Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f3234203d3e20313331313131.roa
File:                     3130332e3132342e3131352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          2pSGteBe0eRO7Td2soKeJrZAjb9v1a4W26BNNvN4mnE=
Subject key identifier:   99:E3:BD:08:6E:35:52:2A:69:B5:E3:68:D8:2B:30:BD:B8:00:4C:18
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       426953256E41BCF7937CA2AA31D44B49BD9C4B13
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f3234203d3e20313331313131.roa
Signing time:             Sat 12 Feb 2022 01:00:02 +0000
ROA not before:           Sat 12 Feb 2022 00:55:02 +0000
ROA not after:            Sun 12 Feb 2023 01:00:02 +0000
asID:                     131111
IP address blocks:        103.124.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:69:53:25:6e:41:bc:f7:93:7c:a2:aa:31:d4:4b:49:bd:9c:4b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 00:55:02 2022 GMT
            Not After : Feb 12 01:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:4f:51:09:54:ab:f2:e7:95:8c:a2:4a:20:
                    ee:be:e3:e8:a3:c4:59:2a:4d:1d:ae:fb:15:b9:60:
                    91:aa:93:f4:f7:89:15:8b:3e:6b:92:bb:ad:cc:f5:
                    b6:d1:ca:7f:ec:80:74:b8:16:a8:81:d7:d2:e7:43:
                    be:29:8d:ef:26:73:e8:be:b0:7f:25:b7:c9:b5:d2:
                    67:27:26:c9:78:82:d8:b3:65:f4:c8:f4:ba:89:1f:
                    de:1b:01:38:ae:f8:2e:ca:cd:8d:14:5b:06:83:e0:
                    37:38:49:d9:f9:5d:15:45:f0:9c:a7:5d:96:3b:94:
                    ff:c8:30:9a:cd:8e:c5:f2:20:ff:d5:39:9e:13:24:
                    ba:24:ee:47:54:87:57:19:b5:07:e5:1d:1d:29:03:
                    b2:94:e9:22:1b:70:fe:af:27:cb:df:ec:3d:3e:d1:
                    13:76:ea:e7:7f:b8:4e:be:a1:53:3f:0d:d9:30:dd:
                    02:7e:f8:70:c2:bb:72:67:bd:df:04:fb:b5:18:58:
                    71:bf:88:52:8d:1e:1f:20:81:a4:5c:00:0b:e4:52:
                    af:dd:61:c3:3e:80:7f:3a:c6:da:49:35:c4:42:d8:
                    25:94:4d:6e:f1:aa:86:9d:55:9b:ea:e5:13:97:54:
                    ee:7e:6b:e8:6b:08:60:3a:8f:be:03:30:c4:d0:e3:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:BD:08:6E:35:52:2A:69:B5:E3:68:D8:2B:30:BD:B8:00:4C:18
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3131352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:12:cb:cf:68:c7:8c:60:27:a4:0c:3d:e5:26:b0:03:e1:c7:
         74:7d:7d:1e:43:78:f4:10:a9:83:71:aa:95:ec:ff:79:43:70:
         dd:ff:c0:09:86:88:a1:52:21:77:30:53:71:d1:a5:d0:20:5b:
         40:73:f5:d6:34:fa:6b:23:b3:0e:3d:47:17:c3:5f:85:96:e6:
         2f:88:a8:63:fd:12:09:79:3b:0e:b3:37:ce:ec:29:c0:b0:1d:
         85:c2:d6:0f:be:ec:2e:5c:86:ad:45:e7:16:86:e3:f0:09:74:
         82:4b:2e:5d:c8:3c:76:09:0d:0d:1f:54:c5:3b:f3:02:26:cb:
         2b:6f:fa:32:3e:57:23:48:2a:19:15:6b:42:1f:26:fd:85:d9:
         17:7b:d8:de:da:0e:01:01:ac:c2:b6:b0:0f:ad:8b:58:7c:7e:
         6e:e7:18:98:31:55:53:63:87:6b:c1:ee:9b:76:5f:5c:fa:a5:
         2d:c4:d1:1c:b4:9b:ea:83:59:8d:8e:98:c8:f0:db:d8:58:8a:
         d5:fc:30:78:a0:8d:c1:df:fc:4d:31:19:60:78:e6:25:78:86:
         e8:ab:b0:db:bf:bd:6c:d2:7b:97:e3:e9:28:f7:1c:f8:8f:d1:
         5b:59:0b:eb:2a:69:8e:cf:29:b0:6a:04:9e:d2:5d:1e:91:2e:
         f3:c4:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----