Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136302e302f32332d3234203d3e203633383539.roa
File:                     3130332e3135362e3136302e302f32332d3234203d3e203633383539.roa (raw, json)
Hash identifier:          mpquzcipSnnMuArsbGP8B9e0eIVBoedWymjDVGAPZ3s=
Subject key identifier:   43:70:9A:94:A0:7E:D6:D6:F1:D1:FE:7C:0D:4C:AB:D1:57:ED:DB:F2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       64CC16946C93E2B78D143681D1D103DCF3EDC389
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136302e302f32332d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:02 +0000
ROA not before:           Wed 10 Nov 2021 07:55:02 +0000
ROA not after:            Thu 10 Nov 2022 08:00:02 +0000
asID:                     63859
IP address blocks:        103.156.160.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cc:16:94:6c:93:e2:b7:8d:14:36:81:d1:d1:03:dc:f3:ed:c3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:02 2021 GMT
            Not After : Nov 10 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ce:63:8a:8b:a5:7d:e8:2d:26:36:3c:28:83:
                    0d:d3:58:70:43:d9:93:24:84:30:6a:2e:0a:3a:4a:
                    79:59:96:bb:bb:8c:5f:a2:d5:62:dd:61:a3:0f:23:
                    26:98:96:f1:f8:09:54:7f:ba:d5:4b:56:6e:0f:2e:
                    fc:31:08:b4:ff:dc:fb:d1:37:66:d9:ff:99:a9:50:
                    68:29:ef:b3:4c:63:15:9f:30:6b:fd:44:4b:74:82:
                    e0:19:71:8b:8c:80:41:79:53:e1:fa:3c:23:04:71:
                    9e:a8:42:27:7c:c1:e8:f0:f0:86:fd:17:74:85:6f:
                    12:e7:5b:58:7c:f6:0a:61:01:b4:f5:77:33:40:be:
                    1d:2e:7a:6a:81:68:c2:8c:f4:e8:66:4e:e3:43:b8:
                    1c:6f:40:7d:fb:93:71:c4:d1:88:20:c3:a4:f0:18:
                    20:40:fb:2e:7d:14:9d:32:33:ca:d6:61:41:ff:e5:
                    9a:da:26:fa:ff:de:c1:1e:20:a2:55:1f:1a:d9:a4:
                    52:ea:38:0b:40:8e:b0:92:d7:e9:26:a8:af:95:56:
                    6b:ed:7e:3b:4f:41:94:ce:e7:82:88:ef:b2:f2:c8:
                    56:47:6a:f6:7d:36:9a:78:80:ab:b4:53:cd:46:7a:
                    34:ea:b4:0c:8c:90:8d:7c:64:36:09:ed:b9:4c:3e:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:9A:94:A0:7E:D6:D6:F1:D1:FE:7C:0D:4C:AB:D1:57:ED:DB:F2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136302e302f32332d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:be:c6:07:a6:11:a6:b4:cc:1a:95:8f:d7:40:71:51:ef:8b:
         58:41:a6:b6:e7:31:b4:b4:2d:8d:e6:b8:db:e1:92:5f:0f:d2:
         52:b0:62:0c:a7:fd:9c:e1:cb:4b:3a:80:1c:1d:d1:48:f8:5a:
         81:91:80:87:fa:68:c4:b0:80:99:3c:ea:a3:4f:1c:63:e9:ad:
         0f:f0:f6:28:8d:94:95:3f:21:cf:43:5b:10:f6:cf:25:96:d6:
         a3:1a:27:1c:be:db:e1:fd:d1:75:73:c4:14:36:f6:44:7d:19:
         59:55:bd:62:72:6b:73:8b:0d:06:04:c6:c1:59:d1:8e:e8:49:
         90:32:b7:09:d6:77:0c:86:78:ec:1a:74:21:10:48:96:ee:d7:
         db:5d:b7:05:78:e2:49:ed:64:e9:0d:f8:04:5e:7b:5c:7d:fe:
         d4:bd:08:1b:a5:25:21:d9:67:22:89:3a:ab:78:c5:10:9b:6c:
         1f:9a:c0:2a:30:ce:ab:2e:b3:4e:5c:cc:6d:a6:dd:23:0e:1c:
         8d:e1:46:66:a4:79:36:ae:f0:6a:c9:17:43:8e:5a:38:37:f2:
         68:4f:c3:cf:3f:42:28:ce:d9:9c:67:69:35:60:e1:91:0c:24:
         94:11:80:8e:1e:f5:35:c2:4a:18:16:76:08:88:bc:65:a8:2d:
         d5:4a:9a:49
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUZMwWlGyT4reNFDaB0dED3PPtw4kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA3NTUwMloX
DTIyMTExMDA4MDAwMlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFM0NFNjM4QThCQTU3REU4MkQyNjM2M0MyODgzMEREMzU4NzA0M0Q5OTMy
NDg0MzA2QTJFMEEzQTRBNzk1OTk2QkJCQjhDNUZBMkQ1NjJERDYxQTMwRjIzMjY5
ODk2RjFGODA5NTQ3RkJBRDU0QjU2NkUwRjJFRkMzMTA4QjRGRkRDRkJEMTM3NjZE
OUZGOTlBOTUwNjgyOUVGQjM0QzYzMTU5RjMwNkJGRDQ0NEI3NDgyRTAxOTcxOEI4
QzgwNDE3OTUzRTFGQTNDMjMwNDcxOUVBODQyMjc3Q0MxRThGMEYwODZGRDE3NzQ4
NTZGMTJFNzVCNTg3Q0Y2MEE2MTAxQjRGNTc3MzM0MEJFMUQyRTdBNkE4MTY4QzI4
Q0Y0RTg2NjRFRTM0M0I4MUM2RjQwN0RGQjkzNzFDNEQxODgyMEMzQTRGMDE4MjA0
MEZCMkU3RDE0OUQzMjMzQ0FENjYxNDFGRkU1OUFEQTI2RkFGRkRFQzExRTIwQTI1
NTFGMUFEOUE0NTJFQTM4MEI0MDhFQjA5MkQ3RTkyNkE4QUY5NTU2NkJFRDdFM0I0
RjQxOTRDRUU3ODI4OEVGQjJGMkM4NTY0NzZBRjY3RDM2OUE3ODgwQUJCNDUzQ0Q0
NjdBMzRFQUI0MEM4QzkwOEQ3QzY0MzYwOUVEQjk0QzNFRTY2QjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjzmOKi6V96C0mNjwogw3T
WHBD2ZMkhDBqLgo6SnlZlru7jF+i1WLdYaMPIyaYlvH4CVR/utVLVm4PLvwxCLT/
3PvRN2bZ/5mpUGgp77NMYxWfMGv9REt0guAZcYuMgEF5U+H6PCMEcZ6oQid8wejw
8Ib9F3SFbxLnW1h89gphAbT1dzNAvh0uemqBaMKM9OhmTuNDuBxvQH37k3HE0Ygg
w6TwGCBA+y59FJ0yM8rWYUH/5ZraJvr/3sEeIKJVHxrZpFLqOAtAjrCS1+kmqK+V
VmvtfjtPQZTO54KI77LyyFZHavZ9Npp4gKu0U81GejTqtAyMkI18ZDYJ7blMPuZr
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUQ3CalKB+1tbx0f58DUyr0Vft2/IwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM2MmUzMTM2MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5ygMA0GCSqG
SIb3DQEBCwUAA4IBAQCcvsYHphGmtMwalY/XQHFR74tYQaa25zG0tC2N5rjb4ZJf
D9JSsGIMp/2c4ctLOoAcHdFI+FqBkYCH+mjEsICZPOqjTxxj6a0P8PYojZSVPyHP
Q1sQ9s8lltajGiccvtvh/dF1c8QUNvZEfRlZVb1icmtziw0GBMbBWdGO6EmQMrcJ
1ncMhnjsGnQhEEiW7tfbXbcFeOJJ7WTpDfgEXntcff7UvQgbpSUh2WciiTqreMUQ
m2wfmsAqMM6rLrNOXMxtpt0jDhyN4UZmpHk2rvBqyRdDjlo4N/JoT8PPP0Ioztmc
Z2k1YOGRDCSUEYCOHvU1wkoYFnYIiLxlqC3VSppJ
-----END CERTIFICATE-----