Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e35322e302f32322d3234203d3e203633383539.roa
File:                     3130332e3131392e35322e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          w7rFMka0XcFS58AmXJaivmyMEfPvvsCmuhs1L0sF+DY=
Subject key identifier:   64:1F:57:6D:86:E2:20:44:69:D9:3F:32:D6:03:D0:C4:FA:9E:4B:D8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A937C5FAA892219B97EBBCCEC8D18BEAE51D376
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e35322e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:00 +0000
ROA not before:           Wed 10 Nov 2021 06:55:00 +0000
ROA not after:            Thu 10 Nov 2022 07:00:00 +0000
asID:                     63859
IP address blocks:        103.119.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:93:7c:5f:aa:89:22:19:b9:7e:bb:cc:ec:8d:18:be:ae:51:d3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:00 2021 GMT
            Not After : Nov 10 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:83:4c:17:28:49:72:18:45:60:75:58:e5:
                    1d:e0:9e:b5:33:05:58:76:79:5a:be:26:c1:af:d6:
                    3e:36:4e:12:f8:20:ba:7b:24:29:7d:9b:80:5e:11:
                    8c:a3:1d:d4:f8:34:3e:4b:a4:0f:6f:dd:1f:b2:4f:
                    fa:9f:7d:5c:a7:93:20:3f:50:b0:9e:35:e0:26:82:
                    a7:d8:7b:3f:0f:65:c3:e5:d4:0e:10:82:90:1e:39:
                    71:48:af:af:c9:6a:4d:e7:93:c7:66:c6:68:a7:96:
                    e8:5c:97:75:59:67:40:a6:ec:5e:a4:85:dd:21:d3:
                    d5:de:dc:75:85:28:b2:a3:5e:f7:43:45:61:ba:d6:
                    de:c4:42:0e:43:1a:a4:8b:ab:49:04:98:7f:c6:67:
                    e0:b7:62:bc:41:aa:b0:1f:e9:f7:b1:a8:99:10:28:
                    24:cf:84:96:85:1b:4f:18:78:0b:63:02:36:70:fb:
                    22:21:5d:44:39:88:d7:87:0a:0b:f6:a9:26:86:a7:
                    bb:ad:32:fa:96:d9:73:d3:96:22:de:43:32:14:3e:
                    a8:9c:b2:9e:9e:72:ef:3f:33:c0:78:d0:39:2c:bf:
                    38:5f:be:d7:b7:28:db:47:81:79:c4:3b:df:36:2a:
                    9a:12:c2:92:c6:c6:66:8f:e9:b4:40:ae:ba:0f:77:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1F:57:6D:86:E2:20:44:69:D9:3F:32:D6:03:D0:C4:FA:9E:4B:D8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e35322e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:99:eb:fa:3a:5c:3a:12:6e:9e:d3:a8:85:82:60:56:ab:d1:
         91:49:7b:bc:7d:13:4e:34:b8:b7:c6:9d:dd:a9:d7:50:56:44:
         09:50:d5:80:e1:53:3c:18:1c:b3:46:ce:36:ad:08:d5:cb:cb:
         fd:20:c9:45:55:cb:c8:85:fe:16:35:05:d7:65:61:83:d2:d9:
         f7:ed:da:b2:01:ff:c7:d5:ae:ef:cd:56:af:05:fc:87:f6:57:
         85:42:87:17:cd:df:a6:92:70:ff:7c:57:7f:08:21:74:d5:ff:
         56:3e:db:b6:ca:cb:b1:0f:20:6d:22:e4:60:68:c9:8a:d7:70:
         c5:5e:b4:cc:22:38:2b:52:fd:5b:f2:33:20:a5:21:8a:b1:cc:
         b7:64:f8:7a:c7:36:93:e5:38:e0:f9:1b:44:9a:40:22:66:31:
         6c:a2:3a:19:81:8e:fb:71:79:01:34:16:91:52:f2:b5:26:6f:
         01:9d:02:3a:e9:85:04:2c:e6:08:4f:52:9d:dc:ac:a1:f0:a0:
         8d:7b:f8:b0:7b:23:ee:85:1d:8b:7b:57:51:fb:7a:b4:7e:fe:
         0b:88:2c:a5:6b:6d:b4:1e:cd:e6:7f:a5:f7:23:ba:5c:38:39:
         92:a0:a2:2d:f0:50:f0:d9:d7:10:a2:a1:93:01:48:3e:53:b1:
         97:ec:f4:7f
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUCpN8X6qJIhm5frvM7I0Yvq5R03YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA2NTUwMFoX
DTIyMTExMDA3MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNEVGODM0QzE3Mjg0OTcyMTg0NTYwNzU1OEU1MURFMDlFQjUzMzA1NTg3
Njc5NUFCRTI2QzFBRkQ2M0UzNjRFMTJGODIwQkE3QjI0Mjk3RDlCODA1RTExOENB
MzFERDRGODM0M0U0QkE0MEY2RkREMUZCMjRGRkE5RjdENUNBNzkzMjAzRjUwQjA5
RTM1RTAyNjgyQTdEODdCM0YwRjY1QzNFNUQ0MEUxMDgyOTAxRTM5NzE0OEFGQUZD
OTZBNERFNzkzQzc2NkM2NjhBNzk2RTg1Qzk3NzU1OTY3NDBBNkVDNUVBNDg1REQy
MUQzRDVERURDNzU4NTI4QjJBMzVFRjc0MzQ1NjFCQUQ2REVDNDQyMEU0MzFBQTQ4
QkFCNDkwNDk4N0ZDNjY3RTBCNzYyQkM0MUFBQjAxRkU5RjdCMUE4OTkxMDI4MjRD
Rjg0OTY4NTFCNEYxODc4MEI2MzAyMzY3MEZCMjIyMTVENDQzOTg4RDc4NzBBMEJG
NkE5MjY4NkE3QkJBRDMyRkE5NkQ5NzNEMzk2MjJERTQzMzIxNDNFQTg5Q0IyOUU5
RTcyRUYzRjMzQzA3OEQwMzkyQ0JGMzg1RkJFRDdCNzI4REI0NzgxNzlDNDNCREYz
NjJBOUExMkMyOTJDNkM2NjY4RkU5QjQ0MEFFQkEwRjc3ODcyNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE74NMFyhJchhFYHVY5R3g
nrUzBVh2eVq+JsGv1j42ThL4ILp7JCl9m4BeEYyjHdT4ND5LpA9v3R+yT/qffVyn
kyA/ULCeNeAmgqfYez8PZcPl1A4QgpAeOXFIr6/Jak3nk8dmxminluhcl3VZZ0Cm
7F6khd0h09Xe3HWFKLKjXvdDRWG61t7EQg5DGqSLq0kEmH/GZ+C3YrxBqrAf6fex
qJkQKCTPhJaFG08YeAtjAjZw+yIhXUQ5iNeHCgv2qSaGp7utMvqW2XPTliLeQzIU
Pqicsp6ecu8/M8B40Dksvzhfvte3KNtHgXnEO982KpoSwpLGxmaP6bRArroPd4cn
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUZB9XbYbiIERp2T8y1gPQxPqeS9gwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMTM5MmUzNTMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd3NDANBgkqhkiG
9w0BAQsFAAOCAQEAdJnr+jpcOhJuntOohYJgVqvRkUl7vH0TTjS4t8ad3anXUFZE
CVDVgOFTPBgcs0bONq0I1cvL/SDJRVXLyIX+FjUF12Vhg9LZ9+3asgH/x9Wu781W
rwX8h/ZXhUKHF83fppJw/3xXfwghdNX/Vj7btsrLsQ8gbSLkYGjJitdwxV60zCI4
K1L9W/IzIKUhirHMt2T4esc2k+U44PkbRJpAImYxbKI6GYGO+3F5ATQWkVLytSZv
AZ0COumFBCzmCE9SndysofCgjXv4sHsj7oUdi3tXUft6tH7+C4gspWtttB7N5n+l
9yO6XDg5kqCiLfBQ8NnXEKKhkwFIPlOxl+z0fw==
-----END CERTIFICATE-----