Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136342e302f32332d3234203d3e203633383539.roa
File:                     3130332e3135362e3136342e302f32332d3234203d3e203633383539.roa (raw, json)
Hash identifier:          nrHPayORGuyB53oapXLwIkmc3C+bqvv1Tz1ZfLmErD0=
Subject key identifier:   DE:94:C5:56:D7:48:9D:A9:8C:40:F8:15:5A:5E:46:DE:F2:4E:26:77
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       74CD05DF5E2B27A1A852E8F522CDAFAA6306A095
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136342e302f32332d3234203d3e203633383539.roa
Signing time:             Wed 10 Nov 2021 08:00:03 +0000
ROA not before:           Wed 10 Nov 2021 07:55:03 +0000
ROA not after:            Thu 10 Nov 2022 08:00:03 +0000
asID:                     63859
IP address blocks:        103.156.164.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cd:05:df:5e:2b:27:a1:a8:52:e8:f5:22:cd:af:aa:63:06:a0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 10 07:55:03 2021 GMT
            Not After : Nov 10 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:64:2a:83:5e:e0:0e:c1:f8:e5:c3:53:4d:
                    39:25:07:18:71:cf:7c:9c:89:c9:5c:e6:6b:7b:78:
                    e6:ea:c2:12:1c:da:19:80:94:7c:ed:b0:b0:0c:a9:
                    dc:5d:b7:0f:ea:fa:6c:f9:37:5a:41:9d:0f:4d:fd:
                    b8:18:eb:e5:83:eb:dc:76:2b:4c:22:e7:7f:2e:39:
                    e6:fa:eb:4d:39:5d:46:9e:74:76:71:fe:35:e3:ce:
                    ca:6c:f4:77:2d:b2:23:c5:a6:b2:d0:1b:d6:a9:87:
                    60:a9:f7:16:b1:10:7b:fb:b4:2f:82:f2:2a:a7:5f:
                    9c:0f:4d:ed:6d:ba:90:b6:fe:3c:75:6e:41:be:48:
                    f5:4f:34:18:40:b8:6d:59:80:f0:78:9b:e2:a4:26:
                    97:de:82:eb:b5:29:9d:ec:3a:bd:47:ff:55:b6:5b:
                    e5:d2:57:f4:d5:a9:44:6b:ef:02:91:56:3a:a9:7b:
                    6b:19:00:57:c3:7b:36:a3:16:43:87:f0:88:6b:cc:
                    fc:5c:18:2e:31:ba:cb:05:3b:16:4d:de:38:f2:df:
                    36:77:75:c8:6a:85:2a:9d:d0:13:2e:9d:29:14:b8:
                    5b:27:cc:00:68:e8:75:3f:b1:ac:cc:25:27:00:02:
                    73:25:77:19:f7:bb:8c:b8:e3:0a:25:65:d2:8b:bf:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:94:C5:56:D7:48:9D:A9:8C:40:F8:15:5A:5E:46:DE:F2:4E:26:77
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3136342e302f32332d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:67:1e:ef:aa:9a:c5:75:6b:d0:85:54:d7:b6:ae:67:89:
         00:d5:4e:21:25:de:a0:ae:38:87:3d:4c:c3:7e:7a:10:e1:d9:
         1b:96:37:30:9c:0c:e1:14:bc:37:3d:66:23:ea:99:23:51:43:
         e8:46:8d:9c:f6:c1:a3:96:f9:17:31:cf:89:71:8d:3b:f8:7c:
         80:79:fb:9b:00:72:d0:69:88:c0:98:9c:40:04:08:88:9a:e2:
         10:9f:c7:8f:0f:f5:ea:d3:3a:78:cb:b1:9e:07:14:eb:cb:b9:
         4e:f6:f6:96:fe:11:b5:a2:00:a0:0b:75:7b:f6:78:bc:9d:ec:
         27:b8:8a:5e:c9:91:02:6a:cd:e1:44:2e:54:f1:08:44:e9:38:
         3f:45:fc:4b:0d:20:59:bd:fe:a1:fd:f8:f3:14:72:c0:a3:18:
         86:db:b0:59:dc:b4:df:ff:e7:5b:cb:7a:1e:a9:a5:d5:87:04:
         c4:0c:3c:d3:f9:98:bc:c7:3a:c9:af:a1:a2:87:ab:5c:12:30:
         ca:fa:61:0b:73:34:54:57:2c:ad:65:e6:c5:33:d8:95:8f:ff:
         40:2c:58:77:e9:e6:78:73:e7:e2:af:a6:d5:68:29:16:57:1e:
         e7:44:56:d4:f2:5b:d6:30:c9:4a:b3:56:70:51:35:d5:ae:2f:
         29:85:7e:6e
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUdM0F314rJ6GoUuj1Is2vqmMGoJUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTExMDA3NTUwM1oX
DTIyMTExMDA4MDAwM1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEMUIxNjQyQTgzNUVFMDBFQzFGOEU1QzM1MzREMzkyNTA3MTg3MUNGN0M5
Qzg5Qzk1Q0U2NkI3Qjc4RTZFQUMyMTIxQ0RBMTk4MDk0N0NFREIwQjAwQ0E5REM1
REI3MEZFQUZBNkNGOTM3NUE0MTlEMEY0REZEQjgxOEVCRTU4M0VCREM3NjJCNEMy
MkU3N0YyRTM5RTZGQUVCNEQzOTVENDY5RTc0NzY3MUZFMzVFM0NFQ0E2Q0Y0Nzcy
REIyMjNDNUE2QjJEMDFCRDZBOTg3NjBBOUY3MTZCMTEwN0JGQkI0MkY4MkYyMkFB
NzVGOUMwRjRERUQ2REJBOTBCNkZFM0M3NTZFNDFCRTQ4RjU0RjM0MTg0MEI4NkQ1
OTgwRjA3ODlCRTJBNDI2OTdERTgyRUJCNTI5OURFQzNBQkQ0N0ZGNTVCNjVCRTVE
MjU3RjRENUE5NDQ2QkVGMDI5MTU2M0FBOTdCNkIxOTAwNTdDMzdCMzZBMzE2NDM4
N0YwODg2QkNDRkM1QzE4MkUzMUJBQ0IwNTNCMTY0RERFMzhGMkRGMzY3Nzc1Qzg2
QTg1MkE5REQwMTMyRTlEMjkxNEI4NUIyN0NDMDA2OEU4NzUzRkIxQUNDQzI1Mjcw
MDAyNzMyNTc3MTlGN0JCOENCOEUzMEEyNTY1RDI4QkJGRkJCQjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsWQqg17gDsH45cNTTTkl
Bxhxz3yciclc5mt7eObqwhIc2hmAlHztsLAMqdxdtw/q+mz5N1pBnQ9N/bgY6+WD
69x2K0wi538uOeb66005XUaedHZx/jXjzsps9HctsiPFprLQG9aph2Cp9xaxEHv7
tC+C8iqnX5wPTe1tupC2/jx1bkG+SPVPNBhAuG1ZgPB4m+KkJpfeguu1KZ3sOr1H
/1W2W+XSV/TVqURr7wKRVjqpe2sZAFfDezajFkOH8IhrzPxcGC4xussFOxZN3jjy
3zZ3dchqhSqd0BMunSkUuFsnzABo6HU/sazMJScAAnMldxn3u4y44wolZdKLv/u7
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQU3pTFVtdInamMQPgVWl5G3vJOJncwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM2MmUzMTM2MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5ykMA0GCSqG
SIb3DQEBCwUAA4IBAQCG9mce76qaxXVr0IVU17auZ4kA1U4hJd6grjiHPUzDfnoQ
4dkbljcwnAzhFLw3PWYj6pkjUUPoRo2c9sGjlvkXMc+JcY07+HyAefubAHLQaYjA
mJxABAiImuIQn8ePD/Xq0zp4y7GeBxTry7lO9vaW/hG1ogCgC3V79ni8newnuIpe
yZECas3hRC5U8QhE6Tg/RfxLDSBZvf6h/fjzFHLAoxiG27BZ3LTf/+dby3oeqaXV
hwTEDDzT+Zi8xzrJr6Gih6tcEjDK+mELczRUVyytZebFM9iVj/9ALFh36eZ4c+fi
r6bVaCkWVx7nRFbU8lvWMMlKs1ZwUTXVri8phX5u
-----END CERTIFICATE-----