Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3139322e302f32332d3234203d3e20313430343732.roa
File:                     3130332e3135332e3139322e302f32332d3234203d3e20313430343732.roa (raw, json)
Hash identifier:          1kW7SDtgmd1+Ngb5g6NaIp4njTofgVSrRBgJGdA+pVU=
Subject key identifier:   1F:95:88:E3:4D:ED:FD:36:59:89:DF:A8:91:E0:71:C4:F8:35:2E:C1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       462DBBCFA0A16F239230485EAFBA50B329A71139
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3139322e302f32332d3234203d3e20313430343732.roa
Signing time:             Tue 24 Aug 2021 06:31:13 +0000
ROA not before:           Tue 24 Aug 2021 06:26:13 +0000
ROA not after:            Wed 24 Aug 2022 06:31:13 +0000
asID:                     140472
IP address blocks:        103.153.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2d:bb:cf:a0:a1:6f:23:92:30:48:5e:af:ba:50:b3:29:a7:11:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 24 06:26:13 2021 GMT
            Not After : Aug 24 06:31:13 2022 GMT
        Subject: CN=3082010A0282010100D1E449458F55095621B66FB8943BE86F77062CBA04D9229F3F79E8CCB17CAF9F1338E09549B0EB24B8865C4010721A21F478E4EF7E92C1ABB7110E76495BF01E7BC7D25E754CF956A93FBDED1086478D7F58E9DD358D6540CBE0C6D2CF4D8266B790F84DFA6E38CD3FCE1E671F59BCE0677795C5F9C321D647AB79F10C03DE8C9491410ACF75C6AA9FC2107B2B7D9733B78C5C7A4F12CB035D1EFBCDD1C7ADAD414D35D8F8477CF2A4438E59FC93A3F4BDE50FBC3BA7CF89A02EB9C67AEE024DF31D9048EB4A7B33A80A1A058BCD949F2B5897B9B8FE71E3211E98D8A0F7C14ED507403CD605A90D1E3220F722F434567F340E89945A538569CD5741D9D71F950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:49:45:8f:55:09:56:21:b6:6f:b8:94:3b:
                    e8:6f:77:06:2c:ba:04:d9:22:9f:3f:79:e8:cc:b1:
                    7c:af:9f:13:38:e0:95:49:b0:eb:24:b8:86:5c:40:
                    10:72:1a:21:f4:78:e4:ef:7e:92:c1:ab:b7:11:0e:
                    76:49:5b:f0:1e:7b:c7:d2:5e:75:4c:f9:56:a9:3f:
                    bd:ed:10:86:47:8d:7f:58:e9:dd:35:8d:65:40:cb:
                    e0:c6:d2:cf:4d:82:66:b7:90:f8:4d:fa:6e:38:cd:
                    3f:ce:1e:67:1f:59:bc:e0:67:77:95:c5:f9:c3:21:
                    d6:47:ab:79:f1:0c:03:de:8c:94:91:41:0a:cf:75:
                    c6:aa:9f:c2:10:7b:2b:7d:97:33:b7:8c:5c:7a:4f:
                    12:cb:03:5d:1e:fb:cd:d1:c7:ad:ad:41:4d:35:d8:
                    f8:47:7c:f2:a4:43:8e:59:fc:93:a3:f4:bd:e5:0f:
                    bc:3b:a7:cf:89:a0:2e:b9:c6:7a:ee:02:4d:f3:1d:
                    90:48:eb:4a:7b:33:a8:0a:1a:05:8b:cd:94:9f:2b:
                    58:97:b9:b8:fe:71:e3:21:1e:98:d8:a0:f7:c1:4e:
                    d5:07:40:3c:d6:05:a9:0d:1e:32:20:f7:22:f4:34:
                    56:7f:34:0e:89:94:5a:53:85:69:cd:57:41:d9:d7:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:88:E3:4D:ED:FD:36:59:89:DF:A8:91:E0:71:C4:F8:35:2E:C1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135332e3139322e302f32332d3234203d3e20313430343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:0e:79:b9:ce:c8:13:41:0b:0f:d5:dc:84:65:48:b9:12:
         3e:28:4d:e0:9c:29:63:bc:d4:30:46:66:29:c7:7c:f8:a4:9a:
         2c:0d:b4:48:72:17:3b:af:c1:50:e5:f7:71:8f:4a:07:f4:dc:
         96:8f:fc:1c:3d:9d:c8:a5:d0:ff:e5:a6:fd:b7:ab:87:41:1c:
         48:b4:e2:59:a8:30:fd:2a:8a:f2:24:33:f3:23:53:95:6e:15:
         e6:18:33:7a:a5:27:04:df:e8:b0:aa:06:50:a4:0f:f3:de:53:
         0b:f6:f3:f2:06:26:98:14:52:8d:51:11:0f:6f:dd:0f:7d:46:
         84:69:b5:88:db:77:83:7c:20:69:1a:c0:8c:f8:67:84:95:1e:
         13:c2:94:9a:a4:69:50:15:8d:3c:d6:49:df:68:33:5e:be:f5:
         bf:92:89:6c:1a:02:71:2b:4f:45:b8:45:1b:21:d0:b4:db:fe:
         a4:39:5b:fa:e0:a5:70:10:9b:61:f6:82:0f:ae:6e:fc:a9:b0:
         7f:a2:12:83:ea:82:f4:b1:8e:53:a4:a8:7b:cd:a6:60:90:01:
         8c:7b:f2:ce:2a:ad:a3:66:e6:41:2f:4b:a7:41:76:27:01:22:
         4b:85:b8:bd:ea:e8:f8:8f:bd:6a:85:d3:19:07:45:12:94:dc:
         ff:08:5a:ea
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIURi27z6ChbyOSMEher7pQsymnETkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDgyNDA2MjYxM1oX
DTIyMDgyNDA2MzExM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMUU0NDk0NThGNTUwOTU2MjFCNjZGQjg5NDNCRTg2Rjc3MDYyQ0JBMDRE
OTIyOUYzRjc5RThDQ0IxN0NBRjlGMTMzOEUwOTU0OUIwRUIyNEI4ODY1QzQwMTA3
MjFBMjFGNDc4RTRFRjdFOTJDMUFCQjcxMTBFNzY0OTVCRjAxRTdCQzdEMjVFNzU0
Q0Y5NTZBOTNGQkRFRDEwODY0NzhEN0Y1OEU5REQzNThENjU0MENCRTBDNkQyQ0Y0
RDgyNjZCNzkwRjg0REZBNkUzOENEM0ZDRTFFNjcxRjU5QkNFMDY3Nzc5NUM1RjlD
MzIxRDY0N0FCNzlGMTBDMDNERThDOTQ5MTQxMEFDRjc1QzZBQTlGQzIxMDdCMkI3
RDk3MzNCNzhDNUM3QTRGMTJDQjAzNUQxRUZCQ0REMUM3QURBRDQxNEQzNUQ4Rjg0
NzdDRjJBNDQzOEU1OUZDOTNBM0Y0QkRFNTBGQkMzQkE3Q0Y4OUEwMkVCOUM2N0FF
RTAyNERGMzFEOTA0OEVCNEE3QjMzQTgwQTFBMDU4QkNEOTQ5RjJCNTg5N0I5QjhG
RTcxRTMyMTFFOThEOEEwRjdDMTRFRDUwNzQwM0NENjA1QTkwRDFFMzIyMEY3MjJG
NDM0NTY3RjM0MEU4OTk0NUE1Mzg1NjlDRDU3NDFEOUQ3MUY5NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5ElFj1UJViG2b7iUO+hv
dwYsugTZIp8/eejMsXyvnxM44JVJsOskuIZcQBByGiH0eOTvfpLBq7cRDnZJW/Ae
e8fSXnVM+VapP73tEIZHjX9Y6d01jWVAy+DG0s9Ngma3kPhN+m44zT/OHmcfWbzg
Z3eVxfnDIdZHq3nxDAPejJSRQQrPdcaqn8IQeyt9lzO3jFx6TxLLA10e+83Rx62t
QU012PhHfPKkQ45Z/JOj9L3lD7w7p8+JoC65xnruAk3zHZBI60p7M6gKGgWLzZSf
K1iXubj+ceMhHpjYoPfBTtUHQDzWBakNHjIg9yL0NFZ/NA6JlFpThWnNV0HZ1x+V
AgMBAAGjggIDMIIB/zAdBgNVHQ4EFgQUH5WI403t/TZZid+okeBxxPg1LsEwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhgYIKwYB
BQUHAQsEejB4MHYGCCsGAQUFBzALhmpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTMzMmUzMTM5MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmcAwDQYJ
KoZIhvcNAQELBQADggEBAEvsDnm5zsgTQQsP1dyEZUi5Ej4oTeCcKWO81DBGZinH
fPikmiwNtEhyFzuvwVDl93GPSgf03JaP/Bw9ncil0P/lpv23q4dBHEi04lmoMP0q
ivIkM/MjU5VuFeYYM3qlJwTf6LCqBlCkD/PeUwv28/IGJpgUUo1REQ9v3Q99RoRp
tYjbd4N8IGkawIz4Z4SVHhPClJqkaVAVjTzWSd9oM16+9b+SiWwaAnErT0W4RRsh
0LTb/qQ5W/rgpXAQm2H2gg+ubvypsH+iEoPqgvSxjlOkqHvNpmCQAYx78s4qraNm
5kEvS6dBdicBIkuFuL3q6PiPvWqF0xkHRRKU3P8IWuo=
-----END CERTIFICATE-----