Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e3234392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          mTgXI9V4I1eahrg8+1CuQO7iBMTcetRLuFRer48d8vQ=
Subject key identifier:   72:6B:07:57:4C:E2:C8:6F:8D:61:22:06:05:84:CC:AB:7C:84:CC:2D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       057C45D5062A1BA17073BC4988AF4CD5C0DD81FA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:01 +0000
ROA not before:           Sat 12 Feb 2022 00:55:01 +0000
ROA not after:            Sun 12 Feb 2023 01:00:01 +0000
asID:                     131111
IP address blocks:        103.123.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7c:45:d5:06:2a:1b:a1:70:73:bc:49:88:af:4c:d5:c0:dd:81:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:01 2022 GMT
            Not After : Feb 12 01:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:2a:75:4e:23:30:7b:06:91:a1:ac:1e:63:
                    c6:3c:e4:d1:9e:65:06:7e:f1:59:be:9b:a7:2d:0d:
                    83:00:85:bf:a4:f4:bf:27:6c:0c:ac:26:ab:0f:64:
                    86:b1:3a:a3:67:d0:38:24:6f:d2:6e:f6:a7:1c:9c:
                    c8:58:c5:c9:63:69:40:44:cc:78:e8:df:8b:c6:02:
                    57:99:c7:35:46:e7:c2:c2:41:44:1c:10:6c:82:8e:
                    5f:b2:56:e8:20:71:60:b5:3e:62:10:3a:ff:6f:4e:
                    fc:02:c1:5f:34:a1:60:e0:d9:8f:17:ff:89:27:af:
                    f9:6d:b2:55:44:ca:89:11:48:d1:d1:f6:c2:11:56:
                    0d:c1:75:e0:38:25:a2:ff:30:1a:52:a0:16:35:3e:
                    76:2f:db:88:a6:20:1d:49:e8:9d:d8:0d:db:d4:9b:
                    9a:d9:72:a4:55:04:1e:3d:eb:cb:c3:2e:09:9b:f0:
                    07:29:00:00:09:0a:b8:24:e6:cb:b3:55:66:1f:11:
                    37:dc:78:14:13:4c:f6:9c:ed:ff:38:ca:62:43:05:
                    2f:31:20:02:78:d6:30:b2:02:58:d4:9e:0e:05:c9:
                    68:70:4b:fc:7c:be:33:36:c3:d8:43:fa:96:68:78:
                    72:df:c6:5b:93:36:c6:1c:43:c1:4c:f0:7e:ec:e1:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:07:57:4C:E2:C8:6F:8D:61:22:06:05:84:CC:AB:7C:84:CC:2D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e3234392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:21:ee:f6:56:89:15:92:a9:8c:60:33:ec:19:85:97:34:
         36:0d:f2:9b:3f:30:04:02:14:31:b9:c6:f5:10:2c:18:25:68:
         e6:68:45:e3:42:f2:1c:7e:05:6f:42:c8:4b:36:b1:0d:5f:0e:
         7d:8e:73:62:f1:ad:95:ce:ab:ac:68:27:cc:fc:ea:35:b4:3f:
         aa:f2:e7:36:a9:8d:02:04:76:82:4d:83:88:b2:b1:bd:dc:8b:
         b1:c8:31:b2:35:6e:a4:00:28:4a:9b:09:5a:3d:71:a7:79:20:
         a4:f2:d2:3a:e0:4a:69:aa:7f:94:fa:2f:15:79:04:a2:17:07:
         09:04:3e:cd:b6:92:fe:41:69:c3:ea:8b:8c:82:17:23:3d:99:
         75:c2:43:03:7b:da:96:20:5a:1d:d2:68:de:1a:21:09:8b:da:
         2f:bf:1c:97:7a:25:87:87:15:f8:19:f4:72:53:5d:e1:e8:ec:
         1c:15:35:1b:e3:3a:79:00:6e:59:39:ef:29:8a:29:15:fe:07:
         82:d9:27:53:c0:08:df:37:d0:86:11:f5:df:5b:1a:05:a0:a3:
         79:57:18:9a:66:3d:4d:fc:f1:d0:44:3e:5a:9f:90:44:72:ac:
         bb:b3:9d:28:c6:6e:8a:45:c4:d6:a9:b9:f0:d4:c2:d7:17:14:
         31:71:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----