Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e3134382e302f32322d3234203d3e203338373736.roa
File:                     3130332e3133332e3134382e302f32322d3234203d3e203338373736.roa (raw, json)
Hash identifier:          J4ykOXfPVmnUsbozxScnOHy0gOJmXZbt3AJGCt3fL90=
Subject key identifier:   B1:D9:E9:5F:23:4C:89:A7:E3:F3:3C:D1:D5:9E:A2:55:EC:44:8E:FC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67789156E0062000206B0EB381A32F4E9EC9D5A8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e3134382e302f32322d3234203d3e203338373736.roa
Signing time:             Wed 28 Apr 2021 06:24:30 +0000
ROA not before:           Wed 28 Apr 2021 06:19:30 +0000
ROA not after:            Thu 28 Apr 2022 06:24:30 +0000
asID:                     38776
IP address blocks:        103.133.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:91:56:e0:06:20:00:20:6b:0e:b3:81:a3:2f:4e:9e:c9:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 28 06:19:30 2021 GMT
            Not After : Apr 28 06:24:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:8a:71:3e:ae:c6:3f:8d:75:6c:01:ed:87:
                    a0:ae:6e:6d:50:14:97:b1:32:55:52:dc:2b:b8:67:
                    e4:7a:4c:0e:ff:d3:e8:6e:ee:f7:49:a4:0a:c2:b7:
                    5d:4e:7f:48:9d:f0:6d:e3:39:f6:31:da:f1:6e:35:
                    52:9a:23:f8:f4:7b:64:29:63:12:2c:84:ba:15:f7:
                    f7:fd:03:3a:66:fc:63:5a:41:3e:73:67:9a:8d:4b:
                    49:a8:34:28:f4:99:68:64:5d:43:e7:9c:07:f1:4b:
                    ab:3c:c2:c9:5f:0c:27:42:06:df:68:24:fe:1c:dc:
                    06:17:af:33:59:26:dd:41:c3:54:2e:ab:20:3f:8e:
                    7f:aa:aa:5f:2d:80:b5:76:3c:61:02:7a:4a:e3:f4:
                    ff:1f:50:1e:97:55:b1:2d:55:76:62:24:96:4c:92:
                    c8:6b:bd:50:f4:e0:ce:39:9c:fb:b3:bb:9e:ee:84:
                    d5:8b:20:66:7b:10:27:0c:f6:43:a9:23:8a:c0:bf:
                    9b:aa:97:88:e9:a8:f2:bf:c7:7d:bd:aa:ed:0b:6f:
                    b4:ce:91:02:a0:ed:85:32:5e:6e:b4:cc:8f:24:95:
                    a3:2e:a1:52:c8:b4:b8:b8:31:12:c1:50:d0:1d:76:
                    eb:39:60:1e:ae:b2:d1:c8:ba:1d:4c:69:03:65:eb:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:E9:5F:23:4C:89:A7:E3:F3:3C:D1:D5:9E:A2:55:EC:44:8E:FC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133332e3134382e302f32322d3234203d3e203338373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:38:20:13:fe:0c:8f:5a:e0:cb:a3:7c:b4:ec:a3:fe:28:30:
         f9:ed:0c:5b:1c:e1:b9:99:39:76:a8:c5:cf:2b:6b:7a:31:58:
         15:f8:3d:cc:ae:db:eb:ca:cb:cd:bd:d4:97:3f:b8:f2:1a:f2:
         01:64:e3:2e:40:8b:af:b8:58:e8:bd:47:46:54:d3:b6:88:60:
         bc:2c:a4:70:b6:76:10:b1:fe:06:11:95:e7:8e:e6:dd:12:74:
         8b:5d:bd:4b:ae:7e:b7:8b:ae:02:a2:a2:7d:e0:f6:ee:c4:b3:
         bd:5a:2c:61:eb:1a:0a:91:62:c5:7f:1f:d9:06:17:68:99:b0:
         d7:a3:3f:37:9d:ca:bb:32:6b:9e:0e:fc:96:39:85:0b:13:ff:
         98:cb:ea:13:1b:2b:f9:16:3f:e4:e3:30:e1:f6:0d:a1:b7:c8:
         b6:d2:6f:77:31:0f:a3:ba:fa:66:c2:f3:24:a4:43:87:52:26:
         24:3e:9c:30:15:55:57:c7:5b:22:df:fd:90:00:4b:4a:fe:06:
         ba:12:a0:88:f8:85:4e:ca:cc:4b:77:5b:f7:4f:de:03:08:35:
         7a:b3:df:d9:78:4c:78:e6:5d:11:fc:a3:93:33:db:bd:d7:1f:
         28:4f:15:c7:9c:6c:51:41:3c:6a:6d:8d:54:9a:ea:e8:dc:41:
         52:49:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----