Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3231362e302f32332d3234203d3e203538333639.roa
File:                     3130332e3135362e3231362e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          cZxaPNtXCg/yjpg6zjFcHhfqLpyEjMJN+dfEgzVjrKY=
Subject key identifier:   26:FC:CC:D2:B7:D1:02:63:55:95:63:80:0C:95:AD:D2:F5:DE:C3:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3C9C98EE194512B5061784A4BA35F524C869356C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3231362e302f32332d3234203d3e203538333639.roa
Signing time:             Wed 13 Oct 2021 05:00:00 +0000
ROA not before:           Wed 13 Oct 2021 04:55:00 +0000
ROA not after:            Thu 13 Oct 2022 05:00:00 +0000
asID:                     58369
IP address blocks:        103.156.216.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9c:98:ee:19:45:12:b5:06:17:84:a4:ba:35:f5:24:c8:69:35:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 13 04:55:00 2021 GMT
            Not After : Oct 13 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:1e:ea:ba:cc:a2:b8:42:24:91:2c:e5:5e:
                    a3:f1:41:b5:cb:5f:a8:87:7f:25:ae:c0:8d:78:eb:
                    a2:63:6c:26:c0:c2:65:9a:36:ad:58:de:8c:b4:d1:
                    ad:49:a2:39:f8:37:83:ab:eb:95:f2:f8:bf:3c:49:
                    de:c2:65:1c:d0:41:7b:aa:f4:48:c9:a0:ff:93:8f:
                    52:b3:90:ca:90:d3:0e:ed:22:e5:58:3e:4c:11:f8:
                    6b:94:4d:c4:a9:24:3f:c6:96:7f:a8:52:90:c4:82:
                    7e:e7:45:00:f1:ef:51:a6:12:41:93:58:ee:2b:8e:
                    f6:e5:c8:52:bb:47:b1:3e:08:c0:4d:ab:11:28:ca:
                    a7:fc:40:89:83:24:3c:83:79:b1:3d:0b:aa:b4:c7:
                    64:a5:4a:82:10:cb:e1:b7:1b:b5:b9:05:f1:cb:b0:
                    56:8f:35:a6:02:13:07:e0:51:e9:6b:e5:26:5e:1f:
                    ac:46:a7:d0:ee:f9:68:d2:0e:8f:c2:8c:fe:97:14:
                    3d:71:1f:bf:69:21:d5:2f:d4:e8:9d:9a:80:a7:4e:
                    2d:83:e2:2f:02:4b:d1:88:59:a9:22:76:40:d5:6b:
                    8c:f9:3a:a8:4a:8e:ac:2e:b1:5d:7d:b3:dd:d5:2c:
                    0a:2d:1d:02:a3:55:a7:9f:14:08:c1:6e:33:ee:81:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:CC:D2:B7:D1:02:63:55:95:63:80:0C:95:AD:D2:F5:DE:C3:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3231362e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:31:83:03:26:bd:87:9c:be:0b:56:41:22:13:7c:a8:86:
         33:c0:2f:3c:b2:09:cd:ba:e0:d8:3e:6c:91:38:ef:a8:c0:c0:
         bd:a1:16:5d:18:bc:3c:a2:b4:5a:f7:1c:a9:18:09:e0:bf:bf:
         df:b9:60:a9:5b:d2:24:e8:58:1e:24:4f:2e:a2:25:7f:6e:e7:
         2f:2b:7f:ca:49:50:8a:f0:0d:02:8a:63:84:fe:1e:f7:1a:9d:
         c9:fe:93:fb:27:24:17:76:0a:22:4a:2b:db:24:a7:ab:e1:64:
         81:10:4b:5e:de:d4:39:b9:7f:1c:91:54:da:8a:64:95:39:d5:
         89:e0:c9:65:5a:a4:58:d4:5a:76:2b:f9:62:f6:59:04:ec:00:
         9e:49:34:fb:73:35:0d:b6:2f:1b:d6:df:2b:18:ab:39:18:3f:
         98:95:fc:58:d3:5d:37:56:de:0a:2b:ee:ba:f6:94:ab:76:84:
         10:31:1c:1d:b2:61:1a:16:1a:48:1c:9f:d0:68:77:82:98:37:
         c2:73:63:6b:f0:bf:7e:e0:b7:c7:69:a6:9c:08:37:4e:7d:d1:
         b5:b7:ca:b0:b3:e8:a9:18:c9:82:92:5f:fd:47:19:9a:81:0a:
         6e:a1:30:94:d3:82:1d:57:74:c0:78:5a:a2:e8:c3:1b:bc:0c:
         6b:a1:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----