Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3132362e302f32332d3234203d3e203538333639.roa
File:                     3130332e3134342e3132362e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          0djkKGBY7gvQwpPP5et60FiBzkpgJT3FOkM1QhzdI1U=
Subject key identifier:   3B:42:5C:AC:B0:79:94:52:94:95:AD:A7:17:C0:6F:B9:A7:C4:87:D2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16416B51823F6158E68B3B73CDBCB18D1916B1D5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3132362e302f32332d3234203d3e203538333639.roa
Signing time:             Thu 30 Dec 2021 08:01:01 +0000
ROA not before:           Thu 30 Dec 2021 07:56:01 +0000
ROA not after:            Fri 30 Dec 2022 08:01:01 +0000
asID:                     58369
IP address blocks:        103.144.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:41:6b:51:82:3f:61:58:e6:8b:3b:73:cd:bc:b1:8d:19:16:b1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 30 07:56:01 2021 GMT
            Not After : Dec 30 08:01:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:6d:4c:5c:b4:8e:a9:0c:78:9d:11:9f:66:
                    99:05:4a:cc:a0:d1:6d:36:7f:40:ef:95:94:b4:b5:
                    b8:a1:80:d6:68:b3:fc:49:10:d0:c1:7f:4b:8e:a5:
                    46:90:2a:39:81:32:ea:95:7a:2c:60:81:11:04:db:
                    50:65:a6:40:ac:2c:40:a0:39:56:4f:7f:16:ae:fa:
                    02:3b:fe:8f:5e:e5:da:16:a4:3a:2f:78:04:05:ad:
                    a2:46:02:48:a5:ac:53:27:a1:be:0c:f7:1c:b9:f2:
                    89:c0:0c:1d:70:32:43:17:90:2d:ab:94:65:7c:83:
                    4c:c5:d7:06:5b:da:5c:ed:24:1c:97:ac:f5:78:60:
                    9d:5d:ae:da:bf:36:59:96:e4:a8:ff:11:57:e5:56:
                    4f:43:f6:bd:c6:05:ee:92:6c:bb:b0:5c:3a:63:dd:
                    5d:77:e9:e6:92:f1:d2:77:75:b3:36:93:ef:b8:bf:
                    f6:00:cc:7f:e9:ff:0e:f4:34:6b:d4:ed:5d:cf:5c:
                    3b:ed:51:10:84:48:db:ab:68:db:6c:08:e7:57:00:
                    3f:64:dd:d3:12:a3:37:d6:5a:e5:7d:58:6e:62:00:
                    45:18:e1:9c:d3:a2:9c:fa:1b:dd:97:aa:d4:70:f6:
                    b9:48:df:4a:72:f2:d7:2f:ed:da:ab:e6:32:0b:4d:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:5C:AC:B0:79:94:52:94:95:AD:A7:17:C0:6F:B9:A7:C4:87:D2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e3132362e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:31:3a:d6:4e:78:30:f7:e5:8a:74:4c:0b:6e:9f:5f:f6:0b:
         0d:fd:5b:19:9a:9d:77:3c:3d:52:9e:77:93:a7:22:22:26:e1:
         fa:8d:18:13:70:f4:b9:14:01:45:00:20:87:11:0c:0a:c7:47:
         8a:41:11:05:b1:7c:9f:f0:52:bd:64:f7:fc:0b:d1:af:64:ae:
         1c:0f:ff:4e:29:0a:e6:b6:2c:8a:64:48:e3:9e:ad:22:3b:ec:
         0a:d4:15:36:52:cd:99:56:f2:7f:69:85:7c:5a:cc:6a:23:e7:
         6c:a9:0f:ad:a1:c1:c4:7a:17:ae:95:86:5a:2f:e8:51:23:0e:
         bc:44:27:a9:13:98:1b:b8:2f:b0:cb:a5:31:ac:35:03:be:68:
         98:f3:a0:34:74:e7:b7:ea:8b:ac:44:e5:35:e8:b9:16:4a:d9:
         d8:ea:79:3e:fd:ac:1b:e5:cb:4d:e3:58:74:c5:ff:c3:b3:a2:
         53:bb:62:1b:68:d5:2a:9f:8f:17:ac:91:02:25:a3:01:f8:6d:
         04:a6:db:43:0e:8b:d5:c2:76:d8:78:2f:57:ed:d3:2e:3d:0b:
         78:51:22:fa:b1:8f:85:14:9e:12:eb:f8:da:70:29:23:7c:f1:
         bb:ca:55:03:43:b2:58:3c:02:cf:45:23:e2:ad:f6:ec:12:e2:
         74:3e:35:c2
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUFkFrUYI/YVjmiztzzbyxjRkWsdUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTIzMDA3NTYwMVoX
DTIyMTIzMDA4MDEwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCREQyNkQ0QzVDQjQ4RUE5MEM3ODlEMTE5RjY2OTkwNTRBQ0NBMEQxNkQz
NjdGNDBFRjk1OTRCNEI1QjhBMTgwRDY2OEIzRkM0OTEwRDBDMTdGNEI4RUE1NDY5
MDJBMzk4MTMyRUE5NTdBMkM2MDgxMTEwNERCNTA2NUE2NDBBQzJDNDBBMDM5NTY0
RjdGMTZBRUZBMDIzQkZFOEY1RUU1REExNkE0M0EyRjc4MDQwNUFEQTI0NjAyNDhB
NUFDNTMyN0ExQkUwQ0Y3MUNCOUYyODlDMDBDMUQ3MDMyNDMxNzkwMkRBQjk0NjU3
QzgzNENDNUQ3MDY1QkRBNUNFRDI0MUM5N0FDRjU3ODYwOUQ1REFFREFCRjM2NTk5
NkU0QThGRjExNTdFNTU2NEY0M0Y2QkRDNjA1RUU5MjZDQkJCMDVDM0E2M0RENUQ3
N0U5RTY5MkYxRDI3Nzc1QjMzNjkzRUZCOEJGRjYwMENDN0ZFOUZGMEVGNDM0NkJE
NEVENURDRjVDM0JFRDUxMTA4NDQ4REJBQjY4REI2QzA4RTc1NzAwM0Y2NERERDMx
MkEzMzdENjVBRTU3RDU4NkU2MjAwNDUxOEUxOUNEM0EyOUNGQTFCREQ5N0FBRDQ3
MEY2Qjk0OERGNEE3MkYyRDcyRkVEREFBQkU2MzIwQjREQTJGOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90m1MXLSOqQx4nRGfZpkF
Ssyg0W02f0DvlZS0tbihgNZos/xJENDBf0uOpUaQKjmBMuqVeixggREE21BlpkCs
LECgOVZPfxau+gI7/o9e5doWpDoveAQFraJGAkilrFMnob4M9xy58onADB1wMkMX
kC2rlGV8g0zF1wZb2lztJByXrPV4YJ1drtq/NlmW5Kj/EVflVk9D9r3GBe6SbLuw
XDpj3V136eaS8dJ3dbM2k++4v/YAzH/p/w70NGvU7V3PXDvtURCESNuraNtsCOdX
AD9k3dMSozfWWuV9WG5iAEUY4ZzTopz6G92XqtRw9rlI30py8tcv7dqr5jILTaL5
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUO0JcrLB5lFKUla2nF8BvuafEh9IwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM0MmUzMTMyMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5B+MA0GCSqG
SIb3DQEBCwUAA4IBAQCHMTrWTngw9+WKdEwLbp9f9gsN/VsZmp13PD1SnneTpyIi
JuH6jRgTcPS5FAFFACCHEQwKx0eKQREFsXyf8FK9ZPf8C9GvZK4cD/9OKQrmtiyK
ZEjjnq0iO+wK1BU2Us2ZVvJ/aYV8WsxqI+dsqQ+tocHEeheulYZaL+hRIw68RCep
E5gbuC+wy6UxrDUDvmiY86A0dOe36ousROU16LkWStnY6nk+/awb5ctN41h0xf/D
s6JTu2IbaNUqn48XrJECJaMB+G0EpttDDovVwnbYeC9X7dMuPQt4USL6sY+FFJ4S
6/jacCkjfPG7ylUDQ7JYPALPRSPirfbsEuJ0PjXC
-----END CERTIFICATE-----