Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232342e302f32332d3234203d3e20313332363431.roa
File:                     3130332e3134352e3232342e302f32332d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          Jp1fdc9KCDLMZey1rkt95BHMnxvZgCwmMGxNUIoOqkE=
Subject key identifier:   00:A3:E1:0D:A0:DD:1B:3D:8E:FF:38:9E:CF:6E:59:E8:6B:CD:3D:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       607F9F1EBB63DA67D0C618F7A3834935570DB52B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232342e302f32332d3234203d3e20313332363431.roa
Signing time:             Mon 14 Jun 2021 04:28:50 +0000
ROA not before:           Mon 14 Jun 2021 04:23:50 +0000
ROA not after:            Tue 14 Jun 2022 04:28:50 +0000
asID:                     132641
IP address blocks:        103.145.224.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:9f:1e:bb:63:da:67:d0:c6:18:f7:a3:83:49:35:57:0d:b5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 04:23:50 2021 GMT
            Not After : Jun 14 04:28:50 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:b4:9c:af:02:aa:c5:81:2a:d6:dc:31:b2:
                    46:5f:f4:fe:f8:f8:c1:56:4c:c3:8b:80:9b:7f:c8:
                    0b:97:09:33:6c:9d:a7:89:5e:79:19:24:28:1e:dd:
                    67:e6:b8:ab:ce:47:97:88:87:42:37:b1:55:cb:34:
                    bb:93:4e:54:ab:18:7c:8f:5c:bd:54:30:57:b6:94:
                    43:76:7d:84:0b:51:6b:db:84:59:d3:a4:22:03:7e:
                    2f:7d:c4:6d:da:a2:97:79:16:4e:f7:45:0e:04:dc:
                    a9:1b:b6:d8:a9:9c:d3:bc:31:7a:3f:de:1b:93:1b:
                    6e:80:d5:1c:d4:a7:19:88:37:20:3e:19:db:a8:2b:
                    9f:9a:26:2b:fb:26:0f:2a:6a:48:b3:19:cd:3f:a8:
                    40:04:eb:e5:af:18:13:ac:04:49:77:80:c4:3b:e9:
                    73:14:d9:b5:d1:93:6b:99:7b:72:97:28:4a:51:4c:
                    59:40:16:62:7c:e8:0c:1d:cb:19:52:73:cb:b4:5b:
                    f9:55:2a:7b:41:14:45:74:bc:b9:53:7d:e9:a8:19:
                    68:9f:7e:a8:35:b2:59:51:75:8f:03:06:f3:1b:1a:
                    bb:1f:df:4f:9e:f0:29:54:9e:bf:04:dd:e9:26:6f:
                    71:34:e9:b4:cc:1f:52:c1:1a:9e:58:f0:d3:be:97:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:E1:0D:A0:DD:1B:3D:8E:FF:38:9E:CF:6E:59:E8:6B:CD:3D:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134352e3232342e302f32332d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:93:3a:21:46:14:5a:37:a2:16:c6:54:83:0b:02:8c:81:d6:
         b1:66:c1:ad:04:47:d8:8f:35:2c:83:be:35:b0:d6:12:c3:58:
         48:70:1f:84:ee:ec:4f:15:00:87:4e:dc:bf:66:2d:41:b9:ae:
         36:9c:16:a7:6d:b1:6c:b9:75:16:01:87:7d:e6:5a:97:fb:79:
         2f:cd:80:79:0c:5b:c0:48:7c:d4:ba:02:dd:fc:a1:b3:d5:b3:
         bd:40:72:a4:a0:64:04:79:6a:ec:94:39:7e:2d:f6:a9:70:36:
         61:31:e2:16:0a:44:31:5a:98:1d:80:4f:82:22:7c:14:d7:ff:
         0b:c4:59:98:ba:db:de:a1:39:1f:96:cb:22:53:13:46:65:e8:
         c2:e9:c2:8b:9a:ad:0a:c5:c5:31:bf:68:12:ba:a8:fa:60:36:
         66:47:02:92:86:df:5c:9f:f2:59:50:0b:be:da:21:22:ff:f3:
         da:33:d4:63:ed:d2:84:79:b0:87:3e:57:e4:bd:61:d0:43:1e:
         1d:7e:92:bf:29:75:df:08:fd:1c:39:1c:3d:46:1f:ec:6d:b2:
         00:5f:77:f3:51:68:7b:ef:a4:9d:b9:1d:4e:e8:7d:f9:74:96:
         a5:3c:cf:d5:cb:70:9f:c9:f9:7a:31:71:fe:5f:26:47:58:9f:
         96:f2:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----