Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33352e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132322e33352e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          wXol82sR79273iuFHh/lPXwrGNGhKssDn9eBZRX0AbY=
Subject key identifier:   63:53:58:4E:DC:B1:58:6E:E8:29:87:F3:D6:8A:E9:74:40:60:9C:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CD585C6BA0F8740F78A8FE3377AA7EA3189BD17
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33352e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:35 +0000
ROA not before:           Sat 12 Feb 2022 00:17:35 +0000
ROA not after:            Sun 12 Feb 2023 00:22:35 +0000
asID:                     131111
IP address blocks:        103.122.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d5:85:c6:ba:0f:87:40:f7:8a:8f:e3:37:7a:a7:ea:31:89:bd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:35 2022 GMT
            Not After : Feb 12 00:22:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:dd:c2:93:14:b8:e6:27:f2:c5:ae:0c:48:
                    17:e9:44:32:16:88:25:49:65:95:b7:c2:2e:fd:21:
                    b5:60:4b:9e:61:67:da:bc:e1:f9:87:98:5f:ec:ce:
                    93:3c:9d:67:19:2d:1c:6e:f3:b5:bf:9e:e1:c7:e0:
                    56:80:9b:1d:f3:08:78:75:da:f5:1b:42:a9:f7:91:
                    89:68:d4:8f:4d:50:c5:a3:72:ed:32:8e:35:83:c0:
                    d7:50:9c:28:85:d3:49:31:aa:d4:8c:2d:c6:63:12:
                    37:e6:b8:08:6e:ba:5d:b0:c6:95:49:e1:30:e5:97:
                    22:04:3e:fa:82:29:84:c1:dd:6a:8e:11:ba:6b:24:
                    5c:03:f3:15:a7:ae:9b:79:36:ce:ee:a1:d6:6c:86:
                    53:b3:92:37:c0:79:c4:5a:c0:89:c5:3b:53:33:3e:
                    da:e6:b7:88:c6:5e:aa:e1:22:01:90:ad:ea:a3:ac:
                    68:ce:ef:bb:a3:44:36:22:37:ab:16:4f:af:df:5b:
                    98:7b:d8:95:ea:73:09:6d:dd:7f:f1:11:f3:a7:36:
                    44:a8:c5:ca:11:fa:4e:5f:83:2f:1a:57:8b:7c:1f:
                    06:0f:08:34:52:67:04:5e:8a:7b:03:43:44:08:83:
                    21:90:a6:4f:ad:19:6e:32:6a:ca:c8:a4:af:5c:66:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:58:4E:DC:B1:58:6E:E8:29:87:F3:D6:8A:E9:74:40:60:9C:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132322e33352e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:af:6e:2e:c4:4f:7f:a6:71:b4:c9:c2:38:55:4c:e4:e7:34:
         a9:90:83:8d:29:31:5b:0d:88:be:53:1f:24:05:b6:e5:4d:7a:
         15:58:f9:a1:28:3f:c7:98:d4:89:97:ea:e1:3c:b3:22:1e:a6:
         12:1e:8c:d3:e1:b7:3e:cf:ea:18:20:e1:de:29:91:2c:07:38:
         51:f5:b4:67:da:22:71:2d:62:a0:a0:71:d5:41:f2:da:5b:54:
         1e:a6:ec:79:06:90:7f:96:42:0b:45:13:9e:81:48:cc:c6:fc:
         e7:69:df:9f:88:a3:f6:fc:0c:75:b7:54:f6:89:b9:1b:8a:ce:
         15:42:dd:3d:2f:e9:bc:38:ea:a0:49:f7:06:df:98:f6:41:6e:
         89:fc:22:09:25:fd:ad:f4:f2:97:0a:b8:9e:7d:7c:e8:1e:16:
         ac:82:5a:f8:08:84:fb:09:c7:5a:78:fd:c0:d6:32:7f:1c:41:
         eb:ee:36:8a:0f:95:39:6c:eb:45:b2:0e:7d:b5:02:3e:99:33:
         16:2b:5d:21:b1:25:57:c4:f8:69:0b:86:6c:da:6c:40:0d:05:
         ed:2b:fb:80:98:89:30:84:47:ee:81:c3:9e:d6:ee:85:be:73:
         2a:2f:18:04:53:41:71:44:a2:d3:30:ed:a8:09:6f:5e:c7:9b:
         95:de:7f:41
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUXNWFxroPh0D3io/jN3qn6jGJvRcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxMjAwMTczNVoX
DTIzMDIxMjAwMjIzNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQjVERERDMjkzMTRCOEU2MjdGMkM1QUUwQzQ4MTdFOTQ0MzIxNjg4MjU0
OTY1OTVCN0MyMkVGRDIxQjU2MDRCOUU2MTY3REFCQ0UxRjk4Nzk4NUZFQ0NFOTMz
QzlENjcxOTJEMUM2RUYzQjVCRjlFRTFDN0UwNTY4MDlCMURGMzA4Nzg3NURBRjUx
QjQyQTlGNzkxODk2OEQ0OEY0RDUwQzVBMzcyRUQzMjhFMzU4M0MwRDc1MDlDMjg4
NUQzNDkzMUFBRDQ4QzJEQzY2MzEyMzdFNkI4MDg2RUJBNURCMEM2OTU0OUUxMzBF
NTk3MjIwNDNFRkE4MjI5ODRDMURENkE4RTExQkE2QjI0NUMwM0YzMTVBN0FFOUI3
OTM2Q0VFRUExRDY2Qzg2NTNCMzkyMzdDMDc5QzQ1QUMwODlDNTNCNTMzMzNFREFF
NkI3ODhDNjVFQUFFMTIyMDE5MEFERUFBM0FDNjhDRUVGQkJBMzQ0MzYyMjM3QUIx
NjRGQUZERjVCOTg3QkQ4OTVFQTczMDk2REREN0ZGMTExRjNBNzM2NDRBOEM1Q0Ex
MUZBNEU1RjgzMkYxQTU3OEI3QzFGMDYwRjA4MzQ1MjY3MDQ1RThBN0IwMzQzNDQw
ODgzMjE5MEE2NEZBRDE5NkUzMjZBQ0FDOEE0QUY1QzY2OUNGMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXd3CkxS45ifyxa4MSBfp
RDIWiCVJZZW3wi79IbVgS55hZ9q84fmHmF/szpM8nWcZLRxu87W/nuHH4FaAmx3z
CHh12vUbQqn3kYlo1I9NUMWjcu0yjjWDwNdQnCiF00kxqtSMLcZjEjfmuAhuul2w
xpVJ4TDllyIEPvqCKYTB3WqOEbprJFwD8xWnrpt5Ns7uodZshlOzkjfAecRawInF
O1MzPtrmt4jGXqrhIgGQreqjrGjO77ujRDYiN6sWT6/fW5h72JXqcwlt3X/xEfOn
NkSoxcoR+k5fgy8aV4t8HwYPCDRSZwReinsDQ0QIgyGQpk+tGW4yasrIpK9cZpzz
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUY1NYTtyxWG7oKYfz1orpdEBgnIgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMyMmUzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3ojMA0GCSqG
SIb3DQEBCwUAA4IBAQCUr24uxE9/pnG0ycI4VUzk5zSpkIONKTFbDYi+Ux8kBbbl
TXoVWPmhKD/HmNSJl+rhPLMiHqYSHozT4bc+z+oYIOHeKZEsBzhR9bRn2iJxLWKg
oHHVQfLaW1Qepux5BpB/lkILRROegUjMxvznad+fiKP2/Ax1t1T2ibkbis4VQt09
L+m8OOqgSfcG35j2QW6J/CIJJf2t9PKXCriefXzoHhasglr4CIT7CcdaeP3A1jJ/
HEHr7jaKD5U5bOtFsg59tQI+mTMWK10hsSVXxPhpC4Zs2mxADQXtK/uAmIkwhEfu
gcOe1u6FvnMqLxgEU0FxRKLTMO2oCW9ex5uV3n9B
-----END CERTIFICATE-----