Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34302e302f32322d3234203d3e203633383539.roa
File:                     3130332e3132352e34302e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          qGEziQbdGAj2YuH97MDCKdJ7P3dJXf265woQK9UO6Qw=
Subject key identifier:   5A:73:30:EA:3E:A0:65:A7:20:DB:1F:87:6B:78:72:93:72:13:11:0B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1E62F790F59D3F2FE5D2BE8E1F8B08977127A038
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34302e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 07:00:01 +0000
ROA not before:           Wed 10 Nov 2021 06:55:01 +0000
ROA not after:            Thu 10 Nov 2022 07:00:01 +0000
asID:                     63859
IP address blocks:        103.125.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:62:f7:90:f5:9d:3f:2f:e5:d2:be:8e:1f:8b:08:97:71:27:a0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 06:55:01 2021 GMT
            Not After : Nov 10 07:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:b8:a8:6f:c9:ad:08:4f:06:e5:ad:3b:08:
                    69:50:37:a2:cf:f1:c7:ec:9b:01:8d:e5:a1:6b:49:
                    00:82:3a:6c:51:0e:b2:d6:48:c2:aa:2f:c3:05:58:
                    25:f4:0a:b2:a2:16:40:1e:8e:a5:0f:f6:da:d4:c1:
                    b4:60:4f:48:1f:33:26:24:8c:2a:e8:06:02:41:28:
                    60:0c:0a:e5:ee:0e:f0:31:8a:f9:d5:fb:1f:d4:fe:
                    04:55:c3:8c:ee:62:57:4c:07:3b:29:34:38:87:cd:
                    b4:03:10:26:50:7e:af:d7:79:50:f2:af:da:6f:5f:
                    50:5f:55:5d:b2:07:d8:f2:64:f4:79:f4:9b:1b:b3:
                    f8:40:77:63:bc:83:23:6d:50:ee:68:fb:74:20:9d:
                    c5:5f:40:26:7e:0b:57:ee:90:58:8d:0e:7a:8b:7b:
                    62:3a:1b:b5:9e:4c:b3:8d:6b:c5:45:6b:83:8b:71:
                    36:d1:1c:d1:79:0c:d5:29:2f:82:6c:4f:f4:aa:ed:
                    8b:e4:2c:5a:37:14:da:b3:e7:e7:c1:75:38:26:a0:
                    b4:e3:fc:f9:01:1b:f2:75:6b:8a:ef:21:61:7d:74:
                    ed:0f:65:3c:bc:38:d9:ca:c4:bd:30:19:1c:2d:d2:
                    41:f0:06:9c:91:7b:03:96:8e:b0:40:34:a7:ec:d3:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:30:EA:3E:A0:65:A7:20:DB:1F:87:6B:78:72:93:72:13:11:0B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132352e34302e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:73:11:23:d7:fa:f2:0b:5a:2c:be:be:b3:39:37:73:01:
         6f:4e:59:f8:1d:56:ba:12:ea:28:ad:a3:c9:c0:9e:09:65:5c:
         92:20:96:40:c4:1b:26:a9:22:19:6e:c2:da:29:e8:2d:5a:ec:
         a5:6f:e4:c8:af:0b:db:1c:84:09:9a:65:67:ca:c4:50:7d:20:
         d2:6b:88:fb:a1:c9:a8:4b:0b:20:29:c5:42:04:1f:17:0b:0c:
         ae:c1:1b:eb:3c:49:4e:4c:4a:6b:32:6c:e6:87:12:e0:f6:2f:
         cb:52:c2:4b:d5:b1:c3:95:9d:30:92:fd:68:c2:80:2e:3e:70:
         6e:b8:2d:05:75:52:c4:fb:51:24:35:49:a1:5f:c8:7f:53:85:
         e3:0d:a0:07:87:0c:50:75:d2:7e:10:b7:af:bb:c4:46:aa:5e:
         b4:4d:89:bc:37:49:21:e0:64:4e:d6:e7:ff:9a:7e:30:31:72:
         07:94:e3:d4:ab:73:e2:ce:d9:21:41:32:39:f1:81:9b:b6:58:
         94:c5:d7:65:b7:be:29:80:f8:0e:05:54:33:22:01:49:34:bc:
         79:7d:5c:da:21:e3:e8:28:2d:b5:a8:5c:d3:c5:94:91:24:96:
         7e:8d:c8:0f:8a:d7:f5:78:c4:89:e5:66:49:48:67:f1:98:e8:
         89:cd:8d:42
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUHmL3kPWdPy/l0r6OH4sIl3EnoDgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA2NTUwMVoX
DTIyMTExMDA3MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNTgzQjhBODZGQzlBRDA4NEYwNkU1QUQzQjA4Njk1MDM3QTJDRkYxQzdF
QzlCMDE4REU1QTE2QjQ5MDA4MjNBNkM1MTBFQjJENjQ4QzJBQTJGQzMwNTU4MjVG
NDBBQjJBMjE2NDAxRThFQTUwRkY2REFENEMxQjQ2MDRGNDgxRjMzMjYyNDhDMkFF
ODA2MDI0MTI4NjAwQzBBRTVFRTBFRjAzMThBRjlENUZCMUZENEZFMDQ1NUMzOENF
RTYyNTc0QzA3M0IyOTM0Mzg4N0NEQjQwMzEwMjY1MDdFQUZENzc5NTBGMkFGREE2
RjVGNTA1RjU1NURCMjA3RDhGMjY0RjQ3OUY0OUIxQkIzRjg0MDc3NjNCQzgzMjM2
RDUwRUU2OEZCNzQyMDlEQzU1RjQwMjY3RTBCNTdFRTkwNTg4RDBFN0E4QjdCNjIz
QTFCQjU5RTRDQjM4RDZCQzU0NTZCODM4QjcxMzZEMTFDRDE3OTBDRDUyOTJGODI2
QzRGRjRBQUVEOEJFNDJDNUEzNzE0REFCM0U3RTdDMTc1MzgyNkEwQjRFM0ZDRjkw
MTFCRjI3NTZCOEFFRjIxNjE3RDc0RUQwRjY1M0NCQzM4RDlDQUM0QkQzMDE5MUMy
REQyNDFGMDA2OUM5MTdCMDM5NjhFQjA0MDM0QTdFQ0QzQkNFNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg7iob8mtCE8G5a07CGlQ
N6LP8cfsmwGN5aFrSQCCOmxRDrLWSMKqL8MFWCX0CrKiFkAejqUP9trUwbRgT0gf
MyYkjCroBgJBKGAMCuXuDvAxivnV+x/U/gRVw4zuYldMBzspNDiHzbQDECZQfq/X
eVDyr9pvX1BfVV2yB9jyZPR59Jsbs/hAd2O8gyNtUO5o+3QgncVfQCZ+C1fukFiN
DnqLe2I6G7WeTLONa8VFa4OLcTbRHNF5DNUpL4JsT/Sq7YvkLFo3FNqz5+fBdTgm
oLTj/PkBG/J1a4rvIWF9dO0PZTy8ONnKxL0wGRwt0kHwBpyRewOWjrBANKfs07zn
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUWnMw6j6gZacg2x+Ha3hyk3ITEQswHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMjM1MmUzNDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd9KDANBgkqhkiG
9w0BAQsFAAOCAQEAD7tzESPX+vILWiy+vrM5N3MBb05Z+B1WuhLqKK2jycCeCWVc
kiCWQMQbJqkiGW7C2inoLVrspW/kyK8L2xyECZplZ8rEUH0g0muI+6HJqEsLICnF
QgQfFwsMrsEb6zxJTkxKazJs5ocS4PYvy1LCS9Wxw5WdMJL9aMKALj5wbrgtBXVS
xPtRJDVJoV/If1OF4w2gB4cMUHXSfhC3r7vERqpetE2JvDdJIeBkTtbn/5p+MDFy
B5Tj1Ktz4s7ZIUEyOfGBm7ZYlMXXZbe+KYD4DgVUMyIBSTS8eX1c2iHj6Cgttahc
08WUkSSWfo3ID4rX9XjEieVmSUhn8Zjoic2NQg==
-----END CERTIFICATE-----