Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3131342e302f32332d3234203d3e203633383539.roa
File:                     3130332e3135362e3131342e302f32332d3234203d3e203633383539.roa (raw, json)
Hash identifier:          /6h1y7i9SSt57mFIYIImH9Pp4wxZTzzwvfxgpPJ1TiM=
Subject key identifier:   BF:A3:42:C4:B4:2D:1A:FB:4B:65:3C:20:32:EF:CC:26:E5:35:18:81
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6CDC94D808B7B43EE33E9B91E68E2E2C754120EF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3131342e302f32332d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:02 +0000
ROA not before:           Wed 10 Nov 2021 07:55:02 +0000
ROA not after:            Thu 10 Nov 2022 08:00:02 +0000
asID:                     63859
IP address blocks:        103.156.114.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:94:d8:08:b7:b4:3e:e3:3e:9b:91:e6:8e:2e:2c:75:41:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:02 2021 GMT
            Not After : Nov 10 08:00:02 2022 GMT
        Subject: CN=3082010A0282010100B94FB7E60D14D35C85639F003391015FC8B27884958080FF839537FA6BB8FEC01DAABDDF73610C182833F7B2C7BA9E5443CA88B32969A6CEF0B6B303A4D3E51D8018E9A11F391A80BFF7FAA0F4B255DAC94C3B11692AABDFD50067DD6CFF08DDD2A2371A5054EC8DABA2AE752922A95044906F56218B9422CB8CB575E9CC6D1FF480FDA450A4C4AB727DAF1A611DD9C5134B48AE60B15F7B7033A428DE632021E0436526E043D388EBE88100659ABDC6B57422D5A3012A86A482F08809291B7F3D487B20C4C46373320A148DCFA0E4E8080D34CBB861E2077F64F817333FB1CF4ED8D856F4E6996B07002E51010E778BC22EAA013C2FAE29374325B9BA6309170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:b7:e6:0d:14:d3:5c:85:63:9f:00:33:91:
                    01:5f:c8:b2:78:84:95:80:80:ff:83:95:37:fa:6b:
                    b8:fe:c0:1d:aa:bd:df:73:61:0c:18:28:33:f7:b2:
                    c7:ba:9e:54:43:ca:88:b3:29:69:a6:ce:f0:b6:b3:
                    03:a4:d3:e5:1d:80:18:e9:a1:1f:39:1a:80:bf:f7:
                    fa:a0:f4:b2:55:da:c9:4c:3b:11:69:2a:ab:df:d5:
                    00:67:dd:6c:ff:08:dd:d2:a2:37:1a:50:54:ec:8d:
                    ab:a2:ae:75:29:22:a9:50:44:90:6f:56:21:8b:94:
                    22:cb:8c:b5:75:e9:cc:6d:1f:f4:80:fd:a4:50:a4:
                    c4:ab:72:7d:af:1a:61:1d:d9:c5:13:4b:48:ae:60:
                    b1:5f:7b:70:33:a4:28:de:63:20:21:e0:43:65:26:
                    e0:43:d3:88:eb:e8:81:00:65:9a:bd:c6:b5:74:22:
                    d5:a3:01:2a:86:a4:82:f0:88:09:29:1b:7f:3d:48:
                    7b:20:c4:c4:63:73:32:0a:14:8d:cf:a0:e4:e8:08:
                    0d:34:cb:b8:61:e2:07:7f:64:f8:17:33:3f:b1:cf:
                    4e:d8:d8:56:f4:e6:99:6b:07:00:2e:51:01:0e:77:
                    8b:c2:2e:aa:01:3c:2f:ae:29:37:43:25:b9:ba:63:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:42:C4:B4:2D:1A:FB:4B:65:3C:20:32:EF:CC:26:E5:35:18:81
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3131342e302f32332d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:12:27:d0:74:1e:cc:ba:0d:60:a8:74:71:69:52:86:fb:77:
         e6:d0:7e:5f:a8:ec:a9:cf:3c:36:da:75:ab:b9:a5:8e:2b:84:
         85:77:89:bb:92:97:f1:9c:d7:45:2f:43:73:8a:73:c4:36:ed:
         39:7a:2c:d2:2b:db:72:9c:d0:d8:49:1e:93:d2:ca:e1:8b:90:
         6c:e6:57:f3:e5:38:d1:38:0c:62:be:b8:55:ea:a3:5a:79:62:
         62:e7:0b:d4:8a:ef:e2:6a:b9:6d:0e:66:6d:25:90:eb:db:c0:
         b4:4a:cf:de:42:b2:e4:56:0a:42:ba:d5:81:72:99:e5:6d:ba:
         e0:b4:c2:c8:ad:b2:3f:d8:6c:05:98:7b:22:c6:84:4b:b9:12:
         b0:e0:45:72:4d:ef:b3:c7:7a:20:df:b6:4e:c5:a9:48:41:58:
         a9:18:90:87:95:84:c5:1b:f4:50:f0:44:ea:5a:8c:d2:b8:1f:
         2c:b1:7f:43:13:ae:f3:3f:88:38:96:5d:06:17:8b:94:38:bb:
         a7:6b:ca:27:66:9f:24:a1:05:d5:04:21:f2:f3:8b:43:04:69:
         e7:75:84:88:81:71:c0:51:56:04:a3:b8:63:29:be:13:c1:44:
         6e:e0:79:eb:66:f1:5b:50:25:d6:af:92:67:76:0e:51:a2:96:
         96:6a:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----