Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31322e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135302e31322e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          EBbCvbj1t1GPaPBJS1/+ZrzskMO9CkZE1gPwE7zqn28=
Subject key identifier:   44:DC:66:58:A7:4E:9B:60:F7:73:5D:86:3C:03:1F:2A:AC:CA:F1:F5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2041C4ADBAD5D8734D60F74A3075F3660DA6E8F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31322e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:03 +0000
ROA not before:           Fri 05 Nov 2021 16:55:03 +0000
ROA not after:            Sat 05 Nov 2022 17:00:03 +0000
asID:                     133815
IP address blocks:        103.150.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:c4:ad:ba:d5:d8:73:4d:60:f7:4a:30:75:f3:66:0d:a6:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:03 2021 GMT
            Not After : Nov  5 17:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:62:a7:3d:81:41:37:0e:21:65:e3:7c:e8:
                    35:3b:9b:dc:e7:0b:ca:ee:7c:13:87:fd:01:cb:87:
                    0e:e4:81:16:b2:fb:95:cc:8b:2c:1d:48:b9:1a:3f:
                    9d:34:3e:fb:05:cb:7d:53:a7:d6:60:18:a2:56:98:
                    2e:0a:90:53:4e:2e:fe:ae:05:ce:b7:46:76:05:25:
                    02:90:37:13:7f:c3:79:76:d0:97:d5:c1:d2:80:74:
                    dd:8a:84:68:fa:fb:f8:20:e8:81:d1:7e:de:fd:64:
                    82:b5:eb:e8:fc:bb:f9:3c:56:b1:4b:b6:0f:25:66:
                    17:1d:89:d9:38:4d:9c:d6:f0:5b:01:fe:58:03:2d:
                    7e:e2:e1:8d:4a:37:8d:38:db:55:85:54:dc:e3:ef:
                    f9:25:38:68:f2:45:95:d3:e6:9f:ff:b6:48:f1:0d:
                    18:b6:14:14:b9:33:ee:f6:79:a6:4a:c8:cc:cb:25:
                    09:1b:2b:d2:81:91:8e:d8:ab:ac:bc:75:54:26:18:
                    03:75:bd:83:19:57:19:0b:0c:72:92:06:82:69:66:
                    db:65:c3:08:eb:fd:47:6d:f9:e7:60:10:5c:4e:d1:
                    ff:29:8b:dd:0a:bd:51:7a:49:e2:f1:de:99:53:d1:
                    ad:d8:88:f9:a4:6a:3c:22:0a:ed:fc:be:64:c6:16:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:66:58:A7:4E:9B:60:F7:73:5D:86:3C:03:1F:2A:AC:CA:F1:F5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e31322e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:65:fd:71:b2:e5:23:df:18:8b:ce:e8:f1:26:f0:91:3b:7c:
         74:95:91:5a:ed:e2:7c:15:d6:a2:e0:6f:4d:b3:78:cd:81:60:
         5e:5b:1a:fc:7b:41:b1:5c:eb:07:10:c7:b3:df:95:a8:02:25:
         1c:aa:fd:86:b9:96:16:5a:b9:ab:10:74:32:a0:f3:93:37:7b:
         ef:27:96:b2:44:b5:f0:3f:ef:95:33:0b:ec:fb:85:87:1f:f7:
         58:72:09:65:dd:4f:62:e6:3d:c3:59:0c:bf:47:9d:08:ac:55:
         f6:45:ef:55:b0:70:30:8e:71:55:ef:1a:1a:86:57:59:2c:3b:
         3d:66:07:92:ba:c0:52:c2:e9:ef:70:48:aa:f2:08:66:af:92:
         ff:9a:c6:bc:0c:74:27:ca:7d:3e:3f:7a:20:a0:ef:49:85:c6:
         6c:7b:d3:c9:91:4c:bb:75:4a:42:c9:48:8f:96:8c:af:8c:d1:
         78:aa:57:76:32:68:a9:c0:f3:6e:cf:a6:4a:82:68:69:8c:c3:
         72:a4:e3:db:20:c6:4e:5d:a5:f7:e1:19:11:4b:28:36:44:7c:
         8d:ad:b9:90:4c:df:d3:db:3a:fd:ba:57:a2:13:68:64:a5:34:
         4f:08:c1:22:19:56:3a:98:15:74:f7:79:a9:79:e4:4f:77:41:
         b1:9c:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----