Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e34362e302f32332d3234203d3e20313431303439.roa
File:                     3130332e3135352e34362e302f32332d3234203d3e20313431303439.roa (raw, json)
Hash identifier:          OlWPdXd3aE8j1ZH3EtfiW9b+7RSnvoMkmcDaFHThlYY=
Subject key identifier:   CF:21:DC:0E:9C:9F:EF:9B:AE:AB:97:78:FC:63:82:82:16:36:F5:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       02469ACB3B1D1A068A976D75FDF8387479595D01
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e34362e302f32332d3234203d3e20313431303439.roa
Signing time:             Tue 13 Jul 2021 09:00:45 +0000
ROA not before:           Tue 13 Jul 2021 08:55:45 +0000
ROA not after:            Wed 13 Jul 2022 09:00:45 +0000
asID:                     141049
IP address blocks:        103.155.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:9a:cb:3b:1d:1a:06:8a:97:6d:75:fd:f8:38:74:79:59:5d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 13 08:55:45 2021 GMT
            Not After : Jul 13 09:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:4a:5d:2c:58:30:e1:d9:f6:ff:7d:11:14:
                    d2:ab:17:40:c1:58:f0:91:92:fa:a9:5a:5c:48:39:
                    9f:9e:dd:db:2d:f1:ae:f7:f7:89:14:4f:b0:75:e0:
                    01:14:74:5b:9f:4a:aa:4e:d6:f1:21:85:ae:68:91:
                    21:61:5c:99:74:ec:ef:5f:79:29:cc:bb:c3:ee:be:
                    0e:a7:33:27:e2:2b:7a:d7:8b:71:30:17:c9:9c:96:
                    3d:e6:9d:58:8b:73:d5:bf:db:37:74:3b:5c:a0:63:
                    65:72:97:a6:7d:f7:f5:10:80:c5:59:78:a0:ed:8b:
                    ef:44:13:02:71:4e:6d:ce:8c:3c:c1:fd:22:0a:58:
                    da:dc:f5:99:2f:2a:36:8f:a0:c9:46:14:76:82:40:
                    60:7d:fa:69:b2:9c:14:3b:61:42:68:73:51:49:43:
                    7d:0c:93:a7:a3:db:fa:83:0d:9e:95:50:36:23:da:
                    16:fc:62:32:a2:ba:8e:56:0b:f1:4a:93:ec:1c:9e:
                    30:63:da:b1:7e:1b:00:99:7a:f4:d2:f8:9d:95:59:
                    36:df:b1:f1:db:03:af:8d:2d:bf:1a:25:ae:43:fc:
                    2b:05:25:3d:64:48:fa:71:d1:da:5e:65:90:60:b5:
                    74:8e:cd:d3:9b:65:c7:39:4b:da:0d:46:b4:2e:a7:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:DC:0E:9C:9F:EF:9B:AE:AB:97:78:FC:63:82:82:16:36:F5:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135352e34362e302f32332d3234203d3e20313431303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:8d:33:eb:cd:70:d0:60:73:a4:7f:db:3c:fc:b2:f7:34:
         2f:ed:de:86:fd:f0:5c:a6:fb:e1:32:7f:fc:31:9f:25:35:57:
         1f:cb:5d:0c:62:89:db:d7:bd:7b:85:80:0b:f9:cf:17:a8:6b:
         29:1b:e5:b8:03:e1:13:b5:18:d3:e4:2c:e9:a1:ef:1d:dc:e5:
         2c:b6:b9:5c:17:e9:1a:5d:92:55:8a:9f:ce:52:4d:e0:fe:ed:
         17:3c:e4:4e:c9:45:f1:a3:c1:ff:b7:1c:f4:3d:29:a7:3f:d8:
         f6:4d:f5:cb:2a:31:86:30:9d:93:a7:33:08:af:14:e1:d5:2d:
         08:f2:dd:1f:f9:0e:86:d5:2d:9b:58:ec:e5:7e:46:b9:5d:53:
         0b:04:22:2a:aa:a7:02:1b:3b:a4:98:b3:62:e1:f6:24:67:eb:
         6f:90:82:64:90:27:f6:41:d5:ba:ba:38:8d:08:c2:61:37:bc:
         48:19:95:b2:56:ce:63:68:e9:36:4d:ce:7e:11:bc:03:3d:72:
         dd:fa:32:d5:d6:c0:ee:32:5b:ec:53:02:1a:f6:0a:03:8f:7f:
         51:24:d9:b6:91:c6:90:8e:3d:47:86:68:4b:40:af:8a:bd:fb:
         73:4a:bc:4e:eb:3c:e0:6a:22:f4:18:b9:07:c0:e7:6d:c5:e8:
         11:a6:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----