Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36362e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e36362e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          T5ktB4yOpjBPc7Uy1yT3gOJQ6N0CXEFL+HMBgl9cmiY=
Subject key identifier:   02:39:A0:DA:E7:5A:E6:6F:F1:8C:C6:00:A4:83:8F:E0:01:CD:D0:18
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A4649A279AB2D94228A68980F1A2DFBBD74A4DB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36362e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.123.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:46:49:a2:79:ab:2d:94:22:8a:68:98:0f:1a:2d:fb:bd:74:a4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:83:e7:32:34:28:b2:8e:84:1f:80:78:a5:
                    7c:e3:13:33:e9:24:b4:fe:87:96:4d:b7:c9:74:32:
                    ff:ec:a3:97:3d:81:5f:4d:01:a1:a3:a7:08:25:29:
                    ea:47:97:72:ff:be:11:55:c2:26:98:65:6c:39:fc:
                    da:3d:da:ce:80:3b:7f:b5:61:96:d2:db:80:16:86:
                    1d:6a:c6:52:d8:ee:c3:34:92:a6:59:cb:f4:82:f5:
                    e9:43:5d:59:f7:1b:77:a6:4a:41:7d:c0:98:82:23:
                    15:1b:a5:52:96:35:67:ad:8f:16:b9:bc:e0:04:19:
                    2f:98:bf:02:36:9b:81:24:dd:f8:b1:d3:99:0e:92:
                    af:37:1f:ae:00:28:97:a2:bf:f3:5a:d8:09:3b:d4:
                    f0:22:cc:9f:52:e0:db:da:84:e4:db:1c:dd:6d:ec:
                    b6:24:f0:9f:00:b9:08:95:89:b5:0a:56:7b:bd:5d:
                    dc:16:f9:ed:39:af:48:e9:f9:a2:58:0e:4f:86:db:
                    1c:3b:cf:5e:3b:c6:ad:96:29:16:a1:0b:cd:9d:05:
                    f1:91:d8:e3:95:10:5f:c2:24:58:dd:33:69:b9:8d:
                    06:5a:75:a2:bd:90:c3:de:12:30:30:b6:b6:2f:46:
                    06:50:b2:6e:72:e4:37:7e:c9:3b:22:79:c5:0e:28:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:39:A0:DA:E7:5A:E6:6F:F1:8C:C6:00:A4:83:8F:E0:01:CD:D0:18
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e36362e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:96:ee:0b:37:08:b6:d1:60:54:76:53:6c:1b:ec:c2:af:12:
         3f:cd:45:7a:2c:eb:24:d1:9a:02:e9:ee:ee:20:3a:ef:09:4d:
         97:bb:53:27:b4:6a:fb:d8:a2:dc:f7:13:35:5e:23:f6:50:a1:
         0b:24:80:3b:bc:fe:78:f1:41:17:89:73:6e:51:20:90:12:c5:
         f1:3d:57:b1:51:df:5f:f1:66:21:81:ec:3a:0a:98:bb:e4:4b:
         22:d1:c7:30:ab:72:b4:6b:b2:b8:95:2d:c6:68:3d:8a:39:c4:
         09:9f:af:87:49:30:b6:04:6c:1f:fd:83:88:05:af:d0:01:4c:
         58:44:ec:8e:52:b6:f7:6d:07:bc:29:6c:f5:ad:32:d3:05:3d:
         ac:c3:bc:3e:6f:60:37:89:08:f3:a0:1a:b0:6f:0b:c8:d6:7a:
         09:b5:04:10:94:d3:cc:fd:39:e2:90:0e:c9:8e:f6:42:a2:71:
         23:85:04:d0:30:30:ab:fd:77:42:a0:d8:96:17:8c:1c:c4:b4:
         9f:7b:f5:7e:81:e2:c5:29:b5:16:14:0f:e5:aa:9a:c5:11:d2:
         d3:b9:69:01:35:a8:4b:d8:d3:56:0e:2a:cd:34:45:9a:c6:16:
         e6:1b:41:d4:47:70:97:cb:97:50:9f:78:df:98:7b:e3:7b:5d:
         90:10:fa:ae
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUCkZJonmrLZQiimiYDxot+710pNswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIyMDIxMjAwNTUwMloX
DTIzMDIxMjAxMDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEM0Y1ODNFNzMyMzQyOEIyOEU4NDFGODA3OEE1N0NFMzEzMzNFOTI0QjRG
RTg3OTY0REI3Qzk3NDMyRkZFQ0EzOTczRDgxNUY0RDAxQTFBM0E3MDgyNTI5RUE0
Nzk3NzJGRkJFMTE1NUMyMjY5ODY1NkMzOUZDREEzRERBQ0U4MDNCN0ZCNTYxOTZE
MkRCODAxNjg2MUQ2QUM2NTJEOEVFQzMzNDkyQTY1OUNCRjQ4MkY1RTk0MzVENTlG
NzFCNzdBNjRBNDE3REMwOTg4MjIzMTUxQkE1NTI5NjM1NjdBRDhGMTZCOUJDRTAw
NDE5MkY5OEJGMDIzNjlCODEyNERERjhCMUQzOTkwRTkyQUYzNzFGQUUwMDI4OTdB
MkJGRjM1QUQ4MDkzQkQ0RjAyMkNDOUY1MkUwREJEQTg0RTREQjFDREQ2REVDQjYy
NEYwOUYwMEI5MDg5NTg5QjUwQTU2N0JCRDVEREMxNkY5RUQzOUFGNDhFOUY5QTI1
ODBFNEY4NkRCMUMzQkNGNUUzQkM2QUQ5NjI5MTZBMTBCQ0Q5RDA1RjE5MUQ4RTM5
NTEwNUZDMjI0NThERDMzNjlCOThEMDY1QTc1QTJCRDkwQzNERTEyMzAzMEI2QjYy
RjQ2MDY1MEIyNkU3MkU0Mzc3RUM5M0IyMjc5QzUwRTI4QTQ4MTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9YPnMjQoso6EH4B4pXzj
EzPpJLT+h5ZNt8l0Mv/so5c9gV9NAaGjpwglKepHl3L/vhFVwiaYZWw5/No92s6A
O3+1YZbS24AWhh1qxlLY7sM0kqZZy/SC9elDXVn3G3emSkF9wJiCIxUbpVKWNWet
jxa5vOAEGS+YvwI2m4Ek3fix05kOkq83H64AKJeiv/Na2Ak71PAizJ9S4NvahOTb
HN1t7LYk8J8AuQiVibUKVnu9XdwW+e05r0jp+aJYDk+G2xw7z147xq2WKRahC82d
BfGR2OOVEF/CJFjdM2m5jQZadaK9kMPeEjAwtrYvRgZQsm5y5Dd+yTsiecUOKKSB
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUAjmg2uda5m/xjMYApIOP4AHN0BgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMyMzMyZTM2MzYyZTMwMmYzMjM0
MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne0IwDQYJKoZIhvcNAQEL
BQADggEBAAeW7gs3CLbRYFR2U2wb7MKvEj/NRXos6yTRmgLp7u4gOu8JTZe7Uye0
avvYotz3EzVeI/ZQoQskgDu8/njxQReJc25RIJASxfE9V7FR31/xZiGB7DoKmLvk
SyLRxzCrcrRrsriVLcZoPYo5xAmfr4dJMLYEbB/9g4gFr9ABTFhE7I5StvdtB7wp
bPWtMtMFPazDvD5vYDeJCPOgGrBvC8jWegm1BBCU08z9OeKQDsmO9kKicSOFBNAw
MKv9d0Kg2JYXjBzEtJ979X6B4sUptRYUD+WqmsUR0tO5aQE1qEvY01YOKs00RZrG
FuYbQdRHcJfLl1CfeN+Ye+N7XZAQ+q4=
-----END CERTIFICATE-----