Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231352e302f3234203d3e20313331313131.roa
File:                     3130332e3133352e3231352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          Lz6oLnTknqiK8S8gmF6S8PyscmC601HGh6dI7ipiS4I=
Subject key identifier:   65:8D:AD:71:32:7E:69:CD:D3:EA:7D:FE:24:A7:20:74:AA:18:99:B1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7C966E6A99C9DF75CAC015DEE6E119428A0B5B85
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231352e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.135.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:96:6e:6a:99:c9:df:75:ca:c0:15:de:e6:e1:19:42:8a:0b:5b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:dc:ff:8f:7f:d1:1b:31:cb:d8:0c:40:65:
                    bb:18:e7:f2:75:54:78:fe:e3:49:e9:31:af:b3:bc:
                    55:2f:d8:59:9b:ec:ce:dd:1a:74:91:8a:40:7b:86:
                    86:fa:31:8c:ba:a4:cf:f5:5b:7e:31:65:f7:1c:ca:
                    91:2a:ab:32:b3:b7:62:d9:cc:76:3d:e5:43:11:66:
                    bc:12:10:40:d4:24:07:0b:98:8f:7f:d1:aa:3e:26:
                    cf:e2:6c:ee:81:e4:2e:d9:8c:89:3f:60:f2:46:7f:
                    d4:18:0e:23:15:89:40:be:c6:e4:eb:7d:df:89:15:
                    d6:63:1f:82:7b:d7:a9:7b:a1:bb:55:40:e6:2d:d8:
                    7c:f8:f0:88:22:e3:bf:25:be:1a:8c:9a:91:f4:8f:
                    79:5a:83:de:a2:d7:30:e0:9b:71:a4:71:61:ef:53:
                    37:fc:63:3b:09:97:a8:d6:97:ab:bd:6d:ba:01:12:
                    77:c8:ff:1a:0e:64:cf:2e:16:a4:4f:bc:83:e6:20:
                    54:2e:42:11:81:f4:87:1a:e2:e0:66:fc:da:c5:d1:
                    22:76:7e:fa:f2:29:d1:54:f3:31:5d:f4:82:d6:03:
                    f0:65:75:1e:e2:30:84:1d:b8:43:ab:4a:a8:8e:2e:
                    a7:fd:e5:46:36:97:50:02:54:0a:7b:ac:d8:cd:28:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:AD:71:32:7E:69:CD:D3:EA:7D:FE:24:A7:20:74:AA:18:99:B1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3231352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:d5:87:03:7a:29:02:5b:0b:dd:7f:d1:28:24:6b:d4:fd:
         29:33:76:37:f4:54:86:6a:5e:fa:1b:99:07:f4:59:d4:b4:ef:
         a7:e8:8b:e8:63:ba:1f:e5:bc:b6:d9:d8:e1:cb:ea:ba:01:63:
         f6:4d:4d:4f:4a:3a:52:72:bb:e4:1c:05:cb:66:f6:a1:dd:3f:
         34:8c:88:b0:c3:b8:a2:9a:4a:18:e7:45:57:52:7a:76:96:d4:
         4d:dc:25:2c:41:4b:cc:ab:0c:f6:47:0b:dd:5b:08:17:1a:ce:
         bb:c1:f4:e0:b8:25:79:6b:00:74:64:f9:1c:cb:41:51:96:bf:
         1e:94:ed:07:5b:a3:07:26:bb:df:39:90:ca:8b:b9:24:40:b7:
         1a:1c:62:1c:e2:c0:51:ed:1a:b5:3c:7d:4c:8d:6f:47:85:11:
         40:24:ca:c0:ce:63:f5:48:e1:17:b9:6c:54:9d:97:e0:65:3f:
         7e:b8:21:e5:4d:a2:26:21:4e:f2:d9:47:85:50:45:42:40:9e:
         92:6f:bf:28:99:6b:a4:fc:11:2a:8f:39:17:5c:19:51:54:b3:
         59:ad:d5:b3:1a:83:01:82:e1:ae:d5:3a:3c:8e:36:18:a9:c9:
         0a:7c:42:04:59:bb:d4:fe:65:d5:60:32:92:03:f3:2f:dc:97:
         8f:1a:11:0a
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUfJZuapnJ33XKwBXe5uEZQooLW4UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyOTEwNTUwNloX
DTIyMDYyOTExMDAwNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDODdDRENGRjhGN0ZEMTFCMzFDQkQ4MEM0MDY1QkIxOEU3RjI3NTU0NzhG
RUUzNDlFOTMxQUZCM0JDNTUyRkQ4NTk5QkVDQ0VERDFBNzQ5MThBNDA3Qjg2ODZG
QTMxOENCQUE0Q0ZGNTVCN0UzMTY1RjcxQ0NBOTEyQUFCMzJCM0I3NjJEOUNDNzYz
REU1NDMxMTY2QkMxMjEwNDBENDI0MDcwQjk4OEY3RkQxQUEzRTI2Q0ZFMjZDRUU4
MUU0MkVEOThDODkzRjYwRjI0NjdGRDQxODBFMjMxNTg5NDBCRUM2RTRFQjdEREY4
OTE1RDY2MzFGODI3QkQ3QTk3QkExQkI1NTQwRTYyREQ4N0NGOEYwODgyMkUzQkYy
NUJFMUE4QzlBOTFGNDhGNzk1QTgzREVBMkQ3MzBFMDlCNzFBNDcxNjFFRjUzMzdG
QzYzM0IwOTk3QThENjk3QUJCRDZEQkEwMTEyNzdDOEZGMUEwRTY0Q0YyRTE2QTQ0
RkJDODNFNjIwNTQyRTQyMTE4MUY0ODcxQUUyRTA2NkZDREFDNUQxMjI3NjdFRkFG
MjI5RDE1NEYzMzE1REY0ODJENjAzRjA2NTc1MUVFMjMwODQxREI4NDNBQjRBQTg4
RTJFQTdGREU1NDYzNjk3NTAwMjU0MEE3QkFDRDhDRDI4MjY0NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfNz/j3/RGzHL2AxAZbsY
5/J1VHj+40npMa+zvFUv2Fmb7M7dGnSRikB7hob6MYy6pM/1W34xZfccypEqqzKz
t2LZzHY95UMRZrwSEEDUJAcLmI9/0ao+Js/ibO6B5C7ZjIk/YPJGf9QYDiMViUC+
xuTrfd+JFdZjH4J716l7obtVQOYt2Hz48Igi478lvhqMmpH0j3lag96i1zDgm3Gk
cWHvUzf8YzsJl6jWl6u9bboBEnfI/xoOZM8uFqRPvIPmIFQuQhGB9Ica4uBm/NrF
0SJ2fvryKdFU8zFd9ILWA/BldR7iMIQduEOrSqiOLqf95UY2l1ACVAp7rNjNKCZF
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQUZY2tcTJ+ac3T6n3+JKcgdKoYmbEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM1MmUzMjMxMzUyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnh9cwDQYJKoZIhvcN
AQELBQADggEBAEj61YcDeikCWwvdf9EoJGvU/Skzdjf0VIZqXvobmQf0WdS076fo
i+hjuh/lvLbZ2OHL6roBY/ZNTU9KOlJyu+QcBctm9qHdPzSMiLDDuKKaShjnRVdS
enaW1E3cJSxBS8yrDPZHC91bCBcazrvB9OC4JXlrAHRk+RzLQVGWvx6U7Qdbowcm
u985kMqLuSRAtxocYhziwFHtGrU8fUyNb0eFEUAkysDOY/VI4Re5bFSdl+BlP364
IeVNoiYhTvLZR4VQRUJAnpJvvyiZa6T8ESqPORdcGVFUs1mt1bMagwGC4a7VOjyO
NhipyQp8QgRZu9T+ZdVgMpID8y/cl48aEQo=
-----END CERTIFICATE-----