Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231302e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3231302e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          htSTmlh7d8YO2jSuvwE5a+29s5d6T9WU0hhEaiqlmAk=
Subject key identifier:   AD:DD:58:2D:9A:AE:6E:0D:CA:46:59:3B:AE:20:1E:2A:55:53:C2:F3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       66C515FF510565C1AA42B19800BB6457DCC479CA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231302e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:13 +0000
ROA not before:           Thu 01 Jul 2021 07:55:13 +0000
ROA not after:            Fri 01 Jul 2022 08:00:13 +0000
asID:                     131111
IP address blocks:        103.154.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c5:15:ff:51:05:65:c1:aa:42:b1:98:00:bb:64:57:dc:c4:79:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:13 2021 GMT
            Not After : Jul  1 08:00:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:f7:79:79:4f:c3:72:32:09:5b:43:10:2f:
                    30:d5:e3:b5:ca:16:2a:8d:03:31:fe:8b:71:64:bb:
                    d8:97:09:2c:a3:f2:4a:84:f8:a6:b4:03:3d:16:c9:
                    cd:15:75:c3:d3:8b:27:bd:99:d9:28:fa:11:38:df:
                    02:a3:58:fd:01:33:85:3c:91:1e:fd:bb:59:8b:fd:
                    92:e0:a9:ca:a6:ee:ce:5c:f4:c8:5f:2c:15:14:dc:
                    23:37:b0:4e:90:7a:14:1c:ce:4f:84:4f:8b:58:d3:
                    69:ff:3c:70:8f:3f:de:50:73:a5:40:fd:57:38:a3:
                    c1:80:f4:c5:0d:48:49:5b:4a:d1:0e:07:64:55:63:
                    1e:fd:fb:23:bc:1f:6d:e3:85:2a:4e:71:c4:72:79:
                    6f:68:c8:e4:7e:55:cf:d9:2d:e7:11:47:69:33:e7:
                    85:e5:98:1a:6b:ce:fa:5b:b4:9a:ba:d6:9f:4d:d5:
                    e7:ad:f8:23:5c:f2:bd:32:83:ee:a8:ab:04:58:a2:
                    ab:5c:59:55:a7:84:f7:47:9a:fb:b5:10:77:bd:15:
                    94:ce:4d:a8:e9:b1:78:4d:6c:ca:06:29:c5:0e:c9:
                    4f:e2:04:b2:e1:2a:52:83:d3:90:8f:82:77:f4:b3:
                    70:7f:94:92:37:a7:fa:ff:b8:dd:19:c6:e6:ca:55:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DD:58:2D:9A:AE:6E:0D:CA:46:59:3B:AE:20:1E:2A:55:53:C2:F3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3231302e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:18:79:e8:88:fb:78:02:ab:59:ce:e7:97:80:ca:33:93:
         13:8f:47:2d:14:2d:f2:f8:f6:7f:17:33:57:e1:5e:0f:b1:f4:
         b1:25:76:97:89:e7:09:d8:54:1f:ee:a6:f1:0b:87:cd:85:eb:
         7b:81:d0:d4:01:97:c9:97:5f:dc:69:4b:67:d9:55:47:ef:49:
         d4:08:a5:b8:0e:e5:b5:99:12:ec:55:d0:d1:6c:8a:29:58:9e:
         3f:22:bd:c4:23:e8:3d:1c:f6:fd:28:4e:12:27:17:c2:22:9e:
         12:60:56:82:d5:e9:a9:63:7f:0a:1a:67:b1:68:a5:19:c2:8f:
         aa:17:4e:ca:fc:63:36:e1:c9:22:32:e9:df:3e:e7:3a:f2:7d:
         4e:9f:51:a6:48:e7:d7:83:68:4b:07:88:82:08:3a:22:b6:02:
         3a:66:72:49:14:84:7d:e8:fd:86:5e:72:0a:65:a8:20:ab:ea:
         1f:c3:7c:05:a0:5f:dc:66:33:e6:79:dc:a1:b8:f6:de:0d:67:
         68:ed:c9:76:d0:73:2f:82:df:7a:d6:08:db:c1:db:c7:4d:4c:
         15:fc:91:b7:cb:4e:f1:73:63:7f:24:7f:a4:91:e7:66:da:8c:
         33:81:31:0c:4a:3a:1c:85:cd:10:28:e8:90:52:b8:94:d0:64:
         83:0e:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----