:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:ac:9a:7d:c3:48:4c:d7:1d:7f:36:73:91:
                    52:4c:4e:bd:84:6d:62:63:20:01:96:76:02:56:c3:
                    7f:a1:79:2e:4b:de:42:00:ec:d4:af:69:52:d6:82:
                    d1:41:71:23:b6:3f:6c:e8:c7:ca:62:4a:29:b9:9b:
                    a4:63:89:32:2d:da:7b:60:23:02:c6:3c:4d:d2:35:
                    ce:e5:5a:b7:0c:3c:16:38:1b:5c:54:0d:64:03:0b:
                    86:9d:74:84:98:ce:1c:26:49:95:0e:6e:94:b4:9f:
                    9c:b2:26:68:16:cf:dc:7b:1c:10:4d:c5:99:e0:93:
                    e4:86:20:63:b9:ac:f8:38:86:04:80:d9:65:9e:84:
                    b2:3a:d1:67:b3:32:6f:18:ca:92:be:fa:95:83:28:
                    ba:95:39:fb:73:ea:38:57:f3:35:5b:e2:16:8a:2f:
                    f7:ec:3e:61:84:1e:35:ad:cf:a2:d8:b9:aa:15:05:
                    d0:85:bb:c7:19:58:d7:d2:cb:ea:9b:bb:4e:7d:94:
                    19:19:9a:17:67:d3:19:c6:c3:0c:cf:27:25:bb:e1:
                    26:f7:22:be:8b:47:f6:74:79:5b:07:df:b3:e2:93:
                    b8:06:3b:60:68:83:48:1b:52:9d:bc:23:21:bd:0c:
                    4c:71:72:45:93:2b:c9:dc:60:f5:96:47:17:b9:12:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:FB:69:CB:59:44:F4:4B:64:E2:BD:4C:AA:F5:88:6F:B7:7D:98
            X509v3 Authority Key Identifier:
                keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/3130332e3130362e3134352e302f32342d3234203d3e20313337323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:44:34:e2:66:40:51:c3:d0:0f:a5:b4:d3:9f:07:e6:46:
         b5:91:f1:68:bf:e0:40:fd:b4:47:75:9d:54:59:55:81:82:1b:
         fc:53:38:04:ec:ad:75:5e:15:df:ad:81:d9:cc:2d:72:de:39:
         c0:99:41:c1:df:2b:56:ab:4e:2f:0a:0c:58:3f:30:0b:bb:20:
         42:36:b4:fc:1c:fb:cb:67:f7:94:89:f2:4a:82:66:a8:8a:0b:
         6b:bf:a5:03:78:8f:23:8a:9d:f9:ac:47:cd:ba:20:98:b5:4c:
         95:63:94:19:b7:df:bc:07:dc:50:27:ef:43:e6:5b:51:5a:d2:
         1c:5b:17:20:c7:aa:86:9e:24:9b:5a:34:2a:0d:80:34:4b:2f:
         57:9c:a2:0e:9b:53:09:7f:f2:d0:ce:ba:da:5a:0d:fb:0a:97:
         29:1c:f2:56:a0:e0:4e:17:cd:fb:63:42:f5:01:ae:13:2d:a3:
         a5:88:a8:68:96:5d:1f:8e:e4:8b:5d:49:c7:30:2f:cd:bb:d5:
         dd:8b:81:31:4b:eb:59:b9:e6:84:c2:8d:2f:02:f1:e4:10:53:
         3a:23:33:31:ad:5a:c0:b3:27:39:b4:9c:b8:c5:82:59:fe:47:
         f8:8c:bf:29:ef:69:77:a2:02:25:88:94:64:22:96:06:c6:ea:
         ef:e6:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----