Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32302e302f32332d3234203d3e203538333639.roa
File:                     3130332e3134342e32302e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          VrooYPPYvGwD2ywL+AbAeeDq7kSWSwrq0iEdgEADOMg=
Subject key identifier:   0A:0D:25:D8:2D:F0:69:3D:1B:B5:42:2B:22:DC:27:E3:55:D6:A3:07
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D1D7629AE0ED3237DE5EC95FD2A125ED3756FC5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32302e302f32332d3234203d3e203538333639.roa
Signing time:             Mon 26 Jul 2021 04:38:17 +0000
ROA not before:           Mon 26 Jul 2021 04:33:17 +0000
ROA not after:            Tue 26 Jul 2022 04:38:17 +0000
asID:                     58369
IP address blocks:        103.144.20.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:76:29:ae:0e:d3:23:7d:e5:ec:95:fd:2a:12:5e:d3:75:6f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 26 04:33:17 2021 GMT
            Not After : Jul 26 04:38:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:7a:f5:52:cf:80:24:d7:6a:42:4a:2f:d9:
                    c3:f5:b0:a0:71:6b:42:5b:cf:8c:bc:08:e0:cf:56:
                    8c:40:ae:d2:d9:0e:6c:d3:cf:4b:ed:10:cd:e5:d3:
                    33:f0:20:19:c1:ad:46:d1:1a:63:16:5f:3e:b2:ee:
                    53:2e:f1:c3:65:a5:d6:46:ff:b9:5a:ac:14:db:5a:
                    0c:e6:40:20:79:75:10:a7:ff:18:17:a9:30:9c:a7:
                    e8:82:47:2b:d4:68:8d:a0:76:15:6f:29:be:3e:93:
                    8f:a9:87:fe:55:56:45:17:bc:36:82:04:c1:a2:99:
                    94:54:a9:6d:53:32:aa:06:69:10:38:c2:1b:a5:1c:
                    f7:d9:1f:aa:3d:69:be:16:de:a6:f5:f9:2b:3c:a2:
                    74:6f:d2:3c:64:25:3e:bc:1a:b0:2c:6b:58:c1:5a:
                    12:8d:59:a2:8a:de:2b:7d:23:5d:d8:ef:d9:14:48:
                    ef:cd:8f:8d:7b:6f:af:67:47:80:21:58:39:4d:ca:
                    9b:5f:a8:bb:a6:4b:33:5b:ad:e0:43:28:d9:56:fd:
                    f9:0d:d0:95:e9:cc:33:a1:47:2f:29:89:7d:f6:7a:
                    d3:27:34:ea:2a:19:ce:56:1e:55:c4:98:80:66:5b:
                    ab:e2:84:da:2e:ab:74:4f:04:16:c2:7f:91:73:3d:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:25:D8:2D:F0:69:3D:1B:B5:42:2B:22:DC:27:E3:55:D6:A3:07
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32302e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:a2:f1:02:95:5b:85:ff:e7:7e:44:87:69:c5:57:a8:ad:70:
         2f:f8:41:d5:88:e1:47:8b:dc:da:b9:54:4c:15:61:22:e6:74:
         d7:d4:4e:2d:66:a6:8a:1f:be:da:91:b9:cd:e2:51:eb:6b:eb:
         b5:10:5f:8a:8c:ec:a2:62:26:f3:35:9d:23:1c:99:5f:42:24:
         78:c0:20:5b:c1:3b:4e:37:4f:b4:81:69:23:7e:60:7f:96:19:
         4b:67:4f:ef:6a:3a:71:5a:fe:78:3b:6c:0b:c4:de:72:1e:7a:
         2b:d2:96:ef:67:45:4c:f8:f0:22:2c:5b:de:57:4b:1a:c3:6a:
         41:49:67:58:25:24:6b:3c:22:2e:28:5b:67:1c:d6:72:68:b2:
         9e:ef:4a:3c:82:70:07:b6:41:3d:7c:bc:d1:ea:2e:75:b9:c6:
         60:e9:c3:ee:15:5b:8a:0f:71:50:64:0b:a6:4a:b0:d2:97:c0:
         93:b6:de:90:0b:af:e5:58:e8:75:00:41:bd:6c:a6:0f:b7:33:
         dc:31:30:4f:58:d7:fa:08:62:d7:b2:88:fa:f9:79:2f:79:60:
         31:dd:c7:59:62:ff:4f:57:d4:dc:2c:b8:6d:5b:33:bb:43:5a:
         95:3a:d9:07:60:9b:69:78:9a:52:5d:55:9f:8f:f2:6f:46:45:
         87:49:63:3d
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUTR12Ka4O0yN95eyV/SoSXtN1b8UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcyNjA0MzMxN1oX
DTIyMDcyNjA0MzgxN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBMkNCN0FGNTUyQ0Y4MDI0RDc2QTQyNEEyRkQ5QzNGNUIwQTA3MTZCNDI1
QkNGOENCQzA4RTBDRjU2OEM0MEFFRDJEOTBFNkNEM0NGNEJFRDEwQ0RFNUQzMzNG
MDIwMTlDMUFENDZEMTFBNjMxNjVGM0VCMkVFNTMyRUYxQzM2NUE1RDY0NkZGQjk1
QUFDMTREQjVBMENFNjQwMjA3OTc1MTBBN0ZGMTgxN0E5MzA5Q0E3RTg4MjQ3MkJE
NDY4OERBMDc2MTU2RjI5QkUzRTkzOEZBOTg3RkU1NTU2NDUxN0JDMzY4MjA0QzFB
Mjk5OTQ1NEE5NkQ1MzMyQUEwNjY5MTAzOEMyMUJBNTFDRjdEOTFGQUEzRDY5QkUx
NkRFQTZGNUY5MkIzQ0EyNzQ2RkQyM0M2NDI1M0VCQzFBQjAyQzZCNThDMTVBMTI4
RDU5QTI4QURFMkI3RDIzNUREOEVGRDkxNDQ4RUZDRDhGOEQ3QjZGQUY2NzQ3ODAy
MTU4Mzk0RENBOUI1RkE4QkJBNjRCMzM1QkFERTA0MzI4RDk1NkZERjkwREQwOTVF
OUNDMzNBMTQ3MkYyOTg5N0RGNjdBRDMyNzM0RUEyQTE5Q0U1NjFFNTVDNDk4ODA2
NjVCQUJFMjg0REEyRUFCNzQ0RjA0MTZDMjdGOTE3MzNENTNEOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiy3r1Us+AJNdqQkov2cP1
sKBxa0Jbz4y8CODPVoxArtLZDmzTz0vtEM3l0zPwIBnBrUbRGmMWXz6y7lMu8cNl
pdZG/7larBTbWgzmQCB5dRCn/xgXqTCcp+iCRyvUaI2gdhVvKb4+k4+ph/5VVkUX
vDaCBMGimZRUqW1TMqoGaRA4whulHPfZH6o9ab4W3qb1+Ss8onRv0jxkJT68GrAs
a1jBWhKNWaKK3it9I13Y79kUSO/Nj417b69nR4AhWDlNyptfqLumSzNbreBDKNlW
/fkN0JXpzDOhRy8piX32etMnNOoqGc5WHlXEmIBmW6vihNouq3RPBBbCf5FzPVPZ
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUCg0l2C3waT0btUIrItwn41XWowcwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM0MmUzMjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeQFDANBgkqhkiG
9w0BAQsFAAOCAQEAWKLxApVbhf/nfkSHacVXqK1wL/hB1YjhR4vc2rlUTBVhIuZ0
19ROLWamih++2pG5zeJR62vrtRBfiozsomIm8zWdIxyZX0IkeMAgW8E7TjdPtIFp
I35gf5YZS2dP72o6cVr+eDtsC8Tech56K9KW72dFTPjwIixb3ldLGsNqQUlnWCUk
azwiLihbZxzWcmiynu9KPIJwB7ZBPXy80eoudbnGYOnD7hVbig9xUGQLpkqw0pfA
k7bekAuv5VjodQBBvWymD7cz3DEwT1jX+ghi17KI+vl5L3lgMd3HWWL/T1fU3Cy4
bVszu0NalTrZB2CbaXiaUl1Vn4/yb0ZFh0ljPQ==
-----END CERTIFICATE-----