Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235322e302f32332d3234203d3e20313431313033.roa
File:                     3130332e3135362e3235322e302f32332d3234203d3e20313431313033.roa (raw, json)
Hash identifier:          JgNBgio5ZHZCyl5Y00GzrMavJpXpN6i8xJpUkkii/5k=
Subject key identifier:   24:C8:30:E0:F3:44:5C:D0:78:9E:14:2A:C9:C8:F2:03:29:1E:50:07
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       74A21D32E898DFEDFF54CD6247DB78C3659871C6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235322e302f32332d3234203d3e20313431313033.roa
Signing time:             Thu 17 Jun 2021 09:47:22 +0000
ROA not before:           Thu 17 Jun 2021 09:42:22 +0000
ROA not after:            Fri 17 Jun 2022 09:47:22 +0000
asID:                     141103
IP address blocks:        103.156.252.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:1d:32:e8:98:df:ed:ff:54:cd:62:47:db:78:c3:65:98:71:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 17 09:42:22 2021 GMT
            Not After : Jun 17 09:47:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:88:b0:c7:ba:42:48:91:a5:ce:5b:27:22:
                    9b:ee:89:9f:a6:4e:29:62:a3:8d:3e:df:38:be:25:
                    04:b9:ab:72:8d:29:51:b6:78:1c:3d:ff:a4:ab:78:
                    bc:90:0c:5d:9b:69:a6:14:23:ec:9e:e4:9b:b3:33:
                    ed:d8:1c:8f:b3:71:5c:2f:4a:05:8b:24:b4:87:1d:
                    fb:bd:f4:92:67:dd:8f:5e:e3:12:47:b7:86:e9:27:
                    e7:95:9d:d2:17:68:31:44:7f:d6:f1:5b:d0:37:45:
                    4d:33:99:c8:bf:b8:75:a6:4d:23:0d:3a:90:76:32:
                    d9:43:52:29:43:67:62:87:bb:9a:e9:5e:69:f5:74:
                    38:66:ba:51:f4:98:6c:3c:ec:55:78:1b:da:dd:73:
                    8a:23:21:a7:eb:e6:4d:d7:3a:6c:0d:c7:9d:a0:6e:
                    c3:d6:59:25:08:69:2b:31:23:1c:a5:5c:60:19:fc:
                    4b:2d:2e:e6:21:a3:ee:fc:1e:ba:cd:a6:19:d3:c0:
                    c4:75:1f:0d:f2:3c:bf:6b:5e:b9:97:2e:dd:09:4f:
                    76:aa:7d:b7:49:3a:8a:0a:48:43:7c:a1:19:ec:27:
                    66:f7:5e:4c:d8:06:86:41:74:ab:9a:c9:78:d1:ac:
                    0a:ac:39:24:90:fd:9c:a4:82:5c:0f:62:22:e9:cb:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:30:E0:F3:44:5C:D0:78:9E:14:2A:C9:C8:F2:03:29:1E:50:07
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135362e3235322e302f32332d3234203d3e20313431313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:da:c1:40:b1:30:f5:3c:5a:a6:30:72:4d:6a:cb:88:cb:
         ce:7e:f1:5f:32:9d:d2:6a:d9:27:2e:3b:6f:d9:8a:bd:7e:3f:
         48:8e:d1:cf:0a:66:a6:e8:a5:ca:8d:95:8a:fe:09:d2:b2:f6:
         c0:37:1d:7f:b6:9c:86:de:da:22:66:08:d6:83:19:74:35:85:
         dd:e0:91:5a:3b:e6:ac:19:56:5f:2e:a1:64:bb:5c:0b:0b:0d:
         cb:17:af:93:b3:7b:0a:53:26:83:79:8c:f5:66:e8:a0:7f:68:
         2b:c4:83:f5:34:10:f5:c4:a5:eb:61:9f:d3:63:e8:f2:1a:7a:
         e7:c2:d8:57:d4:ba:2e:cb:d9:77:b4:23:e0:23:96:5f:ac:98:
         89:68:d7:37:71:64:08:aa:48:a0:be:b4:38:7d:8b:62:9a:a0:
         48:70:4f:a2:02:7f:b9:5b:d1:ed:a5:49:b2:17:ed:f5:52:01:
         7f:3d:4c:95:a0:4a:97:b5:d0:80:72:84:b8:49:72:3c:f7:26:
         40:f3:67:51:68:4c:a6:19:de:02:bc:96:ed:f7:52:8e:aa:bc:
         0f:1e:dc:aa:e7:a7:0d:98:bb:c3:ab:33:87:e4:60:b5:39:74:
         29:fb:00:06:69:ef:e4:1e:87:ce:85:c5:a2:7c:f1:7c:ac:93:
         c4:12:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----