Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3136382e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132302e3136382e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          LwaKOm1fy9dfNezQY1iC/qwJ7Yem9aPS6i05VpjsqNg=
Subject key identifier:   D7:F9:83:79:85:D3:DE:53:07:1B:B8:E6:78:7B:2F:F3:3B:7E:23:00
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46E3D205437F3C383AC2A7E578CCA7D2F34CE954
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3136382e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:00 +0000
ROA not before:           Wed 10 Nov 2021 06:55:00 +0000
ROA not after:            Thu 10 Nov 2022 07:00:00 +0000
asID:                     63859
IP address blocks:        103.120.168.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e3:d2:05:43:7f:3c:38:3a:c2:a7:e5:78:cc:a7:d2:f3:4c:e9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:00 2021 GMT
            Not After : Nov 10 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:1a:6f:39:93:ec:c0:4b:15:26:a4:9f:b2:
                    76:47:44:81:75:1a:ee:69:90:84:57:14:16:04:7a:
                    0d:a5:29:d6:8b:e6:45:c1:34:ac:d7:1c:66:f7:11:
                    d8:4e:54:24:c7:6d:d5:cf:7b:d4:39:ea:2a:54:17:
                    76:c8:06:73:c4:96:ff:71:20:d6:19:b1:93:fb:03:
                    0d:c2:9c:16:8e:61:03:3c:e4:78:6d:c0:d7:f7:5d:
                    55:a5:5f:0c:f4:45:ae:b7:12:6a:8b:ab:4a:d4:56:
                    95:02:b9:70:57:e1:39:91:d8:5e:a2:b1:64:55:c7:
                    b1:3d:4d:09:c1:0c:c8:ab:d1:43:10:e6:51:2f:e2:
                    4b:a6:ff:ae:a8:6c:ec:b9:8c:2d:03:8e:08:12:4b:
                    00:2c:b7:34:fc:b1:63:35:75:e9:71:da:31:c0:03:
                    de:5b:0d:83:4f:6c:b0:3e:c3:0f:a4:42:20:04:4e:
                    ac:d9:8d:8d:1f:a6:88:b7:28:70:4d:c4:89:6d:eb:
                    88:51:ed:92:4e:ed:30:b1:02:3a:1e:f1:24:83:35:
                    2e:eb:9c:68:38:c8:5c:a2:82:c5:e9:af:fd:f9:08:
                    14:a1:27:60:de:dc:10:4b:9b:60:94:f5:86:5c:65:
                    d3:16:e5:73:c7:ad:1e:73:c1:62:6c:8e:83:60:f8:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F9:83:79:85:D3:DE:53:07:1B:B8:E6:78:7B:2F:F3:3B:7E:23:00
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132302e3136382e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:7d:15:61:c1:61:21:2f:9a:e7:e6:64:9a:84:aa:15:2a:4b:
         77:9a:10:83:c5:cf:48:98:20:05:24:66:bf:54:d5:18:bb:28:
         9d:fc:bc:ec:cc:7b:ec:ad:4d:cf:8e:31:8f:a0:37:21:f6:e2:
         82:b9:7f:95:e3:12:b7:01:a1:05:20:9c:0f:7e:77:cc:52:61:
         a6:81:60:e6:1b:5a:4b:69:6f:18:ac:db:7f:34:f8:17:23:8c:
         cc:0f:fd:e1:47:cc:92:7e:09:95:32:5b:95:e9:39:97:00:43:
         a3:36:18:a3:02:8b:8c:83:a8:69:b2:79:e6:2a:06:e3:d9:08:
         ce:b3:62:14:73:7e:60:43:93:8c:75:65:dc:b1:58:dd:f5:77:
         ee:06:4f:99:23:45:7f:6f:42:fd:65:01:49:57:05:a4:2c:7c:
         74:c0:25:8a:eb:cb:07:32:b0:2f:3b:86:f0:02:fe:7b:e0:48:
         ec:a0:b4:77:3c:c0:92:3c:41:53:6e:c1:83:1a:72:58:9f:b4:
         e1:1b:ff:e7:46:91:38:4d:ad:e9:86:a1:ee:9b:28:26:28:d9:
         8a:f2:f1:24:c3:dc:c8:5c:60:d1:02:2d:31:27:7b:e0:c6:bc:
         d5:b3:98:cc:10:41:ba:fd:2d:95:67:c6:ac:29:7f:04:0d:a0:
         46:9b:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----