Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3132382e302f32322d3234203d3e203633383539.roa
File:                     3130332e3133302e3132382e302f32322d3234203d3e203633383539.roa (raw, json)
Hash identifier:          +tnJVaFd2EYxlwfqNY9Js+W0Qopa18nPgWeftrez8CM=
Subject key identifier:   06:BF:3B:49:7F:49:19:D7:38:CD:DE:AC:13:23:06:84:92:92:18:90
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16EBAD3300FF089E5DA9542D91897FA32D33FE20
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3132382e302f32322d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:01 +0000
ROA not before:           Wed 10 Nov 2021 07:55:01 +0000
ROA not after:            Thu 10 Nov 2022 08:00:01 +0000
asID:                     63859
IP address blocks:        103.130.128.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:eb:ad:33:00:ff:08:9e:5d:a9:54:2d:91:89:7f:a3:2d:33:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:01 2021 GMT
            Not After : Nov 10 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:17:34:5c:83:d0:fe:c2:6c:16:e5:31:29:
                    79:d4:c1:95:29:68:96:4e:61:98:75:f0:f7:a4:ed:
                    5b:32:c0:69:a9:54:43:25:47:74:01:aa:29:2c:22:
                    71:49:3b:ef:74:73:14:ac:b7:3a:2a:d6:1b:cd:7f:
                    5f:2c:f2:88:24:4a:0c:b2:67:a0:ff:66:98:99:cb:
                    e9:8b:25:48:af:a5:91:c4:e1:98:17:c4:bf:2c:82:
                    4e:81:96:47:60:0c:1e:b5:02:6b:b3:9c:1c:34:a5:
                    86:08:d2:17:de:4c:62:a0:c7:e0:e5:1f:fb:c9:72:
                    e3:96:f3:6b:52:10:0e:4b:33:4f:1b:8f:32:6b:88:
                    9f:c6:08:82:36:7a:26:b4:96:bb:17:6e:b4:6e:2d:
                    27:16:3d:9a:c8:e4:b8:0a:84:87:42:a4:4a:ba:15:
                    cb:89:46:9d:fb:4e:7e:c1:77:99:13:0c:d5:0d:82:
                    1b:45:a2:5b:98:67:c8:43:16:7c:20:70:16:b4:5f:
                    de:b9:b1:1c:4d:b3:8f:7c:64:74:48:42:e4:72:a7:
                    50:a8:a4:3d:7f:a1:0f:d0:7e:11:35:cb:60:19:d4:
                    55:f5:75:5b:84:3f:5d:6b:10:b1:19:17:d8:4a:cb:
                    f6:3f:a9:dc:1c:00:4b:2d:7b:a4:a4:2a:6d:13:3b:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:3B:49:7F:49:19:D7:38:CD:DE:AC:13:23:06:84:92:92:18:90
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3132382e302f32322d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:32:6c:18:05:f1:8e:f1:97:1a:ae:1f:c8:ba:01:3c:3a:
         56:26:e9:b2:d3:19:74:4a:e8:32:d3:5b:f5:43:74:ea:f2:2f:
         e5:21:64:ee:2b:4b:d5:18:75:a9:0c:0e:75:84:10:d3:3a:d4:
         56:c9:73:68:13:d2:9e:0b:93:72:df:d0:9c:9a:cb:2b:59:1e:
         d5:b4:22:eb:20:32:2e:74:54:d8:50:d7:d7:29:47:06:2d:18:
         df:f8:0c:0a:d3:e7:e1:99:5f:da:22:a3:67:fa:62:87:e4:b2:
         b8:d4:97:ee:42:47:5e:e1:d0:33:c1:ce:32:b9:93:65:87:d5:
         bf:16:fe:1b:3b:08:62:28:9a:f7:ee:f8:f5:8f:f1:7d:ea:bc:
         59:ff:4f:87:5a:89:dc:e0:5f:69:22:42:0f:d5:93:f5:fa:a6:
         2f:e8:2c:18:e8:ae:4d:9f:71:41:15:00:56:cb:3e:9a:9d:a4:
         4c:fa:11:c5:ee:69:ab:62:54:15:9c:4c:c9:c7:16:9a:21:41:
         c4:ad:d2:a4:57:ba:d0:45:cd:2f:b8:b5:6e:32:9c:58:87:6e:
         38:21:a3:e1:62:dd:bc:0b:fd:67:45:57:48:4d:84:70:6a:e1:
         72:66:f5:c1:f8:d5:2f:23:a3:90:06:62:d6:c9:c2:4f:d1:5b:
         c8:64:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----