Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e36302e302f32332d3234203d3e203633383539.roa
File:                     3130332e3135372e36302e302f32332d3234203d3e203633383539.roa (raw, json)
Hash identifier:          m0ajqjiI6t+s1HcB6jfBLIKi0L16QAN6F2QsYROzFXc=
Subject key identifier:   4E:F6:0F:0B:1C:E7:31:9C:BF:A6:D4:E7:2A:30:72:DE:F0:B1:E5:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23221423DB25F60541EF14B5C8E4F10B8D91B62D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e36302e302f32332d3234203d3e203633383539.roa
Signing time:             Thu 22 Jul 2021 09:43:42 +0000
ROA not before:           Thu 22 Jul 2021 09:38:42 +0000
ROA not after:            Fri 22 Jul 2022 09:43:42 +0000
asID:                     63859
IP address blocks:        103.157.60.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:22:14:23:db:25:f6:05:41:ef:14:b5:c8:e4:f1:0b:8d:91:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 22 09:38:42 2021 GMT
            Not After : Jul 22 09:43:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:d5:b5:49:88:1f:91:32:d2:82:66:c6:ce:
                    1d:7e:79:f3:5c:8c:35:65:a8:13:73:13:ae:09:44:
                    09:30:0a:e4:da:5a:c5:ab:64:09:18:71:8a:e6:2f:
                    c4:bd:48:6d:fc:f1:6e:0c:24:0f:00:72:54:31:9b:
                    49:c3:f9:ad:46:b3:a6:03:76:46:af:2c:26:73:9a:
                    b6:34:5c:1d:fb:b7:94:40:7a:78:a7:8e:e8:f3:05:
                    f0:c6:73:63:ed:98:96:a5:36:91:81:1f:39:67:9c:
                    35:2d:76:a7:e7:72:63:47:31:54:3a:e5:dc:6e:88:
                    55:5d:e4:ee:18:cc:04:8d:ef:e6:75:e8:2e:1f:2f:
                    a9:1e:fa:b1:67:7b:51:3b:5b:5e:4a:84:04:98:1b:
                    45:f6:78:44:c9:b9:d0:7d:ee:3f:ba:82:a9:35:8e:
                    95:c0:c8:9b:72:d8:d3:6f:09:1d:77:0a:95:da:45:
                    33:7b:8f:78:fd:04:00:cd:37:1f:27:f1:26:31:1d:
                    7a:a7:1b:0c:88:24:f3:0f:02:e3:83:b2:ef:3c:f0:
                    7a:53:28:d7:81:ac:a5:ae:7b:76:b3:23:67:97:7f:
                    4a:28:d4:45:71:b5:b5:3a:0d:7e:21:24:d9:9f:cf:
                    bc:ab:23:71:fb:58:97:e8:f4:f7:f0:40:47:ea:05:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F6:0F:0B:1C:E7:31:9C:BF:A6:D4:E7:2A:30:72:DE:F0:B1:E5:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135372e36302e302f32332d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:53:ba:f7:6c:dc:40:c9:38:1b:f6:b3:bc:68:6e:7c:3c:
         03:e2:dc:ac:ef:39:57:6e:aa:23:fa:1c:ac:d3:eb:7f:05:16:
         d8:f5:9e:bf:10:f1:5b:60:d3:08:9c:e3:dd:9a:73:95:8d:e6:
         a0:5f:27:40:f0:2a:64:fb:86:6e:31:72:44:cf:02:41:23:0a:
         71:3b:41:34:ef:bb:77:55:ac:be:d7:6b:8e:d8:3b:ef:a7:92:
         5a:3a:72:8a:6a:7e:7b:d2:bd:a0:63:58:0f:77:a8:f1:fd:e6:
         10:61:70:9f:21:f7:0d:55:7c:3c:c7:a3:5b:49:2e:bf:60:76:
         ae:cc:fd:e1:3e:8b:4f:76:05:2a:ed:53:dd:f8:ec:59:9e:23:
         5c:d6:7b:c8:42:7b:a2:08:f6:85:dc:2b:08:c3:16:f3:32:5a:
         79:f8:a7:26:8a:dd:13:49:61:80:49:63:73:02:d8:b3:07:00:
         e8:f6:96:b2:a0:2c:be:e2:b4:14:9b:e9:2e:66:b6:69:49:22:
         d0:8f:79:72:5e:af:c3:a3:06:b5:d3:9f:f6:ec:70:02:be:ef:
         9a:4a:4a:60:b9:bf:91:f3:fb:c9:fb:60:8f:c7:9e:c9:21:e1:
         dc:16:67:d5:e8:f5:1e:11:be:7d:6f:1e:e0:90:b8:e5:bd:5d:
         3b:9c:7a:9f
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUIyIUI9sl9gVB7xS1yOTxC42Rti0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDcyMjA5Mzg0MloX
DTIyMDcyMjA5NDM0MlowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNEZGRDVCNTQ5ODgxRjkxMzJEMjgyNjZDNkNFMUQ3RTc5RjM1QzhDMzU2
NUE4MTM3MzEzQUUwOTQ0MDkzMDBBRTREQTVBQzVBQjY0MDkxODcxOEFFNjJGQzRC
RDQ4NkRGQ0YxNkUwQzI0MEYwMDcyNTQzMTlCNDlDM0Y5QUQ0NkIzQTYwMzc2NDZB
RjJDMjY3MzlBQjYzNDVDMURGQkI3OTQ0MDdBNzhBNzhFRThGMzA1RjBDNjczNjNF
RDk4OTZBNTM2OTE4MTFGMzk2NzlDMzUyRDc2QTdFNzcyNjM0NzMxNTQzQUU1REM2
RTg4NTU1REU0RUUxOENDMDQ4REVGRTY3NUU4MkUxRjJGQTkxRUZBQjE2NzdCNTEz
QjVCNUU0QTg0MDQ5ODFCNDVGNjc4NDRDOUI5RDA3REVFM0ZCQTgyQTkzNThFOTVD
MEM4OUI3MkQ4RDM2RjA5MUQ3NzBBOTVEQTQ1MzM3QjhGNzhGRDA0MDBDRDM3MUYy
N0YxMjYzMTFEN0FBNzFCMEM4ODI0RjMwRjAyRTM4M0IyRUYzQ0YwN0E1MzI4RDc4
MUFDQTVBRTdCNzZCMzIzNjc5NzdGNEEyOEQ0NDU3MUI1QjUzQTBEN0UyMTI0RDk5
RkNGQkNBQjIzNzFGQjU4OTdFOEY0RjdGMDQwNDdFQTA1NURFMzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/9W1SYgfkTLSgmbGzh1+
efNcjDVlqBNzE64JRAkwCuTaWsWrZAkYcYrmL8S9SG388W4MJA8AclQxm0nD+a1G
s6YDdkavLCZzmrY0XB37t5RAeninjujzBfDGc2PtmJalNpGBHzlnnDUtdqfncmNH
MVQ65dxuiFVd5O4YzASN7+Z16C4fL6ke+rFne1E7W15KhASYG0X2eETJudB97j+6
gqk1jpXAyJty2NNvCR13CpXaRTN7j3j9BADNNx8n8SYxHXqnGwyIJPMPAuODsu88
8HpTKNeBrKWue3azI2eXf0oo1EVxtbU6DX4hJNmfz7yrI3H7WJfo9PfwQEfqBV3j
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUTvYPCxznMZy/ptTnKjBy3vCx5YgwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNTM3MmUzNjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWedPDANBgkqhkiG
9w0BAQsFAAOCAQEAAshTuvds3EDJOBv2s7xobnw8A+LcrO85V26qI/ocrNPrfwUW
2PWevxDxW2DTCJzj3ZpzlY3moF8nQPAqZPuGbjFyRM8CQSMKcTtBNO+7d1Wsvtdr
jtg776eSWjpyimp+e9K9oGNYD3eo8f3mEGFwnyH3DVV8PMejW0kuv2B2rsz94T6L
T3YFKu1T3fjsWZ4jXNZ7yEJ7ogj2hdwrCMMW8zJaefinJordE0lhgEljcwLYswcA
6PaWsqAsvuK0FJvpLma2aUki0I95cl6vw6MGtdOf9uxwAr7vmkpKYLm/kfP7yftg
j8eeySHh3BZn1ej1HhG+fW8e4JC45b1dO5x6nw==
-----END CERTIFICATE-----