Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35392e302f3234203d3e20313331313131.roa
File:                     3130332e3133362e35392e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          YU/xgPM69wEio8Big0QO8YBU5PJiQ0KGIMG/4aGIIj0=
Subject key identifier:   B5:76:F8:A3:4C:61:A1:2B:F4:88:5C:D2:96:EF:07:B0:7A:E8:46:9E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C12FBC15E6DBE9EF3B09ABF5B253C69D5AACD4B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35392e302f3234203d3e20313331313131.roa
Signing time:             Tue 29 Jun 2021 11:00:06 +0000
ROA not before:           Tue 29 Jun 2021 10:55:06 +0000
ROA not after:            Wed 29 Jun 2022 11:00:06 +0000
asID:                     131111
IP address blocks:        103.136.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:12:fb:c1:5e:6d:be:9e:f3:b0:9a:bf:5b:25:3c:69:d5:aa:cd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 29 10:55:06 2021 GMT
            Not After : Jun 29 11:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:6c:59:08:7e:96:de:31:f3:8e:80:ac:ed:
                    c6:e5:4b:aa:5a:05:c6:fe:30:b4:d2:c7:3e:98:f2:
                    dc:11:7a:be:80:6a:f6:1b:e4:47:9b:2a:ce:81:cd:
                    49:83:20:91:5f:42:3a:61:a7:e5:32:c3:41:6a:e7:
                    f3:9b:17:49:be:f6:78:fd:87:05:e6:93:76:f9:b0:
                    6f:7d:e6:79:de:6d:91:2f:18:66:e6:49:98:d9:01:
                    af:f3:d2:f6:f0:df:b0:97:de:90:76:69:09:94:3e:
                    df:13:a2:81:d3:5c:ae:ee:f6:f4:31:9b:d9:f7:32:
                    4b:7b:eb:3c:35:6b:af:66:b0:95:c9:80:bd:84:8f:
                    e2:8f:56:77:ce:52:9a:08:4d:58:7b:33:52:d6:28:
                    b8:ad:b2:53:9b:89:0a:f2:5f:f2:6b:aa:d6:db:4d:
                    28:94:fb:19:4b:85:ad:35:3a:7c:87:06:f0:c2:aa:
                    19:0d:b1:1c:63:72:93:a9:d5:ad:11:31:b4:26:b7:
                    3c:56:9c:7b:ad:d7:6e:5e:5c:6c:45:7c:c5:88:ee:
                    c4:62:74:15:3f:50:03:8d:7f:a9:11:4d:bf:ff:6c:
                    a1:c0:2c:2e:2b:fd:8f:38:6e:b5:33:ec:d3:10:c3:
                    2e:ed:4a:03:2f:69:5c:ec:e2:8e:0e:96:ce:b4:58:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:F8:A3:4C:61:A1:2B:F4:88:5C:D2:96:EF:07:B0:7A:E8:46:9E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133362e35392e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:30:05:e6:e3:60:c2:f9:23:36:9f:61:67:4f:b7:87:4c:df:
         89:f3:16:1e:4e:0f:6b:09:9d:ee:b7:9e:4f:cc:d0:50:fb:b7:
         76:e7:12:86:3e:b5:99:08:de:dd:8b:f8:3b:aa:55:c3:49:9a:
         2c:9c:29:c5:36:ee:fc:6c:09:5b:3f:39:ad:d1:04:f9:9c:6a:
         22:30:9e:da:73:99:4e:0a:85:e3:37:d8:24:06:d5:d1:87:0e:
         00:7a:10:18:59:82:ed:1b:aa:07:e3:a0:0d:13:8e:a8:eb:11:
         3d:35:b2:c8:7a:47:1f:45:20:d0:fe:de:51:d9:8f:7f:0c:1f:
         5c:1e:78:0b:e8:d9:bd:96:c7:53:fb:27:1c:f3:c0:f9:ee:36:
         42:2e:4c:03:0c:1a:00:3d:41:26:e6:10:0c:40:0b:d7:c2:a5:
         51:0d:05:6a:19:a3:82:2d:fa:14:d6:be:d1:a3:b8:51:e4:6e:
         25:30:ef:e2:b4:b4:58:09:7f:e1:00:8c:10:e1:54:33:bc:40:
         38:67:b0:d9:81:a8:de:cf:3a:df:81:15:35:b5:08:82:23:46:
         cb:ec:51:9b:ff:65:a3:f2:59:30:85:35:11:ac:0c:84:1a:93:
         68:8b:38:d5:93:f5:8f:d1:ab:a3:92:e0:23:b2:66:fd:00:bd:
         fd:a0:29:84
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUDBL7wV5tvp7zsJq/WyU8adWqzUswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDYyOTEwNTUwNloX
DTIyMDYyOTExMDAwNlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBMDM3NkM1OTA4N0U5NkRFMzFGMzhFODBBQ0VEQzZFNTRCQUE1QTA1QzZG
RTMwQjREMkM3M0U5OEYyREMxMTdBQkU4MDZBRjYxQkU0NDc5QjJBQ0U4MUNENDk4
MzIwOTE1RjQyM0E2MUE3RTUzMkMzNDE2QUU3RjM5QjE3NDlCRUY2NzhGRDg3MDVF
NjkzNzZGOUIwNkY3REU2NzlERTZEOTEyRjE4NjZFNjQ5OThEOTAxQUZGM0QyRjZG
MERGQjA5N0RFOTA3NjY5MDk5NDNFREYxM0EyODFEMzVDQUVFRUY2RjQzMTlCRDlG
NzMyNEI3QkVCM0MzNTZCQUY2NkIwOTVDOTgwQkQ4NDhGRTI4RjU2NzdDRTUyOUEw
ODRENTg3QjMzNTJENjI4QjhBREIyNTM5Qjg5MEFGMjVGRjI2QkFBRDZEQjREMjg5
NEZCMTk0Qjg1QUQzNTNBN0M4NzA2RjBDMkFBMTkwREIxMUM2MzcyOTNBOUQ1QUQx
MTMxQjQyNkI3M0M1NjlDN0JBREQ3NkU1RTVDNkM0NTdDQzU4OEVFQzQ2Mjc0MTUz
RjUwMDM4RDdGQTkxMTREQkZGRjZDQTFDMDJDMkUyQkZEOEYzODZFQjUzM0VDRDMx
MEMzMkVFRDRBMDMyRjY5NUNFQ0UyOEUwRTk2Q0VCNDU4NjI3RDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgN2xZCH6W3jHzjoCs7cbl
S6paBcb+MLTSxz6Y8twRer6AavYb5EebKs6BzUmDIJFfQjphp+Uyw0Fq5/ObF0m+
9nj9hwXmk3b5sG995nnebZEvGGbmSZjZAa/z0vbw37CX3pB2aQmUPt8TooHTXK7u
9vQxm9n3Mkt76zw1a69msJXJgL2Ej+KPVnfOUpoITVh7M1LWKLitslObiQryX/Jr
qtbbTSiU+xlLha01OnyHBvDCqhkNsRxjcpOp1a0RMbQmtzxWnHut125eXGxFfMWI
7sRidBU/UAONf6kRTb//bKHALC4r/Y84brUz7NMQwy7tSgMvaVzs4o4Ols60WGJ9
AgMBAAGjggH6MIIB9jAdBgNVHQ4EFgQUtXb4o0xhoSv0iFzSlu8HsHroRp4wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjB+BggrBgEF
BQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5l
dC9yZXBvL0lETklDLUlELzIvMzEzMDMzMmUzMTMzMzYyZTM1MzkyZTMwMmYzMjM0
MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniDswDQYJKoZIhvcNAQEL
BQADggEBAFUwBebjYML5IzafYWdPt4dM34nzFh5OD2sJne63nk/M0FD7t3bnEoY+
tZkI3t2L+DuqVcNJmiycKcU27vxsCVs/Oa3RBPmcaiIwntpzmU4KheM32CQG1dGH
DgB6EBhZgu0bqgfjoA0TjqjrET01ssh6Rx9FIND+3lHZj38MH1weeAvo2b2Wx1P7
JxzzwPnuNkIuTAMMGgA9QSbmEAxAC9fCpVENBWoZo4It+hTWvtGjuFHkbiUw7+K0
tFgJf+EAjBDhVDO8QDhnsNmBqN7POt+BFTW1CIIjRsvsUZv/ZaPyWTCFNRGsDIQa
k2iLONWT9Y/Rq6OS4COyZv0Avf2gKYQ=
-----END CERTIFICATE-----