Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32312e302f32342d3234203d3e203538333639.roa
File:                     3130332e3134342e32312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          q5Bi+170p8kYNKSsk8qjpo9CbzelBaObjHTVVQiA4Lk=
Subject key identifier:   CC:89:97:D7:66:7E:81:71:65:0B:F6:7E:C4:A2:10:DF:A1:98:11:20
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3491BDF34003EE42FEB4654C7E235EEE8A40D770
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32312e302f32342d3234203d3e203538333639.roa
Signing time:             Wed 23 Feb 2022 07:01:50 +0000
ROA not before:           Wed 23 Feb 2022 06:56:50 +0000
ROA not after:            Thu 23 Feb 2023 07:01:50 +0000
asID:                     58369
IP address blocks:        103.144.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:91:bd:f3:40:03:ee:42:fe:b4:65:4c:7e:23:5e:ee:8a:40:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 23 06:56:50 2022 GMT
            Not After : Feb 23 07:01:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:a9:f6:08:5d:a5:a9:a5:30:86:01:c3:3f:
                    85:a9:cd:1b:2a:ca:0d:98:5c:b6:c1:2a:f9:ce:7b:
                    5a:7d:74:b9:63:f3:27:8d:3b:81:0c:f5:2c:bb:0f:
                    f8:ff:9e:8f:fa:4f:a1:ac:fd:2e:c8:95:d5:86:6d:
                    2c:4e:e2:e2:e4:e8:e8:b6:4b:cf:a6:5e:b8:b1:ba:
                    0f:39:cb:2e:00:3f:a4:64:df:9e:2a:2f:4e:ec:ec:
                    af:8e:61:46:5c:2c:ed:2e:8d:dd:bc:c3:04:19:3f:
                    bc:e6:9f:3d:52:72:4a:59:4e:d3:16:4c:32:32:79:
                    59:fa:3b:8e:f2:9b:06:2d:32:16:a9:87:02:a8:5a:
                    ff:78:9e:f7:74:27:cd:6d:ec:af:33:b9:24:de:4c:
                    03:4a:b6:4c:df:43:ce:69:5d:25:90:e0:0a:37:7e:
                    93:b3:0c:cd:11:b0:8e:af:01:1d:30:51:2a:19:a4:
                    fd:3b:4a:d0:3d:62:2b:a7:8a:ee:be:18:a7:b9:80:
                    be:5b:86:24:00:cf:a8:23:af:90:79:2b:7a:12:d6:
                    cf:28:69:4e:93:49:28:7b:9c:14:2c:a8:2f:29:b2:
                    f0:97:c9:bb:56:06:e4:be:89:0f:fa:01:d7:c8:84:
                    90:6b:10:1b:8c:96:47:6b:18:bd:e3:f6:0d:a3:0e:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:97:D7:66:7E:81:71:65:0B:F6:7E:C4:A2:10:DF:A1:98:11:20
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134342e32312e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:93:6b:8c:03:de:8b:1e:38:c4:30:29:27:7e:af:02:09:12:
         d6:1b:16:d6:87:38:fc:9f:d3:7c:5a:b0:df:e4:0d:16:57:83:
         a2:c7:f2:36:a0:69:76:62:c9:63:b4:1f:b2:cb:94:64:90:12:
         e6:68:58:5a:c6:2a:85:32:65:f5:59:e6:07:79:50:b4:09:c7:
         65:ba:ab:16:f8:a9:f2:13:c6:40:13:79:18:86:53:9d:ec:e7:
         7d:f7:fa:99:89:6d:92:69:6e:ea:7a:fe:7f:38:73:5c:14:70:
         b8:d2:f5:96:be:89:7b:24:7e:d6:8b:90:a7:9f:1a:61:8c:34:
         fe:cd:71:f7:a1:68:72:e4:b1:45:53:56:76:71:11:e0:e4:9f:
         fd:53:b2:de:87:2f:e2:46:5c:ed:ec:b5:ce:cb:67:d2:b2:b0:
         88:bf:37:4c:a4:18:5a:38:b4:52:49:e3:9c:2a:53:8e:e5:d9:
         6a:35:87:11:dd:d7:b7:fb:ae:e1:bd:4f:12:aa:84:88:c7:15:
         3c:b8:8b:d1:6a:79:ac:1b:57:cc:7d:6d:19:d6:4f:74:b5:60:
         53:b0:77:35:a2:cf:23:92:28:80:84:bf:b5:23:f6:d9:37:b4:
         09:61:15:9f:e4:ec:c8:e0:85:89:18:a9:f6:a9:e6:f4:c4:a2:
         1e:8d:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----