Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132362e302f32342d3234203d3e20313337333736.roa
File:                     3130332e3131382e3132362e302f32342d3234203d3e20313337333736.roa (raw, json)
Hash identifier:          C/X6x1iAYQxXDytd7rHMFRvZ7ivEIdXYTh43LMm4+qI=
Subject key identifier:   C9:46:E8:76:D1:64:5B:9F:17:06:78:49:85:7B:0B:A7:C4:00:5D:86
Certificate issuer:       /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
Certificate serial:       454EFA187E21DDA2F2F3A7A8EF142EBDD84BB073
Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132362e302f32342d3234203d3e20313337333736.roa
Signing time:             Fri 11 Feb 2022 09:25:56 +0000
ROA not before:           Fri 11 Feb 2022 09:20:56 +0000
ROA not after:            Sat 11 Feb 2023 09:25:56 +0000
asID:                     137376
IP address blocks:        103.118.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4e:fa:18:7e:21:dd:a2:f2:f3:a7:a8:ef:14:2e:bd:d8:4b:b0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57
        Validity
            Not Before: Feb 11 09:20:56 2022 GMT
            Not After : Feb 11 09:25:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:92:89:0c:17:85:e7:bf:92:b4:65:50:3a:
                    72:f3:e8:6e:62:d7:18:1b:86:2b:e9:e6:ba:b1:b6:
                    b7:13:38:0c:37:62:ff:b9:ec:f6:db:d6:35:25:54:
                    b6:41:6f:c3:1e:d5:7f:1f:58:41:4b:4f:b6:b8:05:
                    ea:ed:60:3e:f9:bd:35:34:f4:d7:58:b3:c7:e9:09:
                    8a:07:b0:bd:aa:3d:6c:9a:e1:6f:77:e5:1c:70:c0:
                    c7:03:7c:80:f7:91:ba:53:0a:18:7d:5e:80:c9:45:
                    38:15:4e:2b:48:69:3e:c6:27:95:39:42:8f:b0:a6:
                    06:12:02:99:04:a9:df:89:76:84:4a:99:63:cb:d6:
                    df:64:63:d8:4b:66:6d:ff:de:bf:e8:f9:d3:51:d9:
                    cf:35:6d:67:21:0b:02:12:72:42:3d:a5:7a:0f:27:
                    2e:bf:9c:2f:8d:27:10:61:1b:61:ea:ef:e6:85:b3:
                    36:6c:8e:d2:5f:39:8c:19:2d:ee:b9:b1:3c:12:4c:
                    13:6d:81:7a:a5:54:de:ee:15:b0:09:96:db:a5:42:
                    ac:99:93:61:13:5f:01:db:32:08:0f:4d:0f:1c:81:
                    b4:6c:fa:80:61:14:34:56:f6:8e:e3:fd:42:76:ab:
                    f9:bd:b2:74:8d:32:7f:f6:d6:9a:a3:6a:08:40:f7:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:46:E8:76:D1:64:5B:9F:17:06:78:49:85:7B:0B:A7:C4:00:5D:86
            X509v3 Authority Key Identifier:
                keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132362e302f32342d3234203d3e20313337333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:00:03:e3:9b:24:bf:c3:23:53:b8:5f:88:b5:8c:21:2c:bc:
         57:c3:99:a0:7a:a0:1a:e4:08:03:7d:71:b0:e0:a5:aa:98:41:
         09:13:d3:8c:b9:b1:d9:13:3a:a3:e8:54:a0:8b:c3:23:bf:58:
         78:90:4c:0f:8c:1a:10:cb:f6:9d:4d:a4:69:35:62:18:f7:23:
         e4:60:ae:10:dc:fd:dd:2f:cf:a7:9e:c8:aa:28:5c:43:2c:8c:
         8c:c3:0d:08:74:e3:1e:1a:e8:fd:40:c6:15:ba:05:ad:36:e2:
         6b:61:ae:79:0a:56:6e:28:b6:78:5c:d5:44:7a:81:09:dc:f0:
         f7:a1:b0:fe:5a:a6:d8:59:02:d4:3a:ab:e8:1d:16:02:a1:e6:
         62:1d:c8:a9:f5:5e:c3:15:d6:5c:b7:b1:28:7c:e7:b0:50:29:
         bb:f2:b3:15:3b:80:4c:7b:c3:3f:6b:cd:5a:59:8f:ed:96:c5:
         c7:03:2e:97:a6:87:08:8a:88:46:ed:36:43:c1:61:8d:c2:85:
         6a:13:5d:a3:90:24:1b:bf:8c:37:56:45:c2:be:c2:80:1a:2b:
         75:74:70:03:c3:01:89:a1:9b:4c:98:83:1f:78:ff:c8:61:19:
         1d:1f:60:91:84:36:fb:6b:5a:9c:4b:ee:15:df:ad:b7:8a:ce:
         4e:b6:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----