Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3132342e302f32342d3234203d3e2030.roa
File:                     3130332e3134352e3132342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          Y2h47B9KjQAV+Mo4CNgy0rL1KkADN/tz+jM+9oAoqRA=
Subject key identifier:   02:41:D2:06:7A:55:F7:79:99:CE:C0:02:3F:73:FA:25:D3:0F:16:F6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       450018425AF5D3D189D150F5DD4B359F9E5FDF20
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3132342e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:22:36 +0000
ROA not before:           Wed 02 Feb 2022 06:17:36 +0000
ROA not after:            Thu 02 Feb 2023 06:22:36 +0000
asID:                     0
IP address blocks:        103.145.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:18:42:5a:f5:d3:d1:89:d1:50:f5:dd:4b:35:9f:9e:5f:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:17:36 2022 GMT
            Not After : Feb  2 06:22:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:0f:4a:28:aa:9c:9b:ca:6f:33:31:3c:13:
                    67:91:ce:36:70:87:2b:21:94:eb:c8:fd:9c:41:ff:
                    4c:f1:2f:dc:4f:d4:e6:60:01:c0:9e:04:e7:d3:1c:
                    3a:39:ad:e3:0a:68:56:03:16:b1:c3:6d:9b:37:fe:
                    9e:9d:e5:7a:14:52:9e:7e:58:60:67:af:13:76:e9:
                    8f:bd:33:0e:2a:53:ec:c3:19:70:33:a2:a6:b4:19:
                    54:46:43:60:c4:17:76:d4:25:cd:1e:e7:e8:b4:5d:
                    87:ec:ce:db:28:15:cc:37:fd:e0:5f:da:e0:81:34:
                    9c:a3:48:de:57:7c:a5:8d:7c:59:7b:03:b5:6a:94:
                    7d:dc:00:70:24:44:ed:2a:91:3e:ca:e1:67:a7:af:
                    c3:c9:46:f0:7e:fa:df:2b:b9:1d:1d:a8:01:5d:c3:
                    d6:f1:36:a8:44:9c:8c:23:7d:22:4f:ca:cf:eb:82:
                    d6:d7:d1:23:f3:0c:89:4f:df:59:6d:25:51:b9:e3:
                    98:c8:c3:83:b5:4d:e7:da:e5:e2:a4:90:d8:2c:32:
                    8a:34:f1:3f:15:54:f3:d6:fd:1f:b7:46:bb:1c:c4:
                    a1:cb:54:fd:3d:2d:33:d8:f7:47:18:c7:91:03:96:
                    51:ac:d4:c4:96:33:66:92:b9:27:98:b2:fd:1e:95:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:D2:06:7A:55:F7:79:99:CE:C0:02:3F:73:FA:25:D3:0F:16:F6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3132342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:69:d6:2a:26:7b:b7:0c:72:82:d1:2c:5f:60:e7:e9:8f:
         35:01:30:cb:9a:5a:a8:a3:06:f4:f0:a9:d7:a4:d3:ba:45:7c:
         8f:28:4f:bb:e3:45:e8:26:12:25:7e:34:8b:3a:fa:a4:2c:50:
         c7:99:20:49:0b:4d:c9:61:a1:18:ea:fc:df:f6:f1:52:f4:09:
         f0:d8:4a:a4:1f:bc:32:65:90:0c:0d:29:90:fd:98:3f:cf:0d:
         32:01:92:15:ee:de:6c:03:dc:e5:a2:33:60:7a:00:99:bd:22:
         93:4b:6c:b1:7e:e6:c7:c6:b1:7c:f4:cf:5c:ea:0e:14:7b:5e:
         f6:0d:d8:c7:17:10:d9:57:46:a4:4a:fa:ea:5a:7d:56:49:3c:
         bf:71:8c:fb:c6:b9:b4:4e:39:e9:d1:3c:5e:3f:38:78:61:b4:
         37:ad:dd:fa:3d:e7:f0:30:3d:94:88:f7:49:4e:00:77:b0:e5:
         57:05:21:14:4b:91:12:1d:22:89:49:8e:f0:7e:24:b2:98:56:
         3f:32:87:19:11:66:4a:f2:91:d9:ec:bd:18:f6:0b:ab:dc:7f:
         0e:f6:8d:57:dc:cc:18:ae:ae:1b:1b:07:73:1d:59:b3:82:19:
         14:fb:b6:0f:4b:97:ac:dd:e7:e5:c4:05:c0:a9:40:08:07:2f:
         e6:a3:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----