Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34302e302f32332d3234203d3e20313336313139.roa
File:                     3130332e3133382e34302e302f32332d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          e4vF1uHHQSeJdOexqrRjWUXIpV11tRrMnHn1OhMHWSM=
Subject key identifier:   75:06:D1:A3:D9:1D:AF:71:FC:26:D0:E6:5B:4C:B9:5B:59:EC:04:13
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7315203327AFAD7FC397C979FA6D80F5F556A08C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34302e302f32332d3234203d3e20313336313139.roa
Signing time:             Sat 13 Nov 2021 07:00:00 +0000
ROA not before:           Sat 13 Nov 2021 06:55:00 +0000
ROA not after:            Sun 13 Nov 2022 07:00:00 +0000
asID:                     136119
IP address blocks:        103.138.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:15:20:33:27:af:ad:7f:c3:97:c9:79:fa:6d:80:f5:f5:56:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 13 06:55:00 2021 GMT
            Not After : Nov 13 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:c5:49:d4:01:b8:f5:a7:ee:73:73:76:ea:
                    e2:b9:9a:e1:40:ee:fe:4e:64:a9:b4:13:34:40:e0:
                    ec:cc:e6:2f:8d:03:ea:27:b5:a1:e2:82:35:4a:b7:
                    1c:43:b5:fc:31:18:2e:f2:72:f3:0d:8b:6a:13:c7:
                    f2:59:7a:75:f2:20:e3:6f:54:6b:f0:96:3b:19:cd:
                    35:39:10:b9:87:8a:8f:e0:cb:32:dd:f2:77:51:41:
                    96:21:90:aa:00:e6:b9:6c:27:68:b0:bf:20:d2:e5:
                    ef:0f:91:5e:66:25:7b:e8:aa:41:6b:af:ce:af:27:
                    b0:26:d6:ac:eb:dc:cd:84:98:09:be:9a:c0:6b:39:
                    15:e2:e0:30:04:27:c4:11:32:48:1c:b8:de:6f:f5:
                    fe:b4:b2:f8:31:fa:ae:98:9e:64:12:2f:9f:f3:2b:
                    d1:33:6e:24:3c:4f:be:9a:ea:1e:1c:c1:c4:f2:cf:
                    71:67:ea:50:4f:14:6a:1a:52:08:b5:8a:6c:3f:0d:
                    4c:83:10:22:19:f3:8d:68:dd:49:eb:eb:ff:13:94:
                    50:ff:1c:79:08:47:1f:2f:15:87:ce:7b:87:e4:d6:
                    2f:5b:3e:2d:c5:6e:c7:00:25:28:c4:00:dc:ca:25:
                    77:c1:86:bd:bc:4d:c9:25:57:e3:7d:7e:52:cd:b1:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:D1:A3:D9:1D:AF:71:FC:26:D0:E6:5B:4C:B9:5B:59:EC:04:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34302e302f32332d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:51:38:07:eb:6a:56:2b:0e:a0:ad:09:0c:6e:62:78:74:
         d9:3d:2c:bc:9c:67:7f:b1:07:b8:03:46:a4:b1:e4:a6:0b:96:
         ae:c5:ae:21:07:a4:27:60:3b:70:fd:ce:25:d9:f1:0e:0d:0a:
         25:a0:1c:17:11:68:67:00:cd:e7:f8:b0:7e:40:e1:fb:a1:f3:
         b7:14:9d:29:f3:12:6c:a3:6e:4f:c9:a2:e2:e6:46:ee:2c:a0:
         ca:fa:54:21:b0:b2:c5:7d:ed:54:17:38:3c:8d:57:bc:81:de:
         41:2a:c7:05:ef:03:fd:67:57:be:5e:37:91:28:74:94:7f:20:
         68:f4:14:48:76:c8:4e:71:ef:a9:a6:f4:22:f7:a0:5e:99:3f:
         83:dc:b5:16:a3:86:ae:22:2d:03:6f:0f:bb:02:e9:6d:9b:5c:
         31:79:d3:44:8c:9d:bc:a7:48:06:a0:5e:1e:0e:09:6b:46:e2:
         9b:ba:1e:31:54:6d:c1:51:12:d7:5d:3d:fd:21:36:b6:c7:f1:
         41:32:f6:75:67:1e:a6:c1:08:8f:42:57:7a:d0:22:ef:9e:a2:
         80:c7:6b:e0:a1:75:e4:c1:e4:77:6d:89:20:83:61:4b:eb:65:
         be:b4:a2:50:51:e0:e4:ce:65:b0:79:ae:e3:e3:d8:40:25:76:
         2f:2c:6c:dd
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUcxUgMyevrX/Dl8l5+m2A9fVWoIwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMzA2NTUwMFoX
DTIyMTExMzA3MDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDQzNEQzU0OUQ0MDFCOEY1QTdFRTczNzM3NkVBRTJCOTlBRTE0MEVFRkU0
RTY0QTlCNDEzMzQ0MEUwRUNDQ0U2MkY4RDAzRUEyN0I1QTFFMjgyMzU0QUI3MUM0
M0I1RkMzMTE4MkVGMjcyRjMwRDhCNkExM0M3RjI1OTdBNzVGMjIwRTM2RjU0NkJG
MDk2M0IxOUNEMzUzOTEwQjk4NzhBOEZFMENCMzJEREYyNzc1MTQxOTYyMTkwQUEw
MEU2Qjk2QzI3NjhCMEJGMjBEMkU1RUYwRjkxNUU2NjI1N0JFOEFBNDE2QkFGQ0VB
RjI3QjAyNkQ2QUNFQkRDQ0Q4NDk4MDlCRTlBQzA2QjM5MTVFMkUwMzAwNDI3QzQx
MTMyNDgxQ0I4REU2RkY1RkVCNEIyRjgzMUZBQUU5ODlFNjQxMjJGOUZGMzJCRDEz
MzZFMjQzQzRGQkU5QUVBMUUxQ0MxQzRGMkNGNzE2N0VBNTA0RjE0NkExQTUyMDhC
NThBNkMzRjBENEM4MzEwMjIxOUYzOEQ2OERENDlFQkVCRkYxMzk0NTBGRjFDNzkw
ODQ3MUYyRjE1ODdDRTdCODdFNEQ2MkY1QjNFMkRDNTZFQzcwMDI1MjhDNDAwREND
QTI1NzdDMTg2QkRCQzREQzkyNTU3RTM3RDdFNTJDREIxOTZCOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPcVJ1AG49afuc3N26uK5
muFA7v5OZKm0EzRA4OzM5i+NA+ontaHigjVKtxxDtfwxGC7ycvMNi2oTx/JZenXy
IONvVGvwljsZzTU5ELmHio/gyzLd8ndRQZYhkKoA5rlsJ2iwvyDS5e8PkV5mJXvo
qkFrr86vJ7Am1qzr3M2EmAm+msBrORXi4DAEJ8QRMkgcuN5v9f60svgx+q6YnmQS
L5/zK9EzbiQ8T76a6h4cwcTyz3Fn6lBPFGoaUgi1imw/DUyDECIZ841o3Unr6/8T
lFD/HHkIRx8vFYfOe4fk1i9bPi3FbscAJSjEANzKJXfBhr28TcklV+N9flLNsZa5
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUdQbRo9kdr3H8JtDmW0y5W1nsBBMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzMzM4MmUzNDMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4ooMA0GCSqG
SIb3DQEBCwUAA4IBAQB43FE4B+tqVisOoK0JDG5ieHTZPSy8nGd/sQe4A0akseSm
C5auxa4hB6QnYDtw/c4l2fEODQoloBwXEWhnAM3n+LB+QOH7ofO3FJ0p8xJso25P
yaLi5kbuLKDK+lQhsLLFfe1UFzg8jVe8gd5BKscF7wP9Z1e+XjeRKHSUfyBo9BRI
dshOce+ppvQi96BemT+D3LUWo4auIi0Dbw+7Aultm1wxedNEjJ28p0gGoF4eDglr
RuKbuh4xVG3BURLXXT39ITa2x/FBMvZ1Zx6mwQiPQld60CLvnqKAx2vgoXXkweR3
bYkgg2FL62W+tKJQUeDkzmWwea7j49hAJXYvLGzd
-----END CERTIFICATE-----