Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3131322e302f32332d3234203d3e20313339393933.roa
File:                     3130332e3134382e3131322e302f32332d3234203d3e20313339393933.roa (raw, json)
Hash identifier:          agyjZ2E3qCARq/Ps5/AatMr8XoBLKS04GW1D2NtUSOc=
Subject key identifier:   14:06:91:49:52:64:69:8E:77:AE:4C:CF:53:12:8E:56:79:C3:F6:18
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5FB447AC3729C03196852006E3E95927A9E1C86F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3131322e302f32332d3234203d3e20313339393933.roa
Signing time:             Fri 12 Nov 2021 04:00:01 +0000
ROA not before:           Fri 12 Nov 2021 03:55:01 +0000
ROA not after:            Sat 12 Nov 2022 04:00:01 +0000
asID:                     139993
IP address blocks:        103.148.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b4:47:ac:37:29:c0:31:96:85:20:06:e3:e9:59:27:a9:e1:c8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 12 03:55:01 2021 GMT
            Not After : Nov 12 04:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:4e:a5:5f:90:2e:e0:d5:f4:e1:39:e3:c0:
                    ed:3e:bf:4c:9b:e0:14:bb:ec:8d:77:11:88:e7:14:
                    99:3d:86:32:ab:cd:8a:e1:51:00:be:6d:d8:f2:1c:
                    63:ac:c3:c6:e6:0c:ab:56:87:7c:b6:72:d5:e2:d7:
                    7e:05:e0:0e:ba:9e:94:56:dc:84:7a:f9:b2:43:79:
                    c6:36:90:00:3e:07:1e:93:93:04:e1:de:0d:60:e1:
                    6e:89:1a:84:4e:d6:de:58:26:2b:dc:2f:d2:69:ec:
                    f1:b5:29:6b:e2:be:43:44:04:aa:fd:97:f9:8b:2a:
                    07:86:70:92:c4:34:d3:3d:4e:d9:ef:df:bd:32:0d:
                    09:fc:30:d3:42:bc:b5:9f:09:f2:29:dc:0b:45:52:
                    c8:a9:bf:f9:48:0e:18:76:d4:1d:04:b2:1c:40:11:
                    02:ab:d1:cb:03:d3:02:dc:9a:ce:b4:95:77:78:da:
                    d7:db:c0:8e:32:26:26:96:23:f7:f6:4e:37:78:b8:
                    1a:ef:7c:94:2e:7f:09:80:61:08:06:9f:4f:ee:07:
                    1b:79:42:3c:9d:a1:55:c2:13:ae:47:b1:3e:0f:35:
                    ea:20:14:31:81:aa:9d:53:84:15:7a:54:7e:32:b4:
                    e3:34:6f:34:99:d0:4a:58:34:54:6f:74:0d:b6:26:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:06:91:49:52:64:69:8E:77:AE:4C:CF:53:12:8E:56:79:C3:F6:18
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3131322e302f32332d3234203d3e20313339393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:55:b9:cd:8d:ab:80:8c:49:f4:66:ab:9b:24:ee:4a:c8:
         e8:f2:d3:35:55:65:f3:67:48:26:73:06:a1:7e:f9:1e:bf:24:
         69:e3:40:cf:58:ed:45:b5:c5:73:5a:21:2c:d8:50:73:cd:92:
         f6:5e:22:2b:31:40:fa:93:22:43:e9:bf:42:98:c2:03:3d:88:
         07:f8:31:d7:e6:4c:6a:3a:ef:aa:b3:0c:e5:07:20:ab:5a:d7:
         ca:bf:75:82:0c:26:2c:c1:36:7c:d2:25:c4:1c:59:9f:a1:05:
         99:16:cc:69:8a:93:64:c6:6b:f2:47:de:c5:37:60:a5:ff:6f:
         34:fd:a9:b3:1f:de:db:81:18:9a:19:53:34:f9:13:37:00:3b:
         64:46:af:b1:60:67:eb:04:d8:b4:e5:a5:c5:6d:7f:26:3a:14:
         c4:bd:32:f6:55:f3:9c:54:bd:78:bf:b7:c5:87:fa:c2:14:60:
         aa:b0:92:c6:8a:0b:24:af:e9:36:23:67:e0:dc:29:f2:11:50:
         cc:7b:28:00:68:21:d4:b3:54:e5:05:7a:f0:06:48:69:8b:df:
         b4:ab:53:2b:7c:cc:e1:78:f4:d9:cd:21:cc:da:a5:5a:4a:27:
         9b:71:f9:12:07:88:54:9b:15:e9:e4:6a:96:b1:f8:a4:d7:56:
         85:12:df:a0
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUX7RHrDcpwDGWhSAG4+lZJ6nhyG8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMjAzNTUwMVoX
DTIyMTExMjA0MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBNDMwNEVBNTVGOTAyRUUwRDVGNEUxMzlFM0MwRUQzRUJGNEM5QkUwMTRC
QkVDOEQ3NzExODhFNzE0OTkzRDg2MzJBQkNEOEFFMTUxMDBCRTZERDhGMjFDNjNB
Q0MzQzZFNjBDQUI1Njg3N0NCNjcyRDVFMkQ3N0UwNUUwMEVCQTlFOTQ1NkRDODQ3
QUY5QjI0Mzc5QzYzNjkwMDAzRTA3MUU5MzkzMDRFMURFMEQ2MEUxNkU4OTFBODQ0
RUQ2REU1ODI2MkJEQzJGRDI2OUVDRjFCNTI5NkJFMkJFNDM0NDA0QUFGRDk3Rjk4
QjJBMDc4NjcwOTJDNDM0RDMzRDRFRDlFRkRGQkQzMjBEMDlGQzMwRDM0MkJDQjU5
RjA5RjIyOURDMEI0NTUyQzhBOUJGRjk0ODBFMTg3NkQ0MUQwNEIyMUM0MDExMDJB
QkQxQ0IwM0QzMDJEQzlBQ0VCNDk1Nzc3OERBRDdEQkMwOEUzMjI2MjY5NjIzRjdG
NjRFMzc3OEI4MUFFRjdDOTQyRTdGMDk4MDYxMDgwNjlGNEZFRTA3MUI3OTQyM0M5
REExNTVDMjEzQUU0N0IxM0UwRjM1RUEyMDE0MzE4MUFBOUQ1Mzg0MTU3QTU0N0Uz
MkI0RTMzNDZGMzQ5OUQwNEE1ODM0NTQ2Rjc0MERCNjI2Qzc5NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkME6lX5Au4NX04TnjwO0+
v0yb4BS77I13EYjnFJk9hjKrzYrhUQC+bdjyHGOsw8bmDKtWh3y2ctXi134F4A66
npRW3IR6+bJDecY2kAA+Bx6TkwTh3g1g4W6JGoRO1t5YJivcL9Jp7PG1KWvivkNE
BKr9l/mLKgeGcJLENNM9Ttnv370yDQn8MNNCvLWfCfIp3AtFUsipv/lIDhh21B0E
shxAEQKr0csD0wLcms60lXd42tfbwI4yJiaWI/f2Tjd4uBrvfJQufwmAYQgGn0/u
Bxt5QjydoVXCE65HsT4PNeogFDGBqp1ThBV6VH4ytOM0bzSZ0EpYNFRvdA22JseX
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUFAaRSVJkaY53rkzPUxKOVnnD9hgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNDM4MmUzMTMxMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlHAwDQYJ
KoZIhvcNAQELBQADggEBAFjdVbnNjauAjEn0ZqubJO5KyOjy0zVVZfNnSCZzBqF+
+R6/JGnjQM9Y7UW1xXNaISzYUHPNkvZeIisxQPqTIkPpv0KYwgM9iAf4MdfmTGo6
76qzDOUHIKta18q/dYIMJizBNnzSJcQcWZ+hBZkWzGmKk2TGa/JH3sU3YKX/bzT9
qbMf3tuBGJoZUzT5EzcAO2RGr7FgZ+sE2LTlpcVtfyY6FMS9MvZV85xUvXi/t8WH
+sIUYKqwksaKCySv6TYjZ+DcKfIRUMx7KABoIdSzVOUFevAGSGmL37SrUyt8zOF4
9NnNIczapVpKJ5tx+RIHiFSbFenkapax+KTXVoUS36A=
-----END CERTIFICATE-----