Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e32342e302f32322d3234203d3e2030.roa
File:                     3130332e3133362e32342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          TWZn/xuJEJIBP3BsA4DDelSsDBhs9MicA22YV9FBDgk=
Subject key identifier:   B7:12:18:88:C2:64:09:2E:88:AB:B3:06:49:2D:7C:CD:9F:A8:98:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23C5963DBBEDD2A4F99562BC4F70EAB4E994056C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e32342e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 03:48:32 +0000
ROA not before:           Mon 31 Jan 2022 03:43:32 +0000
ROA not after:            Tue 31 Jan 2023 03:48:32 +0000
asID:                     0
IP address blocks:        103.136.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:96:3d:bb:ed:d2:a4:f9:95:62:bc:4f:70:ea:b4:e9:94:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:43:32 2022 GMT
            Not After : Jan 31 03:48:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:b3:fe:37:b5:87:9b:e1:c6:9f:25:2b:dc:
                    d2:b7:08:b5:c3:18:bf:08:25:47:6e:ff:b0:00:63:
                    f8:a0:ef:56:03:a3:a6:28:b2:bc:0f:79:4e:f0:6f:
                    ab:08:de:7e:91:27:bb:2e:60:e2:05:7e:01:95:97:
                    fa:fa:5e:48:65:3f:6c:f7:62:80:ab:dc:df:6a:db:
                    5a:01:fb:2c:06:27:5a:14:36:94:22:56:7a:74:0a:
                    a7:28:ab:db:19:80:19:5a:ad:69:4c:f9:04:63:61:
                    a7:65:68:45:49:77:52:3a:1b:95:02:dc:b5:76:43:
                    07:10:aa:21:2a:28:8a:06:5f:5a:b1:c9:ad:f2:93:
                    5f:87:81:da:1d:09:14:87:1a:01:e2:ab:60:0a:5d:
                    d8:2a:4c:5c:d3:85:4a:6e:d2:01:49:a2:e1:18:fe:
                    2c:95:a4:7f:60:52:fc:95:66:c4:37:af:c6:fe:30:
                    00:00:76:4b:ab:d7:e1:ea:b9:aa:f0:a6:7b:9c:19:
                    fe:7e:bf:c4:9b:99:cd:2f:c9:a8:3e:05:23:9d:f5:
                    e7:1e:16:30:50:66:ae:36:f2:06:84:67:d9:cf:0c:
                    27:59:cf:c7:38:fa:a3:de:14:3f:af:91:a0:32:a3:
                    5f:c7:4a:a0:09:f3:b5:ba:73:fc:49:c4:b1:e4:1c:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:18:88:C2:64:09:2E:88:AB:B3:06:49:2D:7C:CD:9F:A8:98:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e32342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:99:30:35:84:95:89:bb:a0:f2:03:d5:13:ee:8d:0c:6d:
         76:00:69:1d:4a:d0:50:07:82:0e:55:f4:fa:b0:95:9e:77:98:
         ae:02:8e:d2:c2:e1:c1:c8:2b:f4:0e:60:bf:41:ab:fe:52:28:
         5b:64:59:13:a0:75:ac:3d:e1:9e:93:9f:5c:79:2c:31:97:30:
         3e:90:c1:a2:15:8b:55:3e:aa:ad:7b:72:2f:13:06:6a:44:47:
         68:41:aa:0d:04:7b:ab:05:07:51:e8:ef:ba:70:ed:c7:ff:cf:
         49:81:9b:b1:a9:8a:92:f9:b3:3c:29:f6:4a:89:57:20:1a:4e:
         df:7b:fe:7c:72:30:40:15:c5:fd:92:b0:2b:fe:be:78:b8:82:
         76:0f:70:a3:89:36:0a:b3:f1:38:b5:70:2f:af:91:d1:aa:d3:
         6d:9e:64:e3:06:3e:32:dc:26:a7:d5:7d:8f:33:2b:af:37:3a:
         73:aa:98:6f:7f:37:54:99:c5:87:b1:50:79:98:31:f4:b1:07:
         35:c2:80:ac:e1:a4:36:68:23:df:c8:13:29:86:04:f7:00:9b:
         18:f2:78:73:36:e0:a3:5b:c1:7a:2f:12:c0:52:f8:f8:a3:ca:
         45:31:de:b2:55:66:f5:9e:50:e8:a2:60:ff:b5:15:eb:44:1f:
         87:39:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----