Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e203137393935.roa
File:                     3130332e3132342e3232382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          dd2dNtb4gPDHiQwIYm0Ih2F15DHylXGfN+7/RF8AFIo=
Subject key identifier:   AE:11:E2:B8:46:67:2B:52:9B:06:D2:3C:B8:87:25:45:95:64:F9:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       322815E4CE9AA60562C47B819C15009F5A148B69
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e203137393935.roa
Signing time:             Tue 27 Apr 2021 15:46:11 +0000
ROA not before:           Tue 27 Apr 2021 15:41:11 +0000
ROA not after:            Wed 27 Apr 2022 15:46:11 +0000
asID:                     17995
IP address blocks:        103.124.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:28:15:e4:ce:9a:a6:05:62:c4:7b:81:9c:15:00:9f:5a:14:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 27 15:41:11 2021 GMT
            Not After : Apr 27 15:46:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:7e:cb:58:54:3a:9a:98:d4:77:ee:49:8f:
                    fd:97:13:c3:6c:76:32:42:72:f4:2e:36:0a:e9:38:
                    8b:e7:7f:7b:02:d2:f4:0a:59:bd:6d:62:4c:e8:ab:
                    a3:27:ff:df:91:e0:fb:9a:96:39:ff:1c:d8:b3:49:
                    b9:dd:60:b8:75:2f:e2:a6:f9:e9:f9:4c:21:16:ae:
                    0f:1a:a9:14:58:2c:a1:57:11:45:3d:88:4c:30:7e:
                    aa:e0:fb:04:22:53:99:a7:ba:e8:d7:39:d1:85:2c:
                    50:89:f7:4e:09:fc:cc:46:fc:08:84:aa:10:22:ef:
                    35:d2:ee:27:da:fa:eb:5b:f6:8c:93:56:f1:82:c3:
                    35:56:9c:be:87:fc:78:31:c3:88:be:12:28:cb:00:
                    7a:a0:53:14:0e:f2:3d:72:37:e8:bf:a6:53:08:19:
                    0e:4d:79:a7:b9:9b:88:5f:8e:96:98:69:16:e7:48:
                    4d:5d:03:20:a1:37:2f:8d:76:94:8c:ff:5e:50:b7:
                    31:e3:f1:b2:be:ca:e2:d9:cf:33:29:98:cb:33:1d:
                    10:ae:60:20:c9:43:76:59:bf:51:44:c1:9a:70:0e:
                    a0:92:4a:bc:51:12:8f:c5:14:bf:ab:8f:37:7b:a8:
                    b2:41:73:34:1e:35:b2:43:c1:56:c9:d5:a3:a2:d2:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:E2:B8:46:67:2B:52:9B:06:D2:3C:B8:87:25:45:95:64:F9:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e3232382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:85:ee:3b:71:27:1b:df:62:ea:6f:0c:c4:34:f9:a0:6f:
         7c:ed:de:03:16:91:26:31:48:dd:a2:56:7b:e1:0c:b8:e5:c8:
         49:b2:5c:90:d9:77:d3:8f:0c:66:89:4f:92:ed:b2:9c:9d:91:
         67:76:9d:f4:86:5f:29:b7:fb:06:ac:86:af:3d:1e:a0:9b:96:
         14:48:8f:2f:5b:47:05:df:b1:50:fe:6d:0c:73:41:96:a7:9b:
         1b:fa:04:ae:38:2a:71:95:be:44:ea:e4:ab:32:c4:96:05:0f:
         ec:d0:0d:04:55:47:72:29:6d:bb:02:6a:03:76:d7:99:d7:a5:
         14:35:c6:59:f0:51:57:94:fb:79:b7:e5:2b:29:2e:7c:7f:cd:
         f5:b1:7e:80:32:2e:d8:7f:30:d1:24:99:31:5a:e4:6b:6c:b1:
         f6:9e:98:5f:33:24:96:50:86:e6:3a:94:0d:af:37:35:4c:7d:
         0b:aa:8a:31:12:35:d6:93:30:b2:2c:66:5e:9f:1c:87:29:b2:
         1c:2e:0d:0d:93:ff:8c:82:49:1d:b5:8f:11:48:6d:d4:a1:34:
         0a:09:db:31:c7:37:98:6f:94:4d:5c:6f:cf:3e:13:0c:c5:69:
         13:dd:6d:4c:68:2b:82:60:92:1d:2a:55:5f:ee:18:d5:28:4a:
         c5:3a:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----