Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131352e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131352e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          uats7Xz/tEJV7H6de13N8D28yoPNHFZvYyOROQkY0jU=
Subject key identifier:   D8:A6:A0:EB:B4:36:0E:68:97:A5:29:38:99:BB:D6:ED:94:A6:AD:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       421E66A4F00A1B5639A64554594D4A3DED8E702A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131352e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:14 +0000
ROA not before:           Thu 01 Jul 2021 07:55:14 +0000
ROA not after:            Fri 01 Jul 2022 08:00:14 +0000
asID:                     131111
IP address blocks:        103.154.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1e:66:a4:f0:0a:1b:56:39:a6:45:54:59:4d:4a:3d:ed:8e:70:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:14 2021 GMT
            Not After : Jul  1 08:00:14 2022 GMT
        Subject: CN=3082010A0282010100B11F24C30E4DA18278467360BF50622E6394F83728BD9378AA29CFE5F5B88B3170FBB2D5E6E2697FA982581AEC73CEF1ED8581695F2E4B1F1CBB1EEBA6D3FAFD497015BAC744A1A5279F845E99890E39D40DD1C311FAE20E52712CA66DCB898212C012984636084862146E0FD665C7535F0E396EB9C695298D963479E84244BAAC5EC4D699E266432178E691C782C82ECCDAEC74685FA5FA683F4F24976181FEB95095BABA7A1F8AA03499EEBAE4D6F61CC6DC0C7D4918FF3E96E777C2421C4404BFADA22648CF5A6B0821D9C32F3092934FD43D9818DB96D5120F0DCAA64E3B29F91BA5E9EC1ABA429FB2E3E994E8BE28AEF5088B097399B4DF32CA3D4D96170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:24:c3:0e:4d:a1:82:78:46:73:60:bf:50:
                    62:2e:63:94:f8:37:28:bd:93:78:aa:29:cf:e5:f5:
                    b8:8b:31:70:fb:b2:d5:e6:e2:69:7f:a9:82:58:1a:
                    ec:73:ce:f1:ed:85:81:69:5f:2e:4b:1f:1c:bb:1e:
                    eb:a6:d3:fa:fd:49:70:15:ba:c7:44:a1:a5:27:9f:
                    84:5e:99:89:0e:39:d4:0d:d1:c3:11:fa:e2:0e:52:
                    71:2c:a6:6d:cb:89:82:12:c0:12:98:46:36:08:48:
                    62:14:6e:0f:d6:65:c7:53:5f:0e:39:6e:b9:c6:95:
                    29:8d:96:34:79:e8:42:44:ba:ac:5e:c4:d6:99:e2:
                    66:43:21:78:e6:91:c7:82:c8:2e:cc:da:ec:74:68:
                    5f:a5:fa:68:3f:4f:24:97:61:81:fe:b9:50:95:ba:
                    ba:7a:1f:8a:a0:34:99:ee:ba:e4:d6:f6:1c:c6:dc:
                    0c:7d:49:18:ff:3e:96:e7:77:c2:42:1c:44:04:bf:
                    ad:a2:26:48:cf:5a:6b:08:21:d9:c3:2f:30:92:93:
                    4f:d4:3d:98:18:db:96:d5:12:0f:0d:ca:a6:4e:3b:
                    29:f9:1b:a5:e9:ec:1a:ba:42:9f:b2:e3:e9:94:e8:
                    be:28:ae:f5:08:8b:09:73:99:b4:df:32:ca:3d:4d:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A6:A0:EB:B4:36:0E:68:97:A5:29:38:99:BB:D6:ED:94:A6:AD:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131352e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:df:55:11:db:29:ea:76:50:8b:9d:de:20:81:89:cd:4a:f2:
         ce:5f:0d:d4:1e:97:4c:29:27:c0:fd:d1:ea:07:11:69:ce:9d:
         9d:bf:cd:6c:ca:c0:ec:8c:83:d1:af:30:41:41:b5:8a:2c:e1:
         24:09:da:ba:e5:40:e1:bc:72:78:cf:c4:71:3a:58:4a:97:7c:
         31:fe:11:72:07:f1:81:c9:b4:dc:13:7c:95:a8:28:2a:46:6e:
         6e:41:b6:be:a8:c0:6e:8f:c0:cd:b5:4a:6b:f6:2a:98:4b:8f:
         79:8a:51:f7:e1:a7:75:89:6d:b7:9d:25:d9:eb:1c:07:f1:fc:
         ee:a8:5d:2d:6a:b1:3c:95:1a:91:07:a4:48:53:8b:00:c2:49:
         f1:84:30:16:b5:86:81:08:9e:9b:ef:70:07:65:ba:7d:98:49:
         bb:b6:32:96:bc:d2:79:df:59:e6:cf:91:ee:58:ca:9b:bc:e5:
         7a:77:6e:f4:72:f9:b5:2d:91:e7:89:a0:26:62:07:1d:1b:24:
         d7:5a:5a:3f:13:b5:05:19:d9:65:29:d4:70:2d:f5:c3:22:d8:
         67:9a:2c:84:9c:15:8d:d3:91:40:f4:a8:23:07:d3:33:84:ee:
         96:5e:ba:9c:7e:66:86:00:42:79:9c:91:53:2e:99:27:f7:78:
         a5:38:5d:17
-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIUQh5mpPAKG1Y5pkVUWU1KPe2OcCowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcwMTA3NTUxNFoX
DTIyMDcwMTA4MDAxNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCMTFGMjRDMzBFNERBMTgyNzg0NjczNjBCRjUwNjIyRTYzOTRGODM3MjhC
RDkzNzhBQTI5Q0ZFNUY1Qjg4QjMxNzBGQkIyRDVFNkUyNjk3RkE5ODI1ODFBRUM3
M0NFRjFFRDg1ODE2OTVGMkU0QjFGMUNCQjFFRUJBNkQzRkFGRDQ5NzAxNUJBQzc0
NEExQTUyNzlGODQ1RTk5ODkwRTM5RDQwREQxQzMxMUZBRTIwRTUyNzEyQ0E2NkRD
Qjg5ODIxMkMwMTI5ODQ2MzYwODQ4NjIxNDZFMEZENjY1Qzc1MzVGMEUzOTZFQjlD
Njk1Mjk4RDk2MzQ3OUU4NDI0NEJBQUM1RUM0RDY5OUUyNjY0MzIxNzhFNjkxQzc4
MkM4MkVDQ0RBRUM3NDY4NUZBNUZBNjgzRjRGMjQ5NzYxODFGRUI5NTA5NUJBQkE3
QTFGOEFBMDM0OTlFRUJBRTRENkY2MUNDNkRDMEM3RDQ5MThGRjNFOTZFNzc3QzI0
MjFDNDQwNEJGQURBMjI2NDhDRjVBNkIwODIxRDlDMzJGMzA5MjkzNEZENDNEOTgx
OERCOTZENTEyMEYwRENBQTY0RTNCMjlGOTFCQTVFOUVDMUFCQTQyOUZCMkUzRTk5
NEU4QkUyOEFFRjUwODhCMDk3Mzk5QjRERjMyQ0EzRDREOTYxNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHyTDDk2hgnhGc2C/UGIu
Y5T4Nyi9k3iqKc/l9biLMXD7stXm4ml/qYJYGuxzzvHthYFpXy5LHxy7Huum0/r9
SXAVusdEoaUnn4RemYkOOdQN0cMR+uIOUnEspm3LiYISwBKYRjYISGIUbg/WZcdT
Xw45brnGlSmNljR56EJEuqxexNaZ4mZDIXjmkceCyC7M2ux0aF+l+mg/TySXYYH+
uVCVurp6H4qgNJnuuuTW9hzG3Ax9SRj/Ppbnd8JCHEQEv62iJkjPWmsIIdnDLzCS
k0/UPZgY25bVEg8NyqZOOyn5G6Xp7Bq6Qp+y4+mU6L4orvUIiwlzmbTfMso9TZYX
AgMBAAGjggH9MIIB+TAdBgNVHQ4EFgQU2Kag67Q2DmiXpSk4mbvW7ZSmrVMwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBgAYIKwYB
BQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM0MmUzMTMxMzUyZTMwMmYz
MjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmnMwDQYJKoZIhvcN
AQELBQADggEBACjfVRHbKep2UIud3iCBic1K8s5fDdQel0wpJ8D90eoHEWnOnZ2/
zWzKwOyMg9GvMEFBtYos4SQJ2rrlQOG8cnjPxHE6WEqXfDH+EXIH8YHJtNwTfJWo
KCpGbm5Btr6owG6PwM21Smv2KphLj3mKUffhp3WJbbedJdnrHAfx/O6oXS1qsTyV
GpEHpEhTiwDCSfGEMBa1hoEInpvvcAdlun2YSbu2Mpa80nnfWebPke5Yypu85Xp3
bvRy+bUtkeeJoCZiBx0bJNdaWj8TtQUZ2WUp1HAt9cMi2GeaLIScFY3TkUD0qCMH
0zOE7pZeupx+ZoYAQnmckVMumSf3eKU4XRc=
-----END CERTIFICATE-----