Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39302e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3135302e39302e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          i4Fr+YDHzCqLICxEfxyKvOMJfR4H54hN4f1P7vHTGwI=
Subject key identifier:   39:13:69:A3:4F:15:05:0D:F6:86:51:77:A2:6A:E5:6B:BB:59:B8:C5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       05CE7849F4690F6F80225746B0D327856FCD5312
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39302e302f32332d3234203d3e20313333383030.roa
Signing time:             Sat 16 Oct 2021 15:00:01 +0000
ROA not before:           Sat 16 Oct 2021 14:55:01 +0000
ROA not after:            Sun 16 Oct 2022 15:00:01 +0000
asID:                     133800
IP address blocks:        103.150.90.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ce:78:49:f4:69:0f:6f:80:22:57:46:b0:d3:27:85:6f:cd:53:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 16 14:55:01 2021 GMT
            Not After : Oct 16 15:00:01 2022 GMT
        Subject: CN=3082010A0282010100E297D13F7AEAF5753F50AE7797A52C069337B9AA85C74EF82ED1205B4E3E9D17D0F57980CF2965B399E04D39D35D40CF1507402D012539A83483B50FDFFE27DAE55A647E31D2C397274333CF99B31DE32D0E46489D14D0B3389AB77F75DA811EABE37320105FFF2CC7264313ECEECC877477754100F24AF4BECA93C6130807A2D6A39535B740BE8C864C2D0784ED488630EB405C233F89DD0F97171761DEAB0E84C540E89CE03816CF9EE6B4F1DA544E2310F479DFD88776DD2D49A1A44C6B4CCA025CFF400D8493491497C4EEFD4C86CE899AE77554A235DD9DB1FB9DD35CA7824A75E6F2CBA097281F9BB17186B173F035246D22B5A5E547C95BF403225AF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:d1:3f:7a:ea:f5:75:3f:50:ae:77:97:a5:
                    2c:06:93:37:b9:aa:85:c7:4e:f8:2e:d1:20:5b:4e:
                    3e:9d:17:d0:f5:79:80:cf:29:65:b3:99:e0:4d:39:
                    d3:5d:40:cf:15:07:40:2d:01:25:39:a8:34:83:b5:
                    0f:df:fe:27:da:e5:5a:64:7e:31:d2:c3:97:27:43:
                    33:cf:99:b3:1d:e3:2d:0e:46:48:9d:14:d0:b3:38:
                    9a:b7:7f:75:da:81:1e:ab:e3:73:20:10:5f:ff:2c:
                    c7:26:43:13:ec:ee:cc:87:74:77:75:41:00:f2:4a:
                    f4:be:ca:93:c6:13:08:07:a2:d6:a3:95:35:b7:40:
                    be:8c:86:4c:2d:07:84:ed:48:86:30:eb:40:5c:23:
                    3f:89:dd:0f:97:17:17:61:de:ab:0e:84:c5:40:e8:
                    9c:e0:38:16:cf:9e:e6:b4:f1:da:54:4e:23:10:f4:
                    79:df:d8:87:76:dd:2d:49:a1:a4:4c:6b:4c:ca:02:
                    5c:ff:40:0d:84:93:49:14:97:c4:ee:fd:4c:86:ce:
                    89:9a:e7:75:54:a2:35:dd:9d:b1:fb:9d:d3:5c:a7:
                    82:4a:75:e6:f2:cb:a0:97:28:1f:9b:b1:71:86:b1:
                    73:f0:35:24:6d:22:b5:a5:e5:47:c9:5b:f4:03:22:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:69:A3:4F:15:05:0D:F6:86:51:77:A2:6A:E5:6B:BB:59:B8:C5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135302e39302e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:22:42:72:16:53:b0:05:7a:f2:71:01:29:58:77:2b:b2:
         e5:78:74:c2:88:12:10:12:ab:63:e7:9a:24:a9:14:22:88:a9:
         c0:a4:52:72:90:9d:b9:1c:86:ab:fc:2f:63:fb:37:88:66:1b:
         d9:1c:aa:bf:ca:64:b4:12:53:77:d0:7c:cd:a9:ca:1b:10:74:
         40:41:f5:77:4a:d1:d1:1b:55:a8:f8:fa:d8:9f:9e:32:c9:c3:
         89:af:ad:af:4d:cc:a5:61:ce:94:5d:0f:e8:2e:18:cd:d9:29:
         2a:a1:00:94:e3:51:1f:a4:89:d0:69:3e:a6:06:3a:dd:15:64:
         2a:a5:10:b3:97:cc:bc:0b:9d:da:c7:5d:8c:0a:37:0a:b2:18:
         28:35:73:e0:d1:39:c4:38:5a:bf:7d:e4:51:fd:83:7e:c7:da:
         f9:99:d7:fc:53:eb:79:33:61:e7:8b:8f:c0:c7:45:f0:f4:67:
         a5:aa:a3:93:fe:1f:96:ef:5a:3e:9a:19:93:43:74:d1:63:93:
         b3:64:18:76:37:0d:e4:ad:56:74:7b:c5:7a:63:de:62:54:dc:
         69:35:5b:7e:9b:b8:4b:3e:3f:b6:45:fa:f8:54:4e:67:3d:c5:
         38:4d:4d:f6:cf:38:12:c7:fc:f2:31:53:f1:8d:ae:27:36:67:
         8f:d4:2d:4a
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUBc54SfRpD2+AIldGsNMnhW/NUxIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAxNjE0NTUwMVoX
DTIyMTAxNjE1MDAwMVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFMjk3RDEzRjdBRUFGNTc1M0Y1MEFFNzc5N0E1MkMwNjkzMzdCOUFBODVD
NzRFRjgyRUQxMjA1QjRFM0U5RDE3RDBGNTc5ODBDRjI5NjVCMzk5RTA0RDM5RDM1
RDQwQ0YxNTA3NDAyRDAxMjUzOUE4MzQ4M0I1MEZERkZFMjdEQUU1NUE2NDdFMzFE
MkMzOTcyNzQzMzNDRjk5QjMxREUzMkQwRTQ2NDg5RDE0RDBCMzM4OUFCNzdGNzVE
QTgxMUVBQkUzNzMyMDEwNUZGRjJDQzcyNjQzMTNFQ0VFQ0M4Nzc0Nzc3NTQxMDBG
MjRBRjRCRUNBOTNDNjEzMDgwN0EyRDZBMzk1MzVCNzQwQkU4Qzg2NEMyRDA3ODRF
RDQ4ODYzMEVCNDA1QzIzM0Y4OUREMEY5NzE3MTc2MURFQUIwRTg0QzU0MEU4OUNF
MDM4MTZDRjlFRTZCNEYxREE1NDRFMjMxMEY0NzlERkQ4ODc3NkREMkQ0OUExQTQ0
QzZCNENDQTAyNUNGRjQwMEQ4NDkzNDkxNDk3QzRFRUZENEM4NkNFODk5QUU3NzU1
NEEyMzVERDlEQjFGQjlERDM1Q0E3ODI0QTc1RTZGMkNCQTA5NzI4MUY5QkIxNzE4
NkIxNzNGMDM1MjQ2RDIyQjVBNUU1NDdDOTVCRjQwMzIyNUFGNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDil9E/eur1dT9QrneXpSwG
kze5qoXHTvgu0SBbTj6dF9D1eYDPKWWzmeBNOdNdQM8VB0AtASU5qDSDtQ/f/ifa
5VpkfjHSw5cnQzPPmbMd4y0ORkidFNCzOJq3f3XagR6r43MgEF//LMcmQxPs7syH
dHd1QQDySvS+ypPGEwgHotajlTW3QL6MhkwtB4TtSIYw60BcIz+J3Q+XFxdh3qsO
hMVA6JzgOBbPnua08dpUTiMQ9Hnf2Id23S1JoaRMa0zKAlz/QA2Ek0kUl8Tu/UyG
zoma53VUojXdnbH7ndNcp4JKdebyy6CXKB+bsXGGsXPwNSRtIrWl5UfJW/QDIlr3
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUORNpo08VBQ32hlF3omrla7tZuMUwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTMwMmUzOTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5ZaMA0GCSqG
SIb3DQEBCwUAA4IBAQA7FiJCchZTsAV68nEBKVh3K7LleHTCiBIQEqtj55okqRQi
iKnApFJykJ25HIar/C9j+zeIZhvZHKq/ymS0ElN30HzNqcobEHRAQfV3StHRG1Wo
+PrYn54yycOJr62vTcylYc6UXQ/oLhjN2SkqoQCU41EfpInQaT6mBjrdFWQqpRCz
l8y8C53ax12MCjcKshgoNXPg0TnEOFq/feRR/YN+x9r5mdf8U+t5M2Hni4/Ax0Xw
9GelqqOT/h+W71o+mhmTQ3TRY5OzZBh2Nw3krVZ0e8V6Y95iVNxpNVt+m7hLPj+2
Rfr4VE5nPcU4TU32zzgSx/zyMVPxja4nNmeP1C1K
-----END CERTIFICATE-----