Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39362e302f32332d3234203d3e20313333383135.roa
File:                     3130332e3135322e39362e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          k5pOXplJfzasUSAQRf+4ZXpziH29MHJGaxpfdyB2Q34=
Subject key identifier:   94:F2:AD:DC:85:90:FF:CB:29:B4:75:CA:85:7D:39:36:66:C7:12:BF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       226031D0F624271169969F37A6233A8BB3677A4C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39362e302f32332d3234203d3e20313333383135.roa
Signing time:             Fri 05 Nov 2021 17:00:03 +0000
ROA not before:           Fri 05 Nov 2021 16:55:03 +0000
ROA not after:            Sat 05 Nov 2022 17:00:03 +0000
asID:                     133815
IP address blocks:        103.152.96.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:60:31:d0:f6:24:27:11:69:96:9f:37:a6:23:3a:8b:b3:67:7a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  5 16:55:03 2021 GMT
            Not After : Nov  5 17:00:03 2022 GMT
        Subject: CN=3082010A0282010100DF3B0AE3F190CA6EC52C98EC4ADCC09BD0EECA1267791F57AA0F099D6C2D80CE8ED06C7CAAF9D7A0893F4A2917D56896E10EDF9F583E0AC1AA0DA0C4937ECCC41693B78E8E850CCE7E26F53B9DDDECC76E707FFEF3349F7AA9E338815F8832AE304E33FEF7343BFA10883CAB042F348153DA45553725D71FAE8E592D07766DCB80E0E961E556865C25D352A57CF5C0E8A52E8FB4AD265AB6E595DDC9B38D6567A20BBD4A0DC52AA02DAD3645A05D651FAB818A268A562F802821572D418460A5FC574303BD4A50131FAB163AB38B2C299513732163BA062F2933B1B588017A08E51983626803746E4E45023BC36B28B24599C4C3BB46ED89C2329E4FBFFF5B0D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3b:0a:e3:f1:90:ca:6e:c5:2c:98:ec:4a:dc:
                    c0:9b:d0:ee:ca:12:67:79:1f:57:aa:0f:09:9d:6c:
                    2d:80:ce:8e:d0:6c:7c:aa:f9:d7:a0:89:3f:4a:29:
                    17:d5:68:96:e1:0e:df:9f:58:3e:0a:c1:aa:0d:a0:
                    c4:93:7e:cc:c4:16:93:b7:8e:8e:85:0c:ce:7e:26:
                    f5:3b:9d:dd:ec:c7:6e:70:7f:fe:f3:34:9f:7a:a9:
                    e3:38:81:5f:88:32:ae:30:4e:33:fe:f7:34:3b:fa:
                    10:88:3c:ab:04:2f:34:81:53:da:45:55:37:25:d7:
                    1f:ae:8e:59:2d:07:76:6d:cb:80:e0:e9:61:e5:56:
                    86:5c:25:d3:52:a5:7c:f5:c0:e8:a5:2e:8f:b4:ad:
                    26:5a:b6:e5:95:dd:c9:b3:8d:65:67:a2:0b:bd:4a:
                    0d:c5:2a:a0:2d:ad:36:45:a0:5d:65:1f:ab:81:8a:
                    26:8a:56:2f:80:28:21:57:2d:41:84:60:a5:fc:57:
                    43:03:bd:4a:50:13:1f:ab:16:3a:b3:8b:2c:29:95:
                    13:73:21:63:ba:06:2f:29:33:b1:b5:88:01:7a:08:
                    e5:19:83:62:68:03:74:6e:4e:45:02:3b:c3:6b:28:
                    b2:45:99:c4:c3:bb:46:ed:89:c2:32:9e:4f:bf:ff:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F2:AD:DC:85:90:FF:CB:29:B4:75:CA:85:7D:39:36:66:C7:12:BF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135322e39362e302f32332d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:89:b0:e7:e7:c5:ac:e2:34:9b:04:b5:c8:43:06:4a:0c:
         00:15:bb:f9:45:6e:8a:6e:f6:0e:e2:05:93:0c:09:36:47:a2:
         6d:a0:86:4f:d4:b8:46:44:49:a6:7e:25:5f:11:14:0f:82:ee:
         3c:dd:d5:1f:33:d5:95:84:3f:fc:d6:4c:e6:09:52:1e:11:f3:
         cc:de:70:01:55:02:7f:f0:68:ac:5b:c6:21:f1:78:9d:b5:32:
         02:43:6b:bb:ca:17:d0:e9:b6:ac:92:10:a4:93:31:f3:ef:e9:
         77:31:bc:9c:59:52:c6:9f:46:e1:b3:64:9d:f7:b9:d9:8d:76:
         05:e0:8f:b8:04:42:91:28:48:2d:b4:79:78:f0:d1:8b:fe:bc:
         37:9e:42:04:19:a0:c9:ce:ac:9f:2e:f3:44:04:4f:98:28:65:
         76:89:44:c2:cb:1a:62:5f:13:83:22:95:7a:24:11:44:cc:8b:
         b6:b0:2c:7b:25:50:a5:0b:5e:39:b0:0c:6d:bb:8f:68:e0:16:
         4d:e0:fa:27:1d:38:b4:5c:f5:c2:fe:48:b7:c4:4a:1e:68:1a:
         8c:34:74:a9:50:db:56:cc:a7:8b:b3:ce:49:a6:f7:02:90:7e:
         71:41:80:c0:d0:5a:87:97:6a:aa:eb:e6:ff:cd:3b:e1:03:c6:
         f4:9f:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----