Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f3234203d3e20313331313131.roa
File:                     3130332e3132322e33322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          n8tYZIhF+vbx31iO+IXqFIhmypj9Mox8i66Yxbd6tPQ=
Subject key identifier:   9A:AB:5A:9A:3D:59:11:F0:08:2A:F0:A3:C0:C6:55:75:F4:3C:D6:6F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5F6B7F037C19E5EDF476529445E4028AD4B49150
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.122.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6b:7f:03:7c:19:e5:ed:f4:76:52:94:45:e4:02:8a:d4:b4:91:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:c1:fb:9e:40:55:81:85:67:5d:08:ca:c2:
                    5f:53:39:84:7a:95:f9:5a:51:53:0c:8e:ed:af:8b:
                    3f:c3:f4:c2:64:ef:7a:27:11:ba:d0:1b:ba:2c:56:
                    b3:06:9b:15:03:ce:87:28:06:c2:92:83:12:fc:ae:
                    20:cf:f6:f4:7a:21:78:b4:24:80:4d:f5:61:4b:0d:
                    5d:f0:d6:77:d0:90:bf:8e:5f:a4:0a:79:42:ca:6a:
                    45:71:a9:14:98:36:14:91:d6:6c:f2:f4:6e:ef:19:
                    18:2a:a4:2a:0c:8f:da:91:f4:95:fe:49:45:3c:0c:
                    a2:48:4f:27:48:10:91:18:f5:e2:ba:5c:24:9c:1b:
                    cf:97:6a:55:3b:ef:89:8e:60:51:0a:dd:fd:d7:1d:
                    33:34:fc:46:77:c6:5b:c9:2c:75:82:32:5f:aa:b7:
                    18:c8:53:d8:9b:16:3f:b7:3f:b4:a8:ef:fc:85:c2:
                    ab:6a:f7:c3:5c:70:42:8a:ae:74:6e:74:37:90:30:
                    85:28:6f:04:35:96:9b:e1:33:7d:ab:c0:e0:3c:b3:
                    46:7d:da:60:f3:7b:d1:31:06:18:7c:aa:27:73:0f:
                    e3:f8:fa:17:74:1f:a7:2d:88:3c:90:bd:b0:15:14:
                    d2:0c:e9:db:8e:7c:65:e8:19:0d:83:a8:cf:b5:4e:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AB:5A:9A:3D:59:11:F0:08:2A:F0:A3:C0:C6:55:75:F4:3C:D6:6F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:32:e8:94:af:5d:a2:b3:f2:b5:33:40:2e:a5:5c:f8:4a:
         2a:6a:e9:65:56:ef:d4:48:40:6e:9c:ee:87:86:b4:42:5e:88:
         09:3e:0b:89:a4:73:2d:48:1a:9f:3a:f0:0c:84:68:92:0e:3d:
         b6:dc:04:62:00:93:23:6b:5e:c2:34:10:25:1a:88:d0:fc:fc:
         dd:03:a4:71:28:68:b5:88:26:a2:ec:1e:ee:7a:6e:0a:b2:df:
         c2:32:d2:4f:c4:c6:41:e2:0f:d3:f6:b2:bf:c6:74:28:0f:7b:
         e3:ce:45:c5:29:1c:3d:b7:24:2c:6d:f9:00:f2:eb:47:58:00:
         00:8e:0c:c2:52:e0:c4:a4:a3:ea:48:a6:e6:34:d7:16:58:63:
         ef:4e:b3:9e:48:23:0b:a8:a7:78:26:7a:7a:5b:21:e8:20:8d:
         96:cb:da:93:58:2a:8f:66:fb:f5:3d:08:c9:15:72:2b:47:eb:
         de:b7:02:01:17:eb:c5:2a:0a:b5:b9:de:39:68:49:69:ba:63:
         2b:00:20:f6:d1:fc:ce:e2:fc:0f:71:c0:3f:f9:19:a3:8d:a8:
         2a:71:ca:75:b6:0a:18:64:b0:fa:fb:84:47:8f:8e:21:1e:9a:
         de:ae:05:74:4a:70:cc:70:ec:56:eb:f8:b9:9b:74:2d:2c:cc:
         64:0d:46:7e
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUX2t/A3wZ5e30dlKUReQCitS0kVAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxMjAwNTUwMloX
DTIzMDIxMjAxMDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBRTQ4QzFGQjlFNDA1NTgxODU2NzVEMDhDQUMyNUY1MzM5ODQ3QTk1Rjk1
QTUxNTMwQzhFRURBRjhCM0ZDM0Y0QzI2NEVGN0EyNzExQkFEMDFCQkEyQzU2QjMw
NjlCMTUwM0NFODcyODA2QzI5MjgzMTJGQ0FFMjBDRkY2RjQ3QTIxNzhCNDI0ODA0
REY1NjE0QjBENURGMEQ2NzdEMDkwQkY4RTVGQTQwQTc5NDJDQTZBNDU3MUE5MTQ5
ODM2MTQ5MUQ2NkNGMkY0NkVFRjE5MTgyQUE0MkEwQzhGREE5MUY0OTVGRTQ5NDUz
QzBDQTI0ODRGMjc0ODEwOTExOEY1RTJCQTVDMjQ5QzFCQ0Y5NzZBNTUzQkVGODk4
RTYwNTEwQURERkRENzFEMzMzNEZDNDY3N0M2NUJDOTJDNzU4MjMyNUZBQUI3MThD
ODUzRDg5QjE2M0ZCNzNGQjRBOEVGRkM4NUMyQUI2QUY3QzM1QzcwNDI4QUFFNzQ2
RTc0Mzc5MDMwODUyODZGMDQzNTk2OUJFMTMzN0RBQkMwRTAzQ0IzNDY3RERBNjBG
MzdCRDEzMTA2MTg3Q0FBMjc3MzBGRTNGOEZBMTc3NDFGQTcyRDg4M0M5MEJEQjAx
NTE0RDIwQ0U5REI4RTdDNjVFODE5MEQ4M0E4Q0ZCNTRFNzRFRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSMH7nkBVgYVnXQjKwl9T
OYR6lflaUVMMju2viz/D9MJk73onEbrQG7osVrMGmxUDzocoBsKSgxL8riDP9vR6
IXi0JIBN9WFLDV3w1nfQkL+OX6QKeULKakVxqRSYNhSR1mzy9G7vGRgqpCoMj9qR
9JX+SUU8DKJITydIEJEY9eK6XCScG8+XalU774mOYFEK3f3XHTM0/EZ3xlvJLHWC
Ml+qtxjIU9ibFj+3P7So7/yFwqtq98NccEKKrnRudDeQMIUobwQ1lpvhM32rwOA8
s0Z92mDze9ExBhh8qidzD+P4+hd0H6ctiDyQvbAVFNIM6duOfGXoGQ2DqM+1TnTt
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUmqtamj1ZEfAIKvCjwMZVdfQ81m8wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMyMzIyZTMzMzIyZTMwMmYzMjM0
MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneiAwDQYJKoZIhvcNAQEL
BQADggEBACLpMuiUr12is/K1M0AupVz4Sipq6WVW79RIQG6c7oeGtEJeiAk+C4mk
cy1IGp868AyEaJIOPbbcBGIAkyNrXsI0ECUaiND8/N0DpHEoaLWIJqLsHu56bgqy
38Iy0k/ExkHiD9P2sr/GdCgPe+PORcUpHD23JCxt+QDy60dYAACODMJS4MSko+pI
puY01xZYY+9Os55IIwuop3gmenpbIeggjZbL2pNYKo9m+/U9CMkVcitH6963AgEX
68UqCrW53jloSWm6YysAIPbR/M7i/A9xwD/5GaONqCpxynW2ChhksPr7hEePjiEe
mt6uBXRKcMxw7Fbr+LmbdC0szGQNRn4=
-----END CERTIFICATE-----