Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232332e302f3234203d3e20313331313131.roa
File:                     3130332e3133352e3232332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          8n5fxeKemJhg2tdCFIOq5PyufX+kki3TLkzjkzimCqQ=
Subject key identifier:   1C:1D:E8:8F:31:3C:14:D0:88:D9:CB:37:38:2E:67:6B:8D:25:B3:8F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       48C8B4FAA82C8B0FC5DB7A6B7FCFEE2D5103C87B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232332e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.135.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c8:b4:fa:a8:2c:8b:0f:c5:db:7a:6b:7f:cf:ee:2d:51:03:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject: CN=3082010A0282010100BA4AE1B1F69B692E271AC3B6B83A6899064B48458C574AF031E69692507ACBDEB1FD1CF8BAE9E1AB72D4E9C28E4D9A85B3A352ECD3EE9DD80ACB096A06B32C3A712C32D977A15B1FD5A8E15D642C1101092A90AC277A63E97F833B13BDA91A5CD84BE0814071944A43F2EFED6F27889BAF82C360FF1A33436D694A0399386467ED8E2E33896A77FE7D4D4D9C7D1096F9EEA91D85F3B8A956F1F5284D3A56CC61B61E0309653B07AC19DDA6566969470CB96034B42D46F8A6E8BAE388BC2D96421A15ACD189A1470C43260796DDEB378501D1F0033F29E641D569AC99054582CF1B0B4164B4281FCC5E34530E684BBD7D777F284AD37491F1E00589FD0C3ABF650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:e1:b1:f6:9b:69:2e:27:1a:c3:b6:b8:3a:
                    68:99:06:4b:48:45:8c:57:4a:f0:31:e6:96:92:50:
                    7a:cb:de:b1:fd:1c:f8:ba:e9:e1:ab:72:d4:e9:c2:
                    8e:4d:9a:85:b3:a3:52:ec:d3:ee:9d:d8:0a:cb:09:
                    6a:06:b3:2c:3a:71:2c:32:d9:77:a1:5b:1f:d5:a8:
                    e1:5d:64:2c:11:01:09:2a:90:ac:27:7a:63:e9:7f:
                    83:3b:13:bd:a9:1a:5c:d8:4b:e0:81:40:71:94:4a:
                    43:f2:ef:ed:6f:27:88:9b:af:82:c3:60:ff:1a:33:
                    43:6d:69:4a:03:99:38:64:67:ed:8e:2e:33:89:6a:
                    77:fe:7d:4d:4d:9c:7d:10:96:f9:ee:a9:1d:85:f3:
                    b8:a9:56:f1:f5:28:4d:3a:56:cc:61:b6:1e:03:09:
                    65:3b:07:ac:19:dd:a6:56:69:69:47:0c:b9:60:34:
                    b4:2d:46:f8:a6:e8:ba:e3:88:bc:2d:96:42:1a:15:
                    ac:d1:89:a1:47:0c:43:26:07:96:dd:eb:37:85:01:
                    d1:f0:03:3f:29:e6:41:d5:69:ac:99:05:45:82:cf:
                    1b:0b:41:64:b4:28:1f:cc:5e:34:53:0e:68:4b:bd:
                    7d:77:7f:28:4a:d3:74:91:f1:e0:05:89:fd:0c:3a:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1D:E8:8F:31:3C:14:D0:88:D9:CB:37:38:2E:67:6B:8D:25:B3:8F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133352e3232332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:56:f5:01:a7:d7:a6:1f:c8:b9:fe:52:d2:9b:c5:e3:92:
         94:dc:bd:f8:a6:e6:8d:8c:b6:37:86:27:ca:ea:32:44:48:f6:
         d2:24:53:b2:b7:52:16:6b:60:24:e5:9d:08:fa:53:f5:42:f9:
         1d:31:9e:9a:9e:3e:0b:84:3d:3f:fa:7d:9c:0a:de:f2:bf:80:
         bb:34:09:28:aa:45:ad:f7:e4:80:3f:ec:cc:f6:6e:bf:02:6d:
         92:51:4a:44:93:d1:1d:0c:0d:98:ad:af:7e:c6:3a:24:a3:9e:
         56:cc:82:b6:2f:f0:69:87:90:1f:8d:d8:2d:1e:b8:92:c6:21:
         fc:26:64:50:1a:45:04:dd:2a:ec:aa:8a:af:79:01:db:82:b2:
         0b:db:eb:2d:68:36:4c:a0:89:40:9e:97:29:b3:6c:0c:74:3e:
         79:dd:cb:3a:66:ab:a8:0a:bf:d1:70:8a:8c:8e:e9:07:e7:9a:
         09:09:ea:a9:5f:58:e1:f1:a9:eb:0f:dc:0c:ea:41:71:df:4d:
         44:cc:aa:b9:f9:6a:8e:87:8b:05:3f:00:01:d4:c6:22:b5:a4:
         69:d6:88:43:01:88:b7:2b:28:02:6c:cf:55:93:41:d5:fa:72:
         f6:7f:3c:59:26:44:9b:08:d6:e8:24:16:3e:60:32:8a:cb:a0:
         bc:35:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----