Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3138342e302f32322d3234203d3e2030.roa
File:                     3130332e3133302e3138342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          sApV2yNHgNZY666po0BehQHy7yIG1VTQosIP4cRvFPc=
Subject key identifier:   4B:66:DC:B1:6B:30:09:3C:AD:7D:37:29:94:3A:AC:EE:1E:BA:BB:AA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7290173550CFBB3AE98DF97731C460ECAEEB4841
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3138342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:21:21 +0000
ROA not before:           Wed 02 Feb 2022 06:16:21 +0000
ROA not after:            Thu 02 Feb 2023 06:21:21 +0000
asID:                     0
IP address blocks:        103.130.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:90:17:35:50:cf:bb:3a:e9:8d:f9:77:31:c4:60:ec:ae:eb:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:16:21 2022 GMT
            Not After : Feb  2 06:21:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:22:39:ef:b1:f5:2d:d1:e1:a2:d6:17:84:
                    4e:04:8c:e2:5f:96:3b:27:76:7e:28:90:a0:af:0b:
                    5f:18:3b:b5:08:cf:4b:55:a7:66:0b:da:4a:46:6f:
                    9f:98:8e:2d:7a:c8:ae:25:51:ad:0d:54:2b:a1:28:
                    0c:5b:bc:fb:f5:4d:6a:c1:4b:ce:b7:71:82:fa:2e:
                    30:1c:99:72:ba:2f:3c:9e:76:03:a2:7c:a1:1b:fa:
                    4e:10:72:12:57:b1:6b:c1:9d:8e:09:bf:a4:0e:24:
                    34:bc:62:f6:65:53:98:26:1d:b4:a7:07:c2:ad:a6:
                    2e:bb:52:dc:bc:14:e5:76:c9:8c:b4:d5:69:fb:14:
                    e3:4e:43:36:96:f4:c2:7b:a6:58:f5:d4:cd:44:f5:
                    f7:dc:f9:0e:aa:e6:6d:9a:19:a1:61:92:f3:1f:ae:
                    c2:1e:64:5a:0a:6b:e5:6e:ba:78:ec:ac:2e:fd:c9:
                    52:02:46:b8:82:3e:8f:cf:76:1f:4f:5f:eb:4b:e0:
                    dc:75:1b:ce:7d:64:66:7e:4d:b3:b6:ef:43:1b:ba:
                    e6:cd:56:a9:b0:68:03:42:bb:ba:c1:9f:e4:b9:cc:
                    5c:50:d7:15:97:83:78:71:f1:cd:32:0d:e5:85:7d:
                    47:38:d2:ec:32:74:2d:b1:d1:f4:07:5a:f7:64:94:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:DC:B1:6B:30:09:3C:AD:7D:37:29:94:3A:AC:EE:1E:BA:BB:AA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133302e3138342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:53:54:b6:db:0a:05:fc:5a:0e:68:8d:92:ef:4a:46:c2:bc:
         19:2c:57:1f:b3:c7:b4:8a:a8:34:89:d5:0a:a5:49:96:59:e0:
         d8:6f:7a:5c:27:ce:05:42:e6:f0:78:bd:21:9d:82:ae:48:de:
         c9:ad:f3:6d:82:b8:51:e7:f6:80:0a:de:db:03:8c:39:1b:9c:
         2f:20:2c:05:ff:88:44:c1:0a:ac:d0:f7:14:52:1a:d7:84:e9:
         d2:1b:fb:0e:1a:cf:0b:91:d3:63:00:03:d7:7f:81:bb:c0:4c:
         db:d5:67:82:81:56:42:8a:f3:4c:9f:33:89:c0:61:37:16:3d:
         0f:94:70:c3:cd:67:6c:26:c6:f9:35:5c:3d:94:df:4c:e9:19:
         db:20:61:f3:66:ca:ad:1f:59:4f:73:11:8d:ba:ae:74:9d:ed:
         4a:41:9f:44:72:8c:09:58:c6:2f:dd:66:90:83:eb:7f:02:7a:
         11:c0:34:b6:ad:6c:91:4c:e2:78:e3:a2:08:3b:9e:91:35:1c:
         de:b6:9e:21:70:b3:c2:2e:bc:48:26:4d:f8:11:80:2b:dd:e7:
         83:54:7b:e2:77:e9:b5:8e:86:b3:0d:3c:fe:5c:f4:56:a5:70:
         c8:54:3e:13:ed:76:56:95:6d:6f:dd:20:43:33:fc:97:5d:15:
         bc:31:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----