Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e3234382e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          rOv1pu/uY1jKQ/H5Be061y3zmm+wtbsU1W/lRrcqEDw=
Subject key identifier:   85:05:72:08:90:70:9A:18:D0:5A:3A:69:FA:C6:C6:E9:54:37:F2:AD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       60B8B5785CF9A723A4CD567689F7B2F6BCCFBB53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.123.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:b5:78:5c:f9:a7:23:a4:cd:56:76:89:f7:b2:f6:bc:cf:bb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject: CN=3082010A0282010100CB91EAA65CE2B775D8B80B629E358A6D4165F5F2082548F2436E5A770CABE1C7BB90A4A15239E3CE73F74BEDC482DF61B2EC4BBD2161DD6815095E4703AF7FA6E00B450657F1F64027D6BE02DCE279DC19917737107A6C7C482D8E9E355C6420D00C35A0FEFC5D0FC77A9D38B6FA8A11D7301BCF8A503D054A65E71CEC0EF96F463F1E3BED9EAB6151D7C4B9F31FCF8D87D1BE5951548D26BBF528AE5B765F844C29E2214D812294D90B486243253858557A75705BE4BA3A12694234713EB8D8051BA93F6110832F4D10F472245D3315875D97AE8914EC52C4F2DB1A0BF003DEB487D820E91ED2DA176D9E4BBDC0F9C15C1C9C11E0DA226D3F84BF589345FFCD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:ea:a6:5c:e2:b7:75:d8:b8:0b:62:9e:35:
                    8a:6d:41:65:f5:f2:08:25:48:f2:43:6e:5a:77:0c:
                    ab:e1:c7:bb:90:a4:a1:52:39:e3:ce:73:f7:4b:ed:
                    c4:82:df:61:b2:ec:4b:bd:21:61:dd:68:15:09:5e:
                    47:03:af:7f:a6:e0:0b:45:06:57:f1:f6:40:27:d6:
                    be:02:dc:e2:79:dc:19:91:77:37:10:7a:6c:7c:48:
                    2d:8e:9e:35:5c:64:20:d0:0c:35:a0:fe:fc:5d:0f:
                    c7:7a:9d:38:b6:fa:8a:11:d7:30:1b:cf:8a:50:3d:
                    05:4a:65:e7:1c:ec:0e:f9:6f:46:3f:1e:3b:ed:9e:
                    ab:61:51:d7:c4:b9:f3:1f:cf:8d:87:d1:be:59:51:
                    54:8d:26:bb:f5:28:ae:5b:76:5f:84:4c:29:e2:21:
                    4d:81:22:94:d9:0b:48:62:43:25:38:58:55:7a:75:
                    70:5b:e4:ba:3a:12:69:42:34:71:3e:b8:d8:05:1b:
                    a9:3f:61:10:83:2f:4d:10:f4:72:24:5d:33:15:87:
                    5d:97:ae:89:14:ec:52:c4:f2:db:1a:0b:f0:03:de:
                    b4:87:d8:20:e9:1e:d2:da:17:6d:9e:4b:bd:c0:f9:
                    c1:5c:1c:9c:11:e0:da:22:6d:3f:84:bf:58:93:45:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:72:08:90:70:9A:18:D0:5A:3A:69:FA:C6:C6:E9:54:37:F2:AD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234382e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:79:85:5b:1a:9b:a6:d3:eb:95:21:d1:a1:bb:54:24:e6:38:
         f2:7f:1c:87:31:37:39:83:70:2c:7f:5b:bb:64:9a:fe:90:d2:
         66:52:56:72:3d:94:2a:3d:ea:ca:3b:e4:81:b3:95:d5:99:5d:
         50:4d:a9:69:35:2e:57:0c:8f:aa:b2:7e:93:3a:09:f1:30:ac:
         1c:a8:97:54:6b:f0:a8:97:87:d7:4a:bc:bd:d2:75:95:44:9c:
         2a:95:fa:76:06:23:b7:d9:94:83:0b:04:7f:37:d6:30:81:13:
         c1:c8:b0:5d:b1:f8:96:9e:64:82:a5:3a:8f:24:7e:65:13:ea:
         b3:7e:ec:90:c0:55:35:c4:cb:8d:e4:72:66:58:b3:ff:7b:34:
         b3:03:21:8f:b9:4e:01:46:0a:71:90:b6:66:b4:f8:d0:ff:c7:
         bb:ae:04:b8:a9:df:71:27:86:85:34:e0:7d:eb:f2:e7:d1:cc:
         9c:30:06:f6:e9:b4:38:93:9b:4a:07:33:e9:26:f0:1b:57:5a:
         d7:14:53:03:56:d6:50:23:9d:26:c0:4c:fc:a4:58:a4:27:1d:
         82:89:33:10:cb:01:84:a9:a3:19:5d:d2:e8:d0:50:3d:20:29:
         68:d8:15:9f:94:72:f6:71:03:08:0b:a3:d1:69:d1:5d:4c:01:
         62:b1:50:77
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUYLi1eFz5pyOkzVZ2ifey9rzPu1MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxMjAwMTczN1oX
DTIzMDIxMjAwMjIzN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQjkxRUFBNjVDRTJCNzc1RDhCODBCNjI5RTM1OEE2RDQxNjVGNUYyMDgy
NTQ4RjI0MzZFNUE3NzBDQUJFMUM3QkI5MEE0QTE1MjM5RTNDRTczRjc0QkVEQzQ4
MkRGNjFCMkVDNEJCRDIxNjFERDY4MTUwOTVFNDcwM0FGN0ZBNkUwMEI0NTA2NTdG
MUY2NDAyN0Q2QkUwMkRDRTI3OURDMTk5MTc3MzcxMDdBNkM3QzQ4MkQ4RTlFMzU1
QzY0MjBEMDBDMzVBMEZFRkM1RDBGQzc3QTlEMzhCNkZBOEExMUQ3MzAxQkNGOEE1
MDNEMDU0QTY1RTcxQ0VDMEVGOTZGNDYzRjFFM0JFRDlFQUI2MTUxRDdDNEI5RjMx
RkNGOEQ4N0QxQkU1OTUxNTQ4RDI2QkJGNTI4QUU1Qjc2NUY4NDRDMjlFMjIxNEQ4
MTIyOTREOTBCNDg2MjQzMjUzODU4NTU3QTc1NzA1QkU0QkEzQTEyNjk0MjM0NzEz
RUI4RDgwNTFCQTkzRjYxMTA4MzJGNEQxMEY0NzIyNDVEMzMxNTg3NUQ5N0FFODkx
NEVDNTJDNEYyREIxQTBCRjAwM0RFQjQ4N0Q4MjBFOTFFRDJEQTE3NkQ5RTRCQkRD
MEY5QzE1QzFDOUMxMUUwREEyMjZEM0Y4NEJGNTg5MzQ1RkZDRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkeqmXOK3ddi4C2KeNYpt
QWX18gglSPJDblp3DKvhx7uQpKFSOePOc/dL7cSC32Gy7Eu9IWHdaBUJXkcDr3+m
4AtFBlfx9kAn1r4C3OJ53BmRdzcQemx8SC2OnjVcZCDQDDWg/vxdD8d6nTi2+ooR
1zAbz4pQPQVKZecc7A75b0Y/HjvtnqthUdfEufMfz42H0b5ZUVSNJrv1KK5bdl+E
TCniIU2BIpTZC0hiQyU4WFV6dXBb5Lo6EmlCNHE+uNgFG6k/YRCDL00Q9HIkXTMV
h12XrokU7FLE8tsaC/AD3rSH2CDpHtLaF22eS73A+cFcHJwR4NoibT+Ev1iTRf/N
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUhQVyCJBwmhjQWjpp+sbG6VQ38q0wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMzMmUzMjM0MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne/gwDQYJ
KoZIhvcNAQELBQADggEBAEN5hVsam6bT65Uh0aG7VCTmOPJ/HIcxNzmDcCx/W7tk
mv6Q0mZSVnI9lCo96so75IGzldWZXVBNqWk1LlcMj6qyfpM6CfEwrByol1Rr8KiX
h9dKvL3SdZVEnCqV+nYGI7fZlIMLBH831jCBE8HIsF2x+JaeZIKlOo8kfmUT6rN+
7JDAVTXEy43kcmZYs/97NLMDIY+5TgFGCnGQtma0+ND/x7uuBLip33EnhoU04H3r
8ufRzJwwBvbptDiTm0oHM+km8BtXWtcUUwNW1lAjnSbATPykWKQnHYKJMxDLAYSp
oxld0ujQUD0gKWjYFZ+UcvZxAwgLo9Fp0V1MAWKxUHc=
-----END CERTIFICATE-----