Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231302e302f3234203d3e20313331313131.roa
File:                     3130332e3132352e3231302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          g86zmflhWt5m84zH4NWeZeSyXjLbc6XF4amxYKqAffI=
Subject key identifier:   71:F8:36:4A:EA:84:7C:72:7E:F6:8C:DC:1D:68:79:57:69:B6:A8:21
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       352AEC31F59EBD1654FE95D1285E2792942FCE88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231302e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:05 +0000
ROA not before:           Tue 29 Jun 2021 10:55:05 +0000
ROA not after:            Wed 29 Jun 2022 11:00:05 +0000
asID:                     131111
IP address blocks:        103.125.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2a:ec:31:f5:9e:bd:16:54:fe:95:d1:28:5e:27:92:94:2f:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:05 2021 GMT
            Not After : Jun 29 11:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:3d:eb:1e:40:73:44:9d:53:07:7b:2f:aa:
                    c0:c4:b8:6d:6e:bf:bb:c0:53:5c:8c:1c:ae:d6:15:
                    be:9e:53:1c:7c:53:65:67:a2:7d:f0:b8:bb:12:ea:
                    4b:73:a2:67:6b:85:5d:a7:24:cf:c0:7c:b4:07:c8:
                    88:21:74:39:7d:02:5e:48:fd:02:c4:32:23:70:7c:
                    0e:7d:de:87:95:fa:6a:f0:33:41:a1:a8:9c:8e:cf:
                    ff:f8:02:cd:d8:6a:84:ea:73:40:b1:6d:91:cf:d4:
                    a3:6c:e7:a1:62:c0:ff:43:fe:c9:88:f0:99:1a:32:
                    b4:4c:3f:14:63:dc:ef:19:31:b1:dc:6d:c4:11:3e:
                    dc:f7:a5:22:f7:bf:3c:b2:a4:2d:b7:33:6d:33:dc:
                    2d:22:89:6c:59:da:e4:e4:74:06:b9:ce:5f:b0:df:
                    d0:ef:3e:00:f8:4c:37:6e:10:7c:5a:0d:d8:8b:ef:
                    8d:25:bc:64:86:57:c9:1e:ec:dc:e3:49:5f:a9:b2:
                    50:56:3d:d0:20:cb:27:bc:d7:94:ca:03:09:52:98:
                    ab:00:ff:64:f3:87:b2:ab:b1:29:41:46:c1:40:50:
                    c9:19:9f:33:e0:21:26:02:c3:7c:f1:fa:6f:21:6f:
                    bf:32:0f:25:5b:9c:46:bb:81:21:28:5d:0f:b8:d3:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F8:36:4A:EA:84:7C:72:7E:F6:8C:DC:1D:68:79:57:69:B6:A8:21
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:1a:14:89:6f:3c:10:06:c0:18:d4:4f:32:2d:b3:85:98:
         1e:39:3c:90:d7:1d:59:1e:31:b2:c4:b3:5c:ef:8b:0b:99:43:
         96:fb:2d:01:b7:2d:85:04:40:7c:68:37:ca:c5:20:93:00:bb:
         47:c7:9a:36:e2:a0:fb:55:30:c9:a0:e3:78:dd:92:1e:9c:c5:
         ed:30:46:92:4c:9f:e3:41:00:fd:4a:68:0b:b8:58:cb:e1:14:
         f7:64:75:a0:58:02:0a:e0:31:3f:72:c1:6d:b3:98:97:b0:f2:
         27:72:12:72:b4:46:6c:fb:61:be:06:33:a8:b7:6a:23:07:f7:
         2a:78:28:11:76:e8:9d:e5:65:f6:a3:6c:54:f0:75:be:fb:ed:
         39:4d:13:26:46:c1:8e:c9:e6:d6:ad:c3:a3:1e:ab:f8:45:81:
         3e:ee:0a:50:68:fa:2a:1b:67:8c:70:c6:a1:e7:44:cc:4e:d8:
         ab:47:8f:c0:55:d2:58:01:8e:d3:32:10:14:e4:d2:a9:f9:b2:
         33:f4:48:79:ae:89:b9:94:b9:d3:70:94:87:92:7d:40:75:5f:
         b3:e1:91:58:97:a1:4f:53:62:6f:8c:cf:53:cc:39:3d:d6:61:
         ef:2d:78:76:70:cd:44:3b:68:de:13:d6:24:7a:b7:47:20:a8:
         6e:95:a1:1e
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUNSrsMfWevRZU/pXRKF4nkpQvzogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyOTEwNTUwNVoX
DTIyMDYyOTExMDAwNVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQjBEM0RFQjFFNDA3MzQ0OUQ1MzA3N0IyRkFBQzBDNEI4NkQ2RUJGQkJD
MDUzNUM4QzFDQUVENjE1QkU5RTUzMUM3QzUzNjU2N0EyN0RGMEI4QkIxMkVBNEI3
M0EyNjc2Qjg1NURBNzI0Q0ZDMDdDQjQwN0M4ODgyMTc0Mzk3RDAyNUU0OEZEMDJD
NDMyMjM3MDdDMEU3RERFODc5NUZBNkFGMDMzNDFBMUE4OUM4RUNGRkZGODAyQ0RE
ODZBODRFQTczNDBCMTZEOTFDRkQ0QTM2Q0U3QTE2MkMwRkY0M0ZFQzk4OEYwOTkx
QTMyQjQ0QzNGMTQ2M0RDRUYxOTMxQjFEQzZEQzQxMTNFRENGN0E1MjJGN0JGM0NC
MkE0MkRCNzMzNkQzM0RDMkQyMjg5NkM1OURBRTRFNDc0MDZCOUNFNUZCMERGRDBF
RjNFMDBGODRDMzc2RTEwN0M1QTBERDg4QkVGOEQyNUJDNjQ4NjU3QzkxRUVDRENF
MzQ5NUZBOUIyNTA1NjNERDAyMENCMjdCQ0Q3OTRDQTAzMDk1Mjk4QUIwMEZGNjRG
Mzg3QjJBQkIxMjk0MTQ2QzE0MDUwQzkxOTlGMzNFMDIxMjYwMkMzN0NGMUZBNkYy
MTZGQkYzMjBGMjU1QjlDNDZCQjgxMjEyODVEMEZCOEQzMzIxOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDT3rHkBzRJ1TB3svqsDE
uG1uv7vAU1yMHK7WFb6eUxx8U2Vnon3wuLsS6ktzomdrhV2nJM/AfLQHyIghdDl9
Al5I/QLEMiNwfA593oeV+mrwM0GhqJyOz//4As3YaoTqc0CxbZHP1KNs56FiwP9D
/smI8JkaMrRMPxRj3O8ZMbHcbcQRPtz3pSL3vzyypC23M20z3C0iiWxZ2uTkdAa5
zl+w39DvPgD4TDduEHxaDdiL740lvGSGV8ke7NzjSV+pslBWPdAgyye815TKAwlS
mKsA/2Tzh7KrsSlBRsFAUMkZnzPgISYCw3zx+m8hb78yDyVbnEa7gSEoXQ+40zIZ
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUcfg2SuqEfHJ+9ozcHWh5V2m2qCEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjM1MmUzMjMxMzAyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfdIwDQYJKoZIhvcN
AQELBQADggEBAB8gGhSJbzwQBsAY1E8yLbOFmB45PJDXHVkeMbLEs1zviwuZQ5b7
LQG3LYUEQHxoN8rFIJMAu0fHmjbioPtVMMmg43jdkh6cxe0wRpJMn+NBAP1KaAu4
WMvhFPdkdaBYAgrgMT9ywW2zmJew8idyEnK0Rmz7Yb4GM6i3aiMH9yp4KBF26J3l
ZfajbFTwdb777TlNEyZGwY7J5tatw6Meq/hFgT7uClBo+iobZ4xwxqHnRMxO2KtH
j8BV0lgBjtMyEBTk0qn5sjP0SHmuibmUudNwlIeSfUB1X7PhkViXoU9TYm+Mz1PM
OT3WYe8teHZwzUQ7aN4T1iR6t0cgqG6VoR4=
-----END CERTIFICATE-----