Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231312e302f3234203d3e20313331313131.roa
File:                     3130332e3132352e3231312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          9qtnbCikdcEPcOpUDKUkKZJKZoHLgI4zxba1Ri5dyMk=
Subject key identifier:   87:C5:63:59:20:F1:A5:87:01:C4:7A:3E:29:AE:7B:4D:9D:3B:30:01
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5F959FA9239779E54166F37F36A13C00A6FB1C09
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231312e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.125.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:9f:a9:23:97:79:e5:41:66:f3:7f:36:a1:3c:00:a6:fb:1c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:67:18:fb:1c:2f:47:0e:d0:9a:dd:2a:3a:
                    66:f4:48:7f:a6:10:78:27:48:85:02:c7:d6:49:f4:
                    f6:3a:5f:3f:93:2c:27:ce:3b:7f:e0:2b:50:82:ac:
                    54:98:63:8c:3b:16:e6:c6:0f:8d:35:8d:58:84:6b:
                    ce:69:22:fd:e1:89:02:61:d9:5f:01:27:e7:d8:7f:
                    bf:7c:4f:13:00:97:13:60:59:39:ff:ca:cc:1d:84:
                    12:3a:07:87:e3:7c:f8:91:d0:42:93:be:e0:9b:9c:
                    c0:3f:01:dd:27:1e:a7:ed:0c:dd:aa:29:67:05:f5:
                    a2:ce:e0:d6:7b:ef:6a:53:c7:39:d3:0a:9f:c0:05:
                    82:0e:86:60:e0:65:0c:12:80:bc:cd:ee:fe:f7:cd:
                    26:2e:39:45:89:a2:8a:f8:5b:8d:79:3a:37:39:53:
                    1d:36:5e:ff:57:66:df:a3:e9:5e:7b:1f:2a:c3:07:
                    3c:f3:77:07:c1:99:1b:e9:5e:e5:47:ff:ac:c6:dd:
                    38:c6:18:50:d2:07:1e:5c:ca:1b:cc:72:86:68:9c:
                    8f:f6:a9:72:2f:b4:a8:be:45:5a:91:f9:38:c0:15:
                    ad:5f:b5:cb:f4:8e:1c:22:97:62:a3:ea:e4:88:a1:
                    3f:0e:a1:e7:63:ef:73:0e:6a:13:5d:02:85:87:42:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:63:59:20:F1:A5:87:01:C4:7A:3E:29:AE:7B:4D:9D:3B:30:01
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e3231312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:24:91:56:1d:60:c7:9c:ca:d7:ea:85:01:61:17:3d:1a:a5:
         fb:45:ca:ec:76:19:a6:e7:a4:f7:d4:09:b4:84:44:da:4c:21:
         a1:16:90:d7:a0:c8:25:cd:e9:26:1d:3f:a6:36:17:b6:b3:78:
         6f:7f:7a:d3:17:09:39:85:0d:d8:ca:44:98:82:3d:2a:91:9a:
         74:23:6b:1d:21:3e:98:ca:07:c3:32:c8:62:52:bc:19:74:a8:
         c2:a7:2f:2d:0f:ef:25:6a:8e:02:2a:57:ae:34:28:3a:51:7f:
         17:e9:74:ed:7f:8e:38:f3:2e:f7:ce:a4:ca:1f:49:18:84:64:
         e4:3b:5d:d3:0a:e0:e1:6a:c8:6a:e2:8d:2b:42:0a:d4:d6:14:
         98:cb:11:cf:34:1b:ea:4a:24:59:15:ee:f7:b7:0a:61:09:70:
         1c:53:d1:5f:7d:4a:6a:08:1c:1d:29:28:9a:6e:05:ae:de:b2:
         1c:77:3a:ff:99:bd:bd:dd:26:b4:a7:e0:7c:9f:36:3b:a9:87:
         1e:d2:ba:c4:72:27:a4:e9:c1:46:ba:8a:6d:97:73:29:60:4f:
         53:15:99:0b:cd:0e:d7:6d:e5:68:b4:1d:0a:69:b1:ec:cd:96:
         d5:a9:a1:b0:e7:7e:4a:fe:5f:c4:d9:30:91:db:ec:bb:d6:8f:
         1f:7d:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----