Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f3234203d3e20313331313131.roa
File:                     3130332e3133352e3231322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          O+Uht2WemrzU2Bb9G+o/c1ZGtDeNwIRCE6emD13Nfg8=
Subject key identifier:   99:2B:5A:44:FF:1C:35:76:FA:17:D4:0F:81:4D:BD:B9:C3:D1:DE:5C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5F277185A89DDA3C2E5808D2B8841AB3BDC8D156
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:05 +0000
ROA not before:           Tue 29 Jun 2021 10:55:05 +0000
ROA not after:            Wed 29 Jun 2022 11:00:05 +0000
asID:                     131111
IP address blocks:        103.135.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:71:85:a8:9d:da:3c:2e:58:08:d2:b8:84:1a:b3:bd:c8:d1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:05 2021 GMT
            Not After : Jun 29 11:00:05 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:72:ac:b8:a4:8d:4c:77:0a:0a:0e:e0:0b:
                    cb:63:ef:20:20:c0:f0:f6:b8:c7:57:be:c9:44:64:
                    30:9c:5c:40:15:9b:82:4b:e8:f0:f6:2c:08:30:98:
                    98:af:a9:bc:a5:f3:3c:11:58:09:85:6a:44:42:69:
                    70:e7:48:29:8e:c0:bf:de:fd:62:51:12:9a:ec:ae:
                    d2:c2:34:00:ec:48:fc:45:54:6e:37:9c:04:97:29:
                    1f:39:11:52:b2:65:ad:9d:f5:72:31:cf:57:fe:04:
                    32:13:0f:70:5b:32:79:4f:6d:f2:e6:19:15:e3:e8:
                    04:72:e6:ae:62:c8:06:e6:bb:2d:62:ee:c5:b3:a8:
                    1a:e8:81:37:f9:a2:99:20:68:d6:c6:0f:f2:3e:c3:
                    ec:04:d2:9a:d4:08:96:63:25:4a:98:d0:75:45:06:
                    81:a1:d9:a7:4d:a3:64:5a:85:f2:ed:29:ee:f0:9c:
                    7e:94:9e:89:19:d7:ea:7c:08:78:ab:2b:92:cb:98:
                    bb:36:2d:11:4b:50:f9:1d:40:e8:d1:b1:24:57:38:
                    6c:46:a8:38:df:dd:9f:2d:e8:46:23:dc:93:87:39:
                    3c:ad:d0:0d:cd:51:e5:dc:36:2e:d0:8c:c8:0b:81:
                    3f:a4:4f:6c:4d:ec:9c:33:72:cc:d3:89:a8:78:5c:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2B:5A:44:FF:1C:35:76:FA:17:D4:0F:81:4D:BD:B9:C3:D1:DE:5C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:58:d1:84:11:fb:a3:a8:e0:bb:0b:30:c0:aa:5c:05:8a:
         0e:31:4a:88:41:e1:f5:a3:62:96:40:6e:46:25:e1:fd:2f:df:
         44:7f:22:9c:ef:46:51:0c:5c:5c:86:b2:6d:de:a6:f5:0a:4d:
         e3:7a:05:fe:dd:6d:a8:5f:4a:53:16:13:99:32:37:a6:89:98:
         15:13:bf:75:4c:c0:c5:c4:00:80:3c:33:a3:00:d3:de:60:82:
         f9:b9:2c:d6:f1:31:4f:db:7b:5b:99:69:ca:a0:5d:e7:97:26:
         a9:09:47:7f:08:1a:64:31:64:36:81:9f:4b:01:f3:5a:44:d7:
         1b:97:c3:f9:d6:cc:c3:0b:a3:e0:23:d6:f2:21:d0:52:a1:19:
         03:42:ff:75:7e:4b:a7:d5:d1:f9:4b:ed:d7:bb:b7:f8:60:ee:
         50:9b:72:b4:c5:02:0f:12:f6:d2:24:81:be:82:19:6e:f8:55:
         74:6f:8a:5a:9c:c3:c8:46:d6:4d:d3:de:13:6c:82:32:7e:6d:
         9b:78:eb:36:ee:6b:02:7a:01:b8:1e:a8:37:83:21:91:a8:0f:
         79:2b:18:1b:9c:c5:77:4f:e7:17:b4:92:20:1e:f3:ba:70:a1:
         f1:12:6d:db:47:fe:57:37:2d:3d:04:a1:e8:e1:a6:5d:b8:0e:
         11:e5:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----