Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3132382e302f32322d3234203d3e203535363939.roa
File:                     3130332e3130302e3132382e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          F1sUC8jxG36EEi69ZbtufgCm38K0QiN5G/6V1x13FEU=
Subject key identifier:   02:6B:EA:35:8B:C5:37:AA:38:B0:EA:22:1B:E9:DA:75:26:6F:5C:EB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4A52CAB8D628B75145B013F22D0CA01991AFA8E4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3132382e302f32322d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:01 +0000
ROA not before:           Wed 27 Oct 2021 08:55:01 +0000
ROA not after:            Thu 27 Oct 2022 09:00:01 +0000
asID:                     55699
IP address blocks:        103.100.128.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:52:ca:b8:d6:28:b7:51:45:b0:13:f2:2d:0c:a0:19:91:af:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:01 2021 GMT
            Not After : Oct 27 09:00:01 2022 GMT
        Subject: CN=3082010A02820101009DA146E9085B1E1B19A0B000B2DAB030354E0CF5F2540AECA8E3E73648A260D4B5B619F7CD8D3F558820475717B0868F9E4714E50B219AFA0C4CB09CCB961FFEB5CEC32126B9562ECF351E7CA9EF2943275F9B295425A2709DCB07E52AEE2F88477840AB550AF8CDFB776A74E23E02939086E84D01FB3EA9E32CEDCA911CC9EC0D5A1183EFE653C22E83EC70283281C3B1A024BCB1297C9348EEE83791CCB338FC2289C42A4EC79F3A46285AA07132F7933F552D773E653A23510BC63FEC4464F952B9FCDA2383324468FFA620BDCA1592A6DA6DBEE7EEEBBF47481B9DDDA29EEB3A67ACE0CDA1D55463F801D4D85205A08CBA8195BD3D8B312C813DD4CEA92D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:46:e9:08:5b:1e:1b:19:a0:b0:00:b2:da:
                    b0:30:35:4e:0c:f5:f2:54:0a:ec:a8:e3:e7:36:48:
                    a2:60:d4:b5:b6:19:f7:cd:8d:3f:55:88:20:47:57:
                    17:b0:86:8f:9e:47:14:e5:0b:21:9a:fa:0c:4c:b0:
                    9c:cb:96:1f:fe:b5:ce:c3:21:26:b9:56:2e:cf:35:
                    1e:7c:a9:ef:29:43:27:5f:9b:29:54:25:a2:70:9d:
                    cb:07:e5:2a:ee:2f:88:47:78:40:ab:55:0a:f8:cd:
                    fb:77:6a:74:e2:3e:02:93:90:86:e8:4d:01:fb:3e:
                    a9:e3:2c:ed:ca:91:1c:c9:ec:0d:5a:11:83:ef:e6:
                    53:c2:2e:83:ec:70:28:32:81:c3:b1:a0:24:bc:b1:
                    29:7c:93:48:ee:e8:37:91:cc:b3:38:fc:22:89:c4:
                    2a:4e:c7:9f:3a:46:28:5a:a0:71:32:f7:93:3f:55:
                    2d:77:3e:65:3a:23:51:0b:c6:3f:ec:44:64:f9:52:
                    b9:fc:da:23:83:32:44:68:ff:a6:20:bd:ca:15:92:
                    a6:da:6d:be:e7:ee:eb:bf:47:48:1b:9d:dd:a2:9e:
                    eb:3a:67:ac:e0:cd:a1:d5:54:63:f8:01:d4:d8:52:
                    05:a0:8c:ba:81:95:bd:3d:8b:31:2c:81:3d:d4:ce:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:EA:35:8B:C5:37:AA:38:B0:EA:22:1B:E9:DA:75:26:6F:5C:EB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3130302e3132382e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:73:69:d6:e6:71:cb:c9:0d:d5:39:79:39:21:b1:ae:25:
         7f:11:98:a7:fb:1a:e9:ba:f8:41:19:23:44:14:0a:3c:06:29:
         9a:b7:60:c9:be:9c:32:25:a0:59:26:e0:c5:9e:9f:10:05:58:
         db:fd:f8:7b:17:aa:6f:9d:7a:b4:37:54:24:df:11:f6:ed:7e:
         a2:ae:35:07:69:41:e8:12:52:1b:64:44:74:68:5b:3e:e1:10:
         74:73:16:bf:dd:d1:02:c7:a5:ef:d5:93:64:5c:54:88:d5:2c:
         f2:2a:4f:a6:9d:0d:11:a1:40:34:10:09:29:e4:6d:80:fb:fd:
         d6:29:88:71:6a:83:b4:38:f0:fc:83:cb:75:b8:39:a6:cf:ba:
         fb:44:25:d7:8d:53:56:6a:8e:c0:25:f1:98:aa:47:42:ba:57:
         96:d2:92:14:4e:a4:bc:1f:50:d4:5b:8c:cc:7f:7f:bd:a7:7c:
         61:86:22:31:4c:9c:56:3c:2e:e6:51:1f:b5:7d:74:fd:72:de:
         0d:69:b2:5d:91:14:ef:cd:1c:20:3d:87:e8:44:f5:15:bb:a9:
         b1:79:e5:80:c7:a1:e6:c7:91:36:60:b0:2a:52:94:dc:e9:82:
         27:1b:8f:84:10:00:b4:eb:9c:77:9f:2c:e7:94:35:c2:a8:51:
         03:dd:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----