Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f3234203d3e20313331313131.roa
File:                     3130332e3132332e37312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          P9lEC+kV5wMnWAH9zEiR3FjarSdMkGXFTtQDdQ3s4lQ=
Subject key identifier:   A9:D3:A5:84:29:ED:85:C3:11:7C:E2:25:2F:D9:08:02:AB:C6:5D:23
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67AD7B0758BFAE16D850D5D1A32F02D1E639855B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:01 +0000
ROA not before:           Sat 12 Feb 2022 00:55:01 +0000
ROA not after:            Sun 12 Feb 2023 01:00:01 +0000
asID:                     131111
IP address blocks:        103.123.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ad:7b:07:58:bf:ae:16:d8:50:d5:d1:a3:2f:02:d1:e6:39:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:01 2022 GMT
            Not After : Feb 12 01:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:4b:9d:ce:46:4e:0c:c0:06:ba:0d:0d:e6:
                    7a:79:4d:21:8c:0b:c2:62:c2:97:fa:7b:b2:e5:e3:
                    a4:a8:35:e9:f0:34:8a:51:e9:50:ca:a4:4f:1b:c8:
                    8e:ef:fb:f5:1f:bc:d5:2d:4f:82:32:a2:f4:41:96:
                    1c:fd:a3:40:df:ce:c0:c0:a3:22:00:dc:86:c4:99:
                    c9:d7:87:f5:c8:96:72:3e:20:32:c3:27:b7:c1:ac:
                    27:31:19:c5:f6:c1:29:ea:ae:54:ac:f1:55:63:96:
                    54:67:08:94:05:61:1a:3d:58:ce:09:24:b4:db:19:
                    0d:66:2f:07:02:12:04:10:c4:eb:a1:74:34:6f:21:
                    d4:af:55:a0:51:30:17:69:da:fa:21:2e:3f:f2:6f:
                    d2:19:11:29:ec:40:b1:15:ac:95:b4:3a:b4:4f:9c:
                    6f:a4:51:a7:4c:9b:7e:9f:d8:ed:28:d9:80:e3:f9:
                    7a:2e:e5:11:22:e0:fc:ea:dd:ba:9d:46:b1:d8:6e:
                    ad:48:82:03:62:59:29:4c:ff:d2:86:41:50:72:ab:
                    91:08:8c:37:12:18:8d:5b:56:56:e9:64:13:b9:b9:
                    82:cf:56:47:00:ba:8f:4a:50:38:4f:ee:96:75:de:
                    a0:82:6a:2c:53:fd:df:2e:cc:2e:f5:c1:8f:e5:48:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:A5:84:29:ED:85:C3:11:7C:E2:25:2F:D9:08:02:AB:C6:5D:23
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132332e37312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:10:af:f0:33:24:be:13:7f:d7:c7:b2:e8:6f:3f:4a:e6:89:
         aa:5a:0d:80:7a:1d:5c:d6:df:6e:77:f8:3b:34:55:5f:f2:9a:
         ad:32:35:b0:73:90:5b:c5:b0:85:b1:f6:4c:a1:30:66:c2:7b:
         ed:92:51:8b:cf:f0:ea:7e:b0:48:a4:80:bc:97:48:07:07:51:
         b8:5f:04:a9:4b:7f:ef:ea:64:87:bd:a1:c7:14:24:68:2f:dd:
         1d:6f:64:9c:ad:78:4d:a3:8f:e3:dd:e2:39:75:0d:b4:83:fb:
         fa:b7:51:e6:d5:c4:7b:84:87:26:e6:6f:62:50:ca:bd:c6:31:
         28:50:a1:81:4a:ae:55:f9:6e:b2:d3:31:72:a1:4a:39:e0:e3:
         9c:57:2e:66:34:5c:ca:df:be:82:73:c5:07:b3:4c:ce:3f:68:
         98:bb:c5:97:31:1b:80:51:8e:04:9f:88:96:3c:66:a9:a4:00:
         e6:a1:b6:43:ea:01:82:b4:63:83:6c:09:16:dc:31:e1:55:78:
         7c:69:87:d1:f1:74:3e:41:c6:8d:7f:4f:44:5e:ba:0a:c9:b5:
         47:8a:f8:20:2f:78:0b:67:07:8e:f1:3b:d1:dd:a1:66:5b:ab:
         5b:0d:b9:d3:01:8f:83:3b:bc:41:4f:f7:d2:1f:7e:0a:5a:c4:
         87:c5:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----