Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36352e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3132332e36352e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          dYeoHPObnb+SPImN24hiWe6lt6M6xXqHXQQBIdO2dXc=
Subject key identifier:   01:0C:E3:F7:67:8A:F1:2C:A8:47:C5:C7:EB:28:FF:F4:62:A9:EE:6F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4EEE947246F2F92B9132DC401CDDCAA265F056F0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36352e302f32342d3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 00:22:37 +0000
ROA not before:           Sat 12 Feb 2022 00:17:37 +0000
ROA not after:            Sun 12 Feb 2023 00:22:37 +0000
asID:                     131111
IP address blocks:        103.123.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:94:72:46:f2:f9:2b:91:32:dc:40:1c:dd:ca:a2:65:f0:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:17:37 2022 GMT
            Not After : Feb 12 00:22:37 2023 GMT
        Subject: CN=3082010A02820101009B269ABC13B4DA4744D4C7BDF5F1563128E1E6E6642792CE94A2032FF27E07F922DCD353798AFEBC24CF8153FD19EF9FA519E54D11896F43087595728A9FFF43AE988F2E1B52AA4D36B1743D2A3328CB534899DEBBE038C7FE3DA63D4850155E26FCDE563FF7FB0DCCC1A00DEA3D218E52D565FB75ACD702F41935828CC4E7B040E1B75C4D7FAE271AD04780A433F84F946EA53A9E3E14315E7B77674035B463AE00719D019878D84756E0E9F512F11A60A734D46E77BF7FC7F41C5725BA07BCAFA7C9FE38D8EB7C099B6A418AD454DDBF87EBED443EF9FF5F591E9B068A35E7B866B4E6E2699444D0D6C7E6A6D24E27C27B94B23F6BE9B58F03EB58AE0CCE590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:9a:bc:13:b4:da:47:44:d4:c7:bd:f5:f1:
                    56:31:28:e1:e6:e6:64:27:92:ce:94:a2:03:2f:f2:
                    7e:07:f9:22:dc:d3:53:79:8a:fe:bc:24:cf:81:53:
                    fd:19:ef:9f:a5:19:e5:4d:11:89:6f:43:08:75:95:
                    72:8a:9f:ff:43:ae:98:8f:2e:1b:52:aa:4d:36:b1:
                    74:3d:2a:33:28:cb:53:48:99:de:bb:e0:38:c7:fe:
                    3d:a6:3d:48:50:15:5e:26:fc:de:56:3f:f7:fb:0d:
                    cc:c1:a0:0d:ea:3d:21:8e:52:d5:65:fb:75:ac:d7:
                    02:f4:19:35:82:8c:c4:e7:b0:40:e1:b7:5c:4d:7f:
                    ae:27:1a:d0:47:80:a4:33:f8:4f:94:6e:a5:3a:9e:
                    3e:14:31:5e:7b:77:67:40:35:b4:63:ae:00:71:9d:
                    01:98:78:d8:47:56:e0:e9:f5:12:f1:1a:60:a7:34:
                    d4:6e:77:bf:7f:c7:f4:1c:57:25:ba:07:bc:af:a7:
                    c9:fe:38:d8:eb:7c:09:9b:6a:41:8a:d4:54:dd:bf:
                    87:eb:ed:44:3e:f9:ff:5f:59:1e:9b:06:8a:35:e7:
                    b8:66:b4:e6:e2:69:94:44:d0:d6:c7:e6:a6:d2:4e:
                    27:c2:7b:94:b2:3f:6b:e9:b5:8f:03:eb:58:ae:0c:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:E3:F7:67:8A:F1:2C:A8:47:C5:C7:EB:28:FF:F4:62:A9:EE:6F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36352e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:76:bb:6d:3c:ce:c4:4b:70:44:1f:12:ac:38:ee:6e:16:40:
         ba:5a:d0:9e:e5:48:d8:bd:ce:74:99:c7:54:4a:0f:ff:e9:78:
         08:4e:5f:a7:14:4b:e1:d2:e4:ae:c8:ba:b5:cd:3c:67:8b:f4:
         a7:8c:ce:99:a9:ae:db:ce:d0:41:ed:fb:89:46:22:8e:d0:bc:
         fc:40:77:d0:f1:cd:02:c1:9c:db:72:86:51:fc:43:5f:92:1c:
         5c:9e:2c:b3:2e:f9:3b:13:11:d9:44:d2:93:a1:88:af:5a:c3:
         c1:5e:80:50:a2:96:04:e6:62:6c:6e:37:6b:1f:9d:13:00:03:
         e7:fe:34:4f:71:89:a1:82:d8:f3:fb:3b:e6:4f:18:2d:90:c4:
         42:30:8b:3c:c9:73:d5:f9:e1:0d:f0:2f:3a:f2:8f:ba:1f:8f:
         cd:a4:ea:20:d1:9f:10:b5:6a:41:40:47:a6:36:f6:c6:a8:96:
         30:f2:40:0b:50:50:e3:e4:30:88:8e:1c:82:13:ea:26:52:f6:
         5d:6b:63:a3:92:46:cd:00:d9:fb:f0:47:31:14:5d:fd:35:4a:
         22:f1:9a:4a:60:34:7a:9e:fd:55:2a:f2:ee:7c:13:7a:df:6b:
         89:1d:e6:bd:bc:01:c0:97:bc:af:48:6d:f4:77:07:79:bc:50:
         d0:56:59:45
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUTu6Uckby+SuRMtxAHN3KomXwVvAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxMjAwMTczN1oX
DTIzMDIxMjAwMjIzN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDA5QjI2OUFCQzEzQjREQTQ3NDRENEM3QkRGNUYxNTYzMTI4RTFFNkU2NjQy
NzkyQ0U5NEEyMDMyRkYyN0UwN0Y5MjJEQ0QzNTM3OThBRkVCQzI0Q0Y4MTUzRkQx
OUVGOUZBNTE5RTU0RDExODk2RjQzMDg3NTk1NzI4QTlGRkY0M0FFOTg4RjJFMUI1
MkFBNEQzNkIxNzQzRDJBMzMyOENCNTM0ODk5REVCQkUwMzhDN0ZFM0RBNjNENDg1
MDE1NUUyNkZDREU1NjNGRjdGQjBEQ0NDMUEwMERFQTNEMjE4RTUyRDU2NUZCNzVB
Q0Q3MDJGNDE5MzU4MjhDQzRFN0IwNDBFMUI3NUM0RDdGQUUyNzFBRDA0NzgwQTQz
M0Y4NEY5NDZFQTUzQTlFM0UxNDMxNUU3Qjc3Njc0MDM1QjQ2M0FFMDA3MTlEMDE5
ODc4RDg0NzU2RTBFOUY1MTJGMTFBNjBBNzM0RDQ2RTc3QkY3RkM3RjQxQzU3MjVC
QTA3QkNBRkE3QzlGRTM4RDhFQjdDMDk5QjZBNDE4QUQ0NTREREJGODdFQkVENDQz
RUY5RkY1RjU5MUU5QjA2OEEzNUU3Qjg2NkI0RTZFMjY5OTQ0NEQwRDZDN0U2QTZE
MjRFMjdDMjdCOTRCMjNGNkJFOUI1OEYwM0VCNThBRTBDQ0U1OTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJpq8E7TaR0TUx7318VYx
KOHm5mQnks6UogMv8n4H+SLc01N5iv68JM+BU/0Z75+lGeVNEYlvQwh1lXKKn/9D
rpiPLhtSqk02sXQ9KjMoy1NImd674DjH/j2mPUhQFV4m/N5WP/f7DczBoA3qPSGO
UtVl+3Ws1wL0GTWCjMTnsEDht1xNf64nGtBHgKQz+E+UbqU6nj4UMV57d2dANbRj
rgBxnQGYeNhHVuDp9RLxGmCnNNRud79/x/QcVyW6B7yvp8n+ONjrfAmbakGK1FTd
v4fr7UQ++f9fWR6bBoo157hmtObiaZRE0NbH5qbSTifCe5SyP2vptY8D61iuDM5Z
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUAQzj92eK8SyoR8XH6yj/9GKp7m8wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjMzMmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3tBMA0GCSqG
SIb3DQEBCwUAA4IBAQBYdrttPM7ES3BEHxKsOO5uFkC6WtCe5UjYvc50mcdUSg//
6XgITl+nFEvh0uSuyLq1zTxni/SnjM6Zqa7bztBB7fuJRiKO0Lz8QHfQ8c0CwZzb
coZR/ENfkhxcniyzLvk7ExHZRNKToYivWsPBXoBQopYE5mJsbjdrH50TAAPn/jRP
cYmhgtjz+zvmTxgtkMRCMIs8yXPV+eEN8C868o+6H4/NpOog0Z8QtWpBQEemNvbG
qJYw8kALUFDj5DCIjhyCE+omUvZda2OjkkbNANn78EcxFF39NUoi8ZpKYDR6nv1V
KvLufBN632uJHea9vAHAl7yvSG30dwd5vFDQVllF
-----END CERTIFICATE-----