Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37322e302f32332d3234203d3e20313430343737.roa
File:                     3130332e3135342e37322e302f32332d3234203d3e20313430343737.roa (raw, json)
Hash identifier:          dkQQELrWjJh1hIrIlY0lLhHU56ACeEqPXqq/zx1BW2o=
Subject key identifier:   66:FE:D3:65:8B:AB:16:78:DA:00:FF:F8:21:A1:51:70:6B:B5:8B:E9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4CDFA0ABAF8F506E9DC953BFE246BF1A49AFC5AD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37322e302f32332d3234203d3e20313430343737.roa
Signing time:             Thu 27 May 2021 04:42:43 +0000
ROA not before:           Thu 27 May 2021 04:37:43 +0000
ROA not after:            Fri 27 May 2022 04:42:43 +0000
asID:                     140477
IP address blocks:        103.154.72.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:df:a0:ab:af:8f:50:6e:9d:c9:53:bf:e2:46:bf:1a:49:af:c5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May 27 04:37:43 2021 GMT
            Not After : May 27 04:42:43 2022 GMT
        Subject: CN=3082010A0282010100D820D81092F976C14FCA87F03D180B05C26626419280685C09C1DF9C18FC5356DFEBE71F6167F92BB65F6EE38FE5631238328762D9721CFAAA015B9DF0B93E32952C44AC3C9B850AC942F279910CF28B5D522EDCFF6E04618B4C2B310AF42D67AF9FDCBED3E9625D76E87F54485DA7324F5E2461EB8F3CA6804C3887C3A85E72FEEF23936D1F0819C46C3BE7510C3A1D157D10AF4B8E40EFFD90184AB5E3EBCF2576724F041D5511C5FA59309F444E2CF96DF0FE6B7E16DACC3CCE820BD11E35437DC0A12C387AA25FCD77A02027517A6E3B01D3C44716794E827305B62E3F9343D9925DDC0C4E1C648FFFE4BD144FEE92E94CB15C07C3AC950505732311F0F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:d8:10:92:f9:76:c1:4f:ca:87:f0:3d:18:
                    0b:05:c2:66:26:41:92:80:68:5c:09:c1:df:9c:18:
                    fc:53:56:df:eb:e7:1f:61:67:f9:2b:b6:5f:6e:e3:
                    8f:e5:63:12:38:32:87:62:d9:72:1c:fa:aa:01:5b:
                    9d:f0:b9:3e:32:95:2c:44:ac:3c:9b:85:0a:c9:42:
                    f2:79:91:0c:f2:8b:5d:52:2e:dc:ff:6e:04:61:8b:
                    4c:2b:31:0a:f4:2d:67:af:9f:dc:be:d3:e9:62:5d:
                    76:e8:7f:54:48:5d:a7:32:4f:5e:24:61:eb:8f:3c:
                    a6:80:4c:38:87:c3:a8:5e:72:fe:ef:23:93:6d:1f:
                    08:19:c4:6c:3b:e7:51:0c:3a:1d:15:7d:10:af:4b:
                    8e:40:ef:fd:90:18:4a:b5:e3:eb:cf:25:76:72:4f:
                    04:1d:55:11:c5:fa:59:30:9f:44:4e:2c:f9:6d:f0:
                    fe:6b:7e:16:da:cc:3c:ce:82:0b:d1:1e:35:43:7d:
                    c0:a1:2c:38:7a:a2:5f:cd:77:a0:20:27:51:7a:6e:
                    3b:01:d3:c4:47:16:79:4e:82:73:05:b6:2e:3f:93:
                    43:d9:92:5d:dc:0c:4e:1c:64:8f:ff:e4:bd:14:4f:
                    ee:92:e9:4c:b1:5c:07:c3:ac:95:05:05:73:23:11:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:D3:65:8B:AB:16:78:DA:00:FF:F8:21:A1:51:70:6B:B5:8B:E9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e37322e302f32332d3234203d3e20313430343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:64:bc:3b:10:75:24:22:c1:f6:96:f9:17:70:13:a2:0d:
         5b:23:af:4a:88:7c:1f:aa:6e:ab:3a:31:5a:f2:b8:40:58:33:
         19:b0:0b:d7:1e:70:d1:c5:cd:dd:1f:83:f6:31:51:3d:76:6d:
         67:d1:fb:92:7c:4a:5c:c4:b2:38:5d:ed:f6:d4:ef:26:10:47:
         e5:f5:2f:5f:2f:96:12:81:79:10:19:87:8e:97:ed:6c:c3:f5:
         f7:c2:5c:d6:80:dd:38:de:5f:2e:30:02:8e:6e:a6:85:d4:a9:
         de:7e:08:6b:7d:2c:4b:66:e4:35:bd:a3:09:dc:b9:a6:94:40:
         ff:71:49:5d:c5:fc:c8:5c:46:dc:c7:ef:62:05:70:bd:6f:0b:
         12:dc:96:af:a5:bd:69:1c:69:3e:5d:7a:2f:a1:b5:55:f5:ad:
         70:22:18:f7:b8:10:5e:bd:77:c5:77:18:de:80:8c:dc:4e:ed:
         68:f3:3f:b4:a5:8e:88:9f:61:5d:ec:8b:e3:77:25:60:6b:a2:
         cf:80:b9:c0:25:1b:5b:34:44:86:37:e3:18:63:59:86:21:bf:
         ce:85:b9:3e:a0:0f:01:44:be:20:bf:65:f4:f9:73:9c:7d:46:
         c1:42:36:00:c0:50:19:bf:59:d7:f7:92:2d:c6:53:a3:01:3b:
         ab:01:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----