Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34362e302f32332d3234203d3e20313336313139.roa
File:                     3130332e3133382e34362e302f32332d3234203d3e20313336313139.roa (raw, json)
Hash identifier:          q3FL1lUniY8lmizh0KmgUaRiLzl9OkdVZvxjg47BtxE=
Subject key identifier:   37:C6:DF:79:C9:9E:B6:E3:C4:3D:61:65:53:7B:B9:F9:8E:92:A0:67
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2229F49419CDED999986F85A137A6AF5739BF6F9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34362e302f32332d3234203d3e20313336313139.roa
Signing time:             Sat 13 Nov 2021 07:00:00 +0000
ROA not before:           Sat 13 Nov 2021 06:55:00 +0000
ROA not after:            Sun 13 Nov 2022 07:00:00 +0000
asID:                     136119
IP address blocks:        103.138.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:29:f4:94:19:cd:ed:99:99:86:f8:5a:13:7a:6a:f5:73:9b:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 13 06:55:00 2021 GMT
            Not After : Nov 13 07:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:b5:f4:00:b9:d7:62:6e:8f:1a:57:52:24:
                    da:db:ee:dd:dc:4b:cf:3e:eb:7f:26:c6:54:60:9c:
                    df:5a:ff:8e:d1:18:db:92:40:9b:e4:d3:33:99:b2:
                    11:73:68:a1:4f:59:d4:20:87:e4:59:04:7d:28:38:
                    1a:9c:8b:95:ec:12:d5:45:10:36:63:db:a9:eb:14:
                    f1:b8:5a:43:f3:cc:99:39:31:d7:16:28:1f:9a:9e:
                    3a:3b:6c:2e:2c:55:17:31:b0:30:d2:89:4a:f8:8e:
                    be:4a:bb:bb:bd:2e:ca:f7:bb:ba:f6:3c:03:49:f9:
                    0c:d0:be:1e:fd:4a:b0:1d:d0:c9:11:d8:6e:fe:3b:
                    78:d5:c9:76:03:d0:97:17:4e:cf:8c:fe:ee:09:04:
                    59:25:51:66:05:be:03:18:3c:89:1b:57:e0:2a:a0:
                    40:bf:83:ef:ff:e9:ff:3e:9c:40:a5:29:36:2c:d9:
                    e1:5d:a0:e5:ad:a3:37:2d:f8:b0:18:b7:6f:fc:ce:
                    f1:96:85:9d:8e:c3:ed:5b:c8:62:50:b5:97:75:fb:
                    a6:a6:ad:41:7d:ac:40:62:3c:70:b8:45:6d:f6:3f:
                    0c:c6:c6:92:dd:46:f4:fe:b3:dc:72:37:11:62:5f:
                    5a:9e:c5:f7:7a:46:6e:4f:e0:55:ca:29:26:58:2e:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C6:DF:79:C9:9E:B6:E3:C4:3D:61:65:53:7B:B9:F9:8E:92:A0:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133382e34362e302f32332d3234203d3e20313336313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:1b:65:d7:f9:10:b0:27:29:42:3c:6e:93:84:ef:c1:e5:
         b9:cb:07:98:08:83:9a:42:d5:24:af:69:de:70:0c:c3:7f:0f:
         e7:1a:56:fc:36:5d:f2:cb:a8:f2:6d:7f:6e:b2:d9:2b:ce:79:
         3b:c9:44:1c:0c:69:61:47:71:af:0a:b7:29:67:9e:7c:0f:33:
         93:87:77:2b:9d:e8:cc:b6:5a:0a:8e:7e:b0:bd:60:2a:43:b2:
         20:43:0f:b9:b8:80:a9:82:e9:11:39:4b:67:ea:71:37:92:8c:
         f0:63:18:0d:df:e7:f6:6a:4c:8c:79:1e:b8:0d:0c:d3:24:8f:
         2c:f4:c1:fd:cc:a0:eb:d3:a0:b6:d0:a8:c7:61:b1:8d:bb:e8:
         0a:ef:d3:1f:be:57:43:47:01:11:69:32:7e:ee:dc:8a:59:83:
         f1:65:da:5d:63:4e:65:38:ae:36:90:92:9b:d5:18:8e:81:14:
         f0:71:56:47:08:c5:a7:5e:52:12:09:9d:f7:be:32:a7:a4:64:
         79:44:da:95:f2:83:7d:d8:46:86:56:11:1e:f9:43:f5:de:94:
         a5:5e:dd:de:d8:93:15:8d:4b:67:00:31:2e:f8:fb:a9:92:64:
         a9:4a:15:f8:97:8f:9f:36:4e:50:0d:d8:61:d9:6a:05:ff:0c:
         c7:38:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----