Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3138362e302f32332d3234203d3e203338353035.roa
File:                     3130332e31312e3138362e302f32332d3234203d3e203338353035.roa (raw, json)
Hash identifier:          OpYd1OyPpT/QfaS4PhlQHHTtW3v4d8c4oMxyWxTwIGk=
Subject key identifier:   B6:C3:9B:97:A3:67:4D:09:32:56:02:83:C7:93:27:4E:81:EC:D9:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B09298C08A058A2155D85EC342B77620EE7EB39
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3138362e302f32332d3234203d3e203338353035.roa
Signing time:             Fri 10 Dec 2021 00:54:55 +0000
ROA not before:           Fri 10 Dec 2021 00:49:55 +0000
ROA not after:            Sat 10 Dec 2022 00:54:55 +0000
asID:                     38505
IP address blocks:        103.11.186.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:09:29:8c:08:a0:58:a2:15:5d:85:ec:34:2b:77:62:0e:e7:eb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 10 00:49:55 2021 GMT
            Not After : Dec 10 00:54:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:ce:f9:02:8b:51:83:4b:8c:39:1d:74:e1:
                    bf:df:e7:6b:7d:fe:76:a5:53:eb:f7:9d:3b:af:aa:
                    29:a0:d2:a7:aa:67:da:51:08:66:72:22:cf:82:28:
                    d2:5b:12:96:e5:68:f3:55:2f:33:78:52:f9:0d:ff:
                    c6:dc:d9:9b:2f:a4:0f:bf:2e:89:bd:5d:08:24:51:
                    8d:91:79:9c:97:37:85:1a:b0:ad:bd:28:e0:37:37:
                    cf:3a:ed:e9:42:8f:e1:c1:98:16:a0:a8:8d:ca:ea:
                    b7:95:0e:25:af:de:58:bf:c3:c1:9b:2e:4c:e4:e5:
                    88:80:7e:a0:93:03:b5:4b:e1:5f:4e:b5:58:0f:2d:
                    87:b8:c9:05:4c:20:76:63:77:45:21:cb:bd:09:c0:
                    07:b8:aa:85:1d:8a:08:56:85:d7:65:37:59:e6:64:
                    3b:cf:bc:2b:8e:32:ce:c0:d3:59:ee:0e:c9:a7:56:
                    af:7e:48:46:b3:8c:46:63:78:15:f6:0c:cc:17:e4:
                    12:cf:d6:93:36:30:e9:d6:31:5b:22:c2:6b:e5:43:
                    b0:a7:05:88:8f:df:98:24:fc:1f:83:b4:0b:fb:b7:
                    90:66:1f:ef:d5:b5:e9:11:b5:5e:e9:47:73:67:d8:
                    a3:7e:bc:93:7c:b6:a1:82:8e:ae:f4:52:f1:28:fb:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:9B:97:A3:67:4D:09:32:56:02:83:C7:93:27:4E:81:EC:D9:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e31312e3138362e302f32332d3234203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:63:90:3d:ab:0a:fb:ca:75:e1:f7:04:16:74:21:97:c4:
         89:24:83:ce:1a:4d:31:64:8a:c5:c1:7c:82:3e:fd:25:5a:9d:
         0e:37:82:55:f8:ad:c5:31:51:eb:2d:5c:03:b3:74:d1:80:69:
         67:4a:bb:14:19:2c:28:db:c5:95:61:f3:0e:57:7d:19:61:af:
         d0:b9:93:d2:29:fd:d0:7b:5b:a6:48:31:37:92:57:62:23:0f:
         93:bb:4d:98:80:a5:11:99:3a:f2:7d:e9:59:d4:44:ab:be:92:
         2f:66:72:16:1a:4b:99:dd:1c:14:6f:bb:e3:38:26:be:0d:29:
         8a:4c:03:a2:9d:f5:a6:9a:1c:c0:03:45:be:d3:22:97:39:fe:
         34:76:15:71:3c:90:5b:6b:1c:9d:7d:a6:98:40:0e:b4:45:73:
         f6:ba:c9:d5:31:4c:55:a4:6e:b2:43:d0:c7:ea:2d:db:b5:c1:
         b0:a9:38:49:7c:78:09:57:65:6c:92:74:34:32:63:b3:29:b4:
         81:b5:ef:6e:31:da:c2:7d:47:97:7b:ba:04:4d:be:75:29:a0:
         e6:1b:b4:24:b1:7c:0f:c7:65:55:28:ee:63:21:4f:3b:1d:4e:
         97:77:64:25:aa:68:63:b6:71:1c:43:24:54:e6:72:6a:27:ae:
         dc:07:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----