Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131352e32382e302f32322d3234203d3e203538343935.roa
File:                     3130332e3131352e32382e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          +dwXyl3ran4+zRI5p2BZYTRS6V0QykLH5FT78DW6+L4=
Subject key identifier:   60:75:9C:DA:DD:9F:02:FA:3E:91:93:A0:E2:1D:CE:3C:8A:A5:5E:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       32B2106B2479447CF7934FB7E9C17D26A7582B41
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131352e32382e302f32322d3234203d3e203538343935.roa
Signing time:             Fri 14 Jan 2022 07:52:14 +0000
ROA not before:           Fri 14 Jan 2022 07:47:14 +0000
ROA not after:            Sat 14 Jan 2023 07:52:14 +0000
asID:                     58495
IP address blocks:        103.115.28.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:10:6b:24:79:44:7c:f7:93:4f:b7:e9:c1:7d:26:a7:58:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 07:47:14 2022 GMT
            Not After : Jan 14 07:52:14 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:ec:0c:81:5d:40:c4:f8:57:c0:2e:33:8a:
                    d1:91:46:78:0a:31:7e:61:67:c8:66:ef:55:6b:62:
                    4f:26:46:1d:f9:15:a0:39:ce:95:dc:0c:d2:1f:3f:
                    23:1b:68:fe:f6:60:eb:14:4d:bc:89:d5:dc:87:86:
                    a3:8b:8b:d6:09:cd:40:d7:62:74:5b:f7:b0:6f:b6:
                    e7:4c:8c:3a:a5:6c:f8:58:b2:21:58:84:f9:35:f3:
                    86:0f:3a:97:8b:c0:d4:bc:b0:c7:80:2c:06:12:b0:
                    31:32:7b:c9:70:ce:0f:c5:47:3e:4a:2b:74:7b:e1:
                    9d:47:78:e2:dd:26:48:c0:4a:89:a6:86:cc:33:8b:
                    dd:6c:3f:8b:ba:89:5b:fd:05:e4:88:c9:4b:64:53:
                    e3:95:74:14:50:c2:07:50:1a:7d:34:bf:10:71:51:
                    35:b0:c1:49:d3:e3:c7:ab:f0:15:ca:ac:1a:a7:51:
                    c4:32:57:0f:aa:38:ce:6f:d8:3d:43:fc:60:44:1e:
                    34:bc:26:c5:c4:e2:c5:51:0b:8d:4c:7e:92:16:34:
                    71:1b:93:de:5d:f1:56:41:25:9e:37:f7:27:05:70:
                    6c:88:c5:35:12:27:f4:1d:53:20:d4:ff:4c:9c:dc:
                    36:b7:0f:80:7f:b0:3b:3e:15:5e:ba:e8:ab:59:48:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:75:9C:DA:DD:9F:02:FA:3E:91:93:A0:E2:1D:CE:3C:8A:A5:5E:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131352e32382e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:71:36:4a:51:6f:37:a3:58:40:6e:f5:9e:6b:5b:9a:9b:
         c2:0d:69:e5:6a:45:bd:ca:f5:84:7a:40:30:54:2a:f0:ad:0e:
         f6:12:ca:ff:2b:09:a2:4e:a5:e4:ce:da:f5:d6:c0:81:a1:3d:
         5c:47:3f:b1:46:bb:01:d5:31:b7:1c:a1:1a:d3:b1:9d:7a:d7:
         1a:41:27:61:e4:49:c1:77:47:e3:33:0d:93:f7:a4:ea:96:ed:
         9d:0f:fe:7d:5c:e7:8c:df:d6:1f:5d:2e:16:1f:a8:ed:30:22:
         a2:74:9f:cb:01:a8:60:d7:c3:9e:73:b1:b2:57:57:56:0f:b0:
         88:cd:eb:e9:52:f4:bf:9a:58:74:3a:0a:7b:f9:93:c8:23:8b:
         8e:70:e4:59:90:8e:b5:2c:9a:0a:b5:aa:a4:24:e0:5e:8d:db:
         a9:de:0b:a6:34:2b:56:c9:c4:24:12:47:16:f0:e2:cf:97:64:
         bf:3f:53:74:6d:ab:5c:f7:bf:96:7a:e1:f5:3e:20:fe:99:98:
         7f:dd:50:53:ed:f8:bc:9d:ca:a7:6d:13:58:39:3d:5a:e8:08:
         bf:16:92:ea:02:15:22:8a:dd:a8:62:d8:53:39:b8:3c:6e:a3:
         24:93:2f:fc:c3:ec:1f:6d:91:f1:9a:c8:54:2b:10:4d:78:6f:
         78:cf:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----