Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132342e3232302e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          2budKw2IkSixocH1+rmdfeuhZYdMLEevPs5gxLn3GAo=
Subject key identifier:   EB:4C:B9:28:1D:19:19:11:55:0D:C2:D1:60:43:67:95:D5:39:FB:28
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       39D8847AD678AC5518C4E3A5F529DBE7B008EC60
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:11 +0000
ROA not before:           Tue 27 Apr 2021 15:41:11 +0000
ROA not after:            Wed 27 Apr 2022 15:46:11 +0000
asID:                     17995
IP address blocks:        103.124.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:84:7a:d6:78:ac:55:18:c4:e3:a5:f5:29:db:e7:b0:08:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:11 2021 GMT
            Not After : Apr 27 15:46:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:c2:0f:83:bb:69:14:15:c3:fa:8b:3d:33:
                    1f:eb:a7:23:30:1e:32:de:b1:8d:46:13:cc:16:14:
                    d8:e0:4a:a4:d9:16:07:82:3f:7e:f3:1c:ad:8d:a5:
                    4b:ef:38:02:fb:38:4c:be:74:63:73:f7:d4:84:53:
                    6d:00:60:c4:07:66:89:b6:c5:5c:9f:1b:d7:cd:d3:
                    d2:90:39:0b:4b:ac:ca:9c:e8:bc:9a:82:8d:7d:5b:
                    6b:9b:a0:56:0b:24:ac:88:cb:f8:ce:bf:ba:87:ef:
                    5b:fd:9b:07:a2:8d:b9:64:8b:3a:c4:a4:0a:00:fe:
                    65:1e:e6:2c:2a:48:e2:28:20:72:b8:cb:c3:c1:65:
                    e4:a4:9c:5f:d1:04:82:57:48:02:f7:ff:98:40:71:
                    25:8d:5e:6b:0f:5a:e2:43:99:96:ac:4f:27:67:78:
                    4b:3b:21:b6:c4:b1:bf:19:b9:6a:46:d4:cf:0e:50:
                    6a:f6:c2:45:29:0f:08:f7:df:fc:c7:f2:76:02:0e:
                    70:9b:c0:a1:1c:38:b3:3b:77:c0:88:69:07:0a:85:
                    92:96:1a:7a:69:13:a3:e4:22:74:09:0d:97:89:a6:
                    31:fe:09:3a:10:14:f7:32:4a:fd:33:07:2c:14:eb:
                    f8:76:52:6f:2b:64:7e:da:46:39:9e:12:66:cc:2b:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:B9:28:1D:19:19:11:55:0D:C2:D1:60:43:67:95:D5:39:FB:28
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232302e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:22:ee:23:10:a9:ca:f9:87:54:a6:59:d3:d6:1f:f9:a7:
         ef:4e:70:23:78:95:ee:d0:04:3d:24:a8:b8:c8:69:aa:7f:90:
         5e:30:ea:38:fd:74:e1:c6:d8:75:43:51:40:f9:47:5d:26:99:
         bc:7b:62:88:56:31:85:30:e8:d0:d3:6b:aa:4a:cf:3e:62:f2:
         aa:e8:cf:54:5b:f3:dc:31:af:14:8c:5d:be:1f:88:b6:25:08:
         c7:8c:ac:2d:3b:7b:1c:00:15:da:20:55:72:f4:33:3a:56:aa:
         7c:fd:1f:c6:4d:7f:ef:23:8e:fa:9d:73:75:3f:ed:60:95:de:
         b7:65:99:73:1b:c8:23:5e:5a:2f:26:23:68:4e:c3:ec:c3:aa:
         2a:75:6d:2c:69:6e:ff:41:83:13:31:37:d4:70:60:76:8d:7a:
         9c:05:04:d5:f6:1c:b9:49:0b:0d:58:c1:57:e4:56:f0:30:65:
         08:87:b8:92:f0:5e:21:02:52:01:2a:9a:51:9d:35:68:7d:60:
         cd:96:67:02:1b:a5:85:ba:06:00:29:7f:ba:0c:97:ae:e1:d5:
         03:31:5c:e1:cc:5e:1c:b1:02:b7:4d:d7:7a:d6:22:1e:fb:51:
         e6:f1:ce:23:1e:12:2c:25:67:10:9d:ca:69:f6:d5:a9:c5:4c:
         eb:fa:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----