Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313437313639.roa
File:                     3130332e3137372e3130362e302f32342d3234203d3e20313437313639.roa (raw, json)
Hash identifier:          ycBL5R8ofArEOjbUvGqn7eD9rwo6HtK4hwLl63hYquE=
Subject key identifier:   DB:4B:98:6B:B2:87:7B:FD:CD:47:D9:4E:75:9D:7C:39:52:51:7C:B9
Certificate issuer:       /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial:       06C23E94B394A85267DA1EDA61D73B8A3F115AD1
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313437313639.roa
Signing time:             Sat 12 Feb 2022 13:38:30 +0000
ROA not before:           Sat 12 Feb 2022 13:33:30 +0000
ROA not after:            Sun 12 Feb 2023 13:38:30 +0000
asID:                     147169
IP address blocks:        103.177.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c2:3e:94:b3:94:a8:52:67:da:1e:da:61:d7:3b:8a:3f:11:5a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
        Validity
            Not Before: Feb 12 13:33:30 2022 GMT
            Not After : Feb 12 13:38:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:53:e4:de:63:d2:1f:5e:b7:76:21:90:bc:10:
                    15:61:e1:cc:77:8e:f2:f2:cf:fe:85:51:31:64:19:
                    a0:c0:8d:21:1e:38:d2:b4:8a:04:6d:ec:3f:67:b4:
                    53:3b:f3:48:c3:5f:5b:c3:2b:58:e6:c8:bc:62:21:
                    a9:0d:fa:c1:02:be:55:1b:d1:3e:e8:76:07:a9:a1:
                    34:d0:3f:58:1d:da:a4:fc:37:63:89:57:d6:08:ec:
                    ea:2d:ba:27:cf:f7:10:5f:9b:e8:d9:df:6d:34:d5:
                    50:d6:e7:f7:d5:85:5c:eb:70:13:ac:42:76:92:8b:
                    c9:e4:a1:bd:c2:3d:2c:0d:02:ea:1c:77:a6:c2:24:
                    90:22:01:43:bf:f0:2a:07:6e:0e:16:ed:f6:0d:be:
                    dc:12:2f:4b:d4:b7:b6:8d:ff:3d:e5:d2:51:4a:40:
                    ac:8c:5c:83:f6:08:bf:cf:c5:2d:de:00:64:d4:c4:
                    f9:b5:2a:ab:75:b3:53:35:b6:cc:2b:bd:7d:9f:ed:
                    88:09:00:e2:78:0b:89:53:de:7a:eb:3e:24:17:de:
                    14:d0:eb:f3:98:87:1a:a7:0b:30:69:a9:f5:b1:1a:
                    5a:78:b5:49:ee:1a:60:31:38:b6:4c:81:db:27:5b:
                    be:84:a7:3b:3d:94:cb:81:c7:dd:1d:ae:aa:b9:9c:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:98:6B:B2:87:7B:FD:CD:47:D9:4E:75:9D:7C:39:52:51:7C:B9
            X509v3 Authority Key Identifier:
                keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313437313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:e4:56:70:b5:48:81:ac:db:02:8a:81:13:a7:85:c5:92:
         b7:6f:3e:c8:2b:b2:a0:7c:e9:b0:56:57:5f:3e:9d:b3:1c:00:
         65:de:7a:d8:40:56:4a:bc:99:b0:57:87:a1:e2:02:dd:63:ea:
         1c:7b:64:4c:f6:7e:df:fb:a3:b8:84:27:1d:19:7f:3b:ec:a8:
         36:7f:59:3a:26:53:18:80:2d:0b:28:1f:4d:6f:68:ed:82:6e:
         ed:a8:3e:68:b5:87:b3:06:36:36:a2:73:61:fd:fd:38:a3:ea:
         6f:60:70:51:2d:bd:d4:ee:0b:ba:d8:e5:9a:dc:69:f9:59:91:
         fc:34:63:f9:1b:d9:39:8b:c7:f7:02:38:06:96:a7:f7:64:d7:
         80:26:7f:e4:1f:24:19:ce:ab:9d:99:89:d2:4e:e9:47:7b:14:
         73:1c:97:7b:20:cc:e8:a0:95:47:e2:86:1a:a7:7f:5c:f2:32:
         69:03:98:87:f4:f5:8d:2d:d0:9d:6b:7b:39:6a:72:b8:86:4b:
         5d:43:7a:66:ff:94:c1:ef:80:1e:05:6c:ec:15:9f:be:8e:59:
         38:f0:b0:b0:ca:d5:6f:7e:6d:97:f9:9f:b5:a3:51:ef:d3:fd:
         53:c0:f8:72:34:d0:7b:68:f5:27:c8:a1:10:de:eb:73:32:81:
         14:ae:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----