Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3136322e302f32332d3234203d3e203435373335.roa
File:                     3130332e3135312e3136322e302f32332d3234203d3e203435373335.roa (raw, json)
Hash identifier:          t3RQkn4XIYU9DElslWHYWAU3Zp+Q1NVdR0eSApHiNVU=
Subject key identifier:   8B:73:6C:90:76:CC:C9:AB:5D:4B:5A:A7:F9:97:8E:7D:A2:66:5A:87
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0F128FAACD5265C8E3A6FC501C071D299CE785CE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3136322e302f32332d3234203d3e203435373335.roa
Signing time:             Wed 14 Jul 2021 06:05:51 +0000
ROA not before:           Wed 14 Jul 2021 06:00:51 +0000
ROA not after:            Thu 14 Jul 2022 06:05:51 +0000
asID:                     45735
IP address blocks:        103.151.162.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:12:8f:aa:cd:52:65:c8:e3:a6:fc:50:1c:07:1d:29:9c:e7:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 14 06:00:51 2021 GMT
            Not After : Jul 14 06:05:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:0f:f9:10:92:37:59:f2:be:e3:93:6a:09:
                    9d:8c:18:d3:da:79:11:0e:bb:59:27:ed:04:aa:3d:
                    e0:fc:ef:0c:89:02:5d:53:9a:db:c7:33:c8:e1:56:
                    1c:e3:bb:85:72:a6:24:41:13:b2:9a:d7:94:4d:cf:
                    be:e0:11:46:4a:cd:8c:0e:f3:c1:ef:4a:02:03:3a:
                    97:8c:57:ea:70:b1:9e:7e:2f:ba:6f:79:19:28:38:
                    ae:e5:4b:cb:06:6f:54:29:30:c0:80:da:c6:92:03:
                    1b:f0:26:f2:ef:98:4a:7b:41:a7:01:41:15:b7:ae:
                    f0:07:e5:a6:85:87:d4:48:c8:6e:a4:9e:25:40:a1:
                    aa:f0:95:bf:29:b1:26:11:d5:01:5b:95:8b:d5:72:
                    c9:c7:99:ea:9d:88:4e:e7:98:6c:7d:9d:2a:9b:58:
                    b4:5e:c8:6c:df:ba:01:c1:7e:3c:36:82:06:5f:c2:
                    3c:44:93:a3:1c:7c:c8:f8:1a:dd:a9:2d:f8:28:f8:
                    b0:e8:4e:21:0d:f5:d3:c1:d8:1f:f5:cf:ae:b7:6c:
                    ec:22:11:fe:65:0d:34:e7:40:d5:e3:4d:5f:ad:2f:
                    ae:cd:cc:ea:fe:83:2a:8b:58:67:e5:4a:9c:4f:4d:
                    38:71:bf:3d:1d:0c:ec:d2:31:e5:ad:5a:67:cb:2e:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:73:6C:90:76:CC:C9:AB:5D:4B:5A:A7:F9:97:8E:7D:A2:66:5A:87
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3136322e302f32332d3234203d3e203435373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:57:31:9f:36:40:5e:fb:89:b8:4e:96:e3:d8:2a:95:55:
         ee:4b:4f:37:eb:78:d8:6d:27:cc:aa:1a:98:e9:66:1f:67:e4:
         0e:49:0f:b6:b1:fa:44:4b:9f:db:b4:e7:b9:15:86:a9:03:a0:
         30:a0:cd:d2:ea:81:9e:8a:2c:45:ed:d5:19:2e:89:17:3f:34:
         ae:c7:30:0f:c2:07:8a:42:b8:25:af:88:7f:b3:68:77:b3:52:
         d7:97:b3:2d:6a:d6:b4:36:0b:cc:41:c9:c5:c0:5d:c9:45:06:
         15:b2:90:5c:b8:a5:2e:77:9c:32:d8:85:86:10:42:82:ac:15:
         eb:22:54:47:d6:c0:c0:0d:82:fa:94:32:00:75:b1:86:88:1d:
         a1:44:b7:fa:0e:4a:71:72:51:08:e3:98:70:69:80:50:cf:7a:
         ab:fe:e0:a9:97:bf:48:f7:d7:b1:17:ed:ce:a4:b9:6b:c1:92:
         5a:e7:68:d1:08:b6:f4:cd:a0:e7:38:3e:f5:8a:92:d3:6e:30:
         1b:3c:43:ad:31:61:dd:9a:ea:3b:d8:61:56:27:a8:3a:3c:4b:
         e6:fc:a5:e9:07:3e:cf:d7:5a:29:c6:24:1f:a5:63:e3:96:d0:
         71:5f:96:89:73:f1:38:c5:21:c2:5c:63:7b:c2:58:de:57:45:
         e2:e5:17:45
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUDxKPqs1SZcjjpvxQHAcdKZznhc4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcxNDA2MDA1MVoX
DTIyMDcxNDA2MDU1MVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOTUzMEZGOTEwOTIzNzU5RjJCRUUzOTM2QTA5OUQ4QzE4RDNEQTc5MTEw
RUJCNTkyN0VEMDRBQTNERTBGQ0VGMEM4OTAyNUQ1MzlBREJDNzMzQzhFMTU2MUNF
M0JCODU3MkE2MjQ0MTEzQjI5QUQ3OTQ0RENGQkVFMDExNDY0QUNEOEMwRUYzQzFF
RjRBMDIwMzNBOTc4QzU3RUE3MEIxOUU3RTJGQkE2Rjc5MTkyODM4QUVFNTRCQ0Iw
NjZGNTQyOTMwQzA4MERBQzY5MjAzMUJGMDI2RjJFRjk4NEE3QjQxQTcwMTQxMTVC
N0FFRjAwN0U1QTY4NTg3RDQ0OEM4NkVBNDlFMjU0MEExQUFGMDk1QkYyOUIxMjYx
MUQ1MDE1Qjk1OEJENTcyQzlDNzk5RUE5RDg4NEVFNzk4NkM3RDlEMkE5QjU4QjQ1
RUM4NkNERkJBMDFDMTdFM0MzNjgyMDY1RkMyM0M0NDkzQTMxQzdDQzhGODFBRERB
OTJERjgyOEY4QjBFODRFMjEwREY1RDNDMUQ4MUZGNUNGQUVCNzZDRUMyMjExRkU2
NTBEMzRFNzQwRDVFMzRENUZBRDJGQUVDRENDRUFGRTgzMkE4QjU4NjdFNTRBOUM0
RjREMzg3MUJGM0QxRDBDRUNEMjMxRTVBRDVBNjdDQjJFODUzOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Uw/5EJI3WfK+45NqCZ2M
GNPaeREOu1kn7QSqPeD87wyJAl1TmtvHM8jhVhzju4VypiRBE7Ka15RNz77gEUZK
zYwO88HvSgIDOpeMV+pwsZ5+L7pveRkoOK7lS8sGb1QpMMCA2saSAxvwJvLvmEp7
QacBQRW3rvAH5aaFh9RIyG6kniVAoarwlb8psSYR1QFblYvVcsnHmeqdiE7nmGx9
nSqbWLReyGzfugHBfjw2ggZfwjxEk6McfMj4Gt2pLfgo+LDoTiEN9dPB2B/1z663
bOwiEf5lDTTnQNXjTV+tL67NzOr+gyqLWGflSpxPTThxvz0dDOzSMeWtWmfLLoU5
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUi3NskHbMyatdS1qn+ZeOfaJmWocwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTMxMmUzMTM2MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM1MzczMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5eiMA0GCSqG
SIb3DQEBCwUAA4IBAQA5rFcxnzZAXvuJuE6W49gqlVXuS08363jYbSfMqhqY6WYf
Z+QOSQ+2sfpES5/btOe5FYapA6AwoM3S6oGeiixF7dUZLokXPzSuxzAPwgeKQrgl
r4h/s2h3s1LXl7Mtata0NgvMQcnFwF3JRQYVspBcuKUud5wy2IWGEEKCrBXrIlRH
1sDADYL6lDIAdbGGiB2hRLf6DkpxclEI45hwaYBQz3qr/uCpl79I99exF+3OpLlr
wZJa52jRCLb0zaDnOD71ipLTbjAbPEOtMWHdmuo72GFWJ6g6PEvm/KXpBz7P11op
xiQfpWPjltBxX5aJc/E4xSHCXGN7wljeV0Xi5RdF
-----END CERTIFICATE-----